Privacy Policy

What does this policy cover?

This policy describes how AUX CLOUD COMMERCE (MALAYSIA) SDN.BHD. (also referred to as "AUX", "we" or "us") will make use of your data when you interact with us and the AUX websites, systems and Apps ("AUX Platforms"), and this privacy policy will explain how we will collect, handle, use, store, share and protect your personal data when you:
(a) Making a purchase for our products and services;
(b) Provide related services as our business partner (e.g. installation, after-sales, order delivery) to our customers;
(c) Visiting and/or using our website; It also describes your data protection rights, including the right to object to some of the processing which AUX carries out. More information about your rights, and how to exercise them, is set out in the “Your choices and rights” section.

Topics

- Personal data we may collect about you - How do we collect your data？
- How do we use this data, and what is the legal basis for this use？
- How do we share your personal data？ - Where do we transfer your personal data？
- Your choices and rights - Security - How long do we retain your personal data？
- Updates to this privacy policy
- Contact us

Personal data we may collect about you

Where we refer to personal data below, we mean any information relating to an identified or identifiable living person.
We may collect and process personal data about you when you interact with us and the AUX Platforms, and this privacy policy will explain how our organization uses the personal data we collect from you when you use our website. This includes:
A. Clients’Data including, but not limited to:-

1) Basic Personal Data and Identity Information: name, phone number, email address, address

2) Property Information: bank account (natural persons only)

3) Device Information and Online Identity Information: unique equipment identifier, IP address, platform affiliation, login device, operating system, device model.
B. Business Partners’Data including, but not limited to:-

(a) Installers’Data:

1) Basic Personal Data and Identity Information: name, phone number, account name, ID card, country, email address (optional), address

2) Property Information: bank account, information related to insurance order (optional)

3) Location Information: precise location information

4) Device Information and Online Identity Information: device unique identifier, IP address, platform affiliation, login device, operating system, device model.

(b) After-Sales Service Providers’Data:

1) Basic Personal Data and Identity Information: name, ID card and phone number of legal representative, address.
Our Company may also receive your data (only for drivers) indirectly from our Business Partner, including name, phone number, ID card, license plate number

How do we use this data, and what is the legal basis for this use?

We will only use your personal data for the purposes and legal bases set out below:

Purpose	Legal Basis
We will collect and use Basic Personal Data and Identity Information of Clients’Data in order to maintain customer relationship and fulfil contract	Necessary for the performance of our contract with you, and your consent where such consent is required and obtained.
We will collect and use Property Information of Clients’Data in order to carry out financial settlements.	Your consent where such consent is required and obtained.
We will collect and use Basic Personal Data and Identity Information of Installers’Data in order to register account and send transactional email.	Your consent where such consent is required and obtained.
We will collect and use Property Information of Installer Data in order to carry out financial settlements and verify policy authenticity.	Your consent where such consent is required and obtained.
We will collect and use Location Information of Installers’Data in order to calculate the distance to the service center.	Your consent where such consent is required and obtained.
We will collect and use Basic Personal Data and Identity Information of Drivers’Data for the purpose of business corporation.	Your consent where such consent is required and obtained.
We will collect and use Basic Personal Data and Identity Information of After-Sales Service Provider Data while sign the contract.	Necessary for the performance of our contract with you.
We will collect and use Device Information and Online Identity Information of Clients’and Installers’Data for the purpose of ensuring security.	Your consent where such consent is required and obtained.

There are instances where we have a legitimate interest to use your data. Our legitimate interest will vary depending on what we are using your data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Where we process personal data on the basis of a legitimate interest, then – as required by data protection law – we have carried out a balancing test to document our interests, to consider what the impact of the processing will be on individuals and to determine whether individuals interests outweigh our interests in the processing taking place. You can obtain more information about this balancing test by using the contact details at the end of the policy.

Where do we transfer your personal data？

Personal data that we collect from you may be stored in servers located in Singapore. Whereas the headquarter of Aux is in PRC, your personal data will be disclosed to the headquarter , assisting us with hosting and maintenance of the platform. Where these locations do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect the transfer of your personal data to these countries.

Category	Mechanism	Country
Basic Personal Data and Identity Information; Property Information; Location Information; Device Information	SCCs	Singapore
Basic Personal Data and Identity Information; Property Information; Location Information; Device Information	SCCs	China

A copy of the relevant mechanism can be obtained for your review on request by using the contact details below.

Your choices and rights

You have the following rights:

Right	Summary
The right to information	Enables you to receive information regarding whether we are processing your personal data
The right to rectification	Enables you to correct any inaccurate or incomplete personal data we hold about you
The right to erasure	Enables you to ask us to delete your personal data in certain circumstances
The right to restrict processing	Enables you to ask us to halt the processing of your personal data in certain circumstances. You have the right to request the restriction of the processing of your information where (a) you are challenging the accuracy of the information, (b) the information has been unlawfully processed, but you are opposing the deletion of that information, (c) where you need the information to be retained for the pursuit or defence of a legal claim, or (d) you have objected to processing and you are awaiting the outcome of that objection request.
The right to object	Enables you to object to us processing your personal data on the basis of our legitimate interests (or those of a third party), including processing for direct marketing purposes - your objection will be upheld, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us
The right to data portability	Enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep.
If you wish to exercise any of these rights, please contact us at the contact details set out below.
Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may however have other legal grounds for processing your data for other purposes, such as those set out above.
If you have unresolved concerns, you have the right to lodge a complaint to a data protection authority in the country that you reside in or, the country of your place of work or the country where the alleged infringement took place.

Security

We protect your personal data from loss, misuse, disclosure, alteration, unavailability, unauthorised access and destruction and maintain the confidentiality of your personal data. This is also ensured using appropriate technical and organisational measures. We choose our security measures taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons and continuously improve them.

How long do we retain your personal data？

We only maintain the personal data we collect for as long as it is necessary for us to provide our services, for as long as it is required to fulfil the purposes of the processing of personal data, or as required by law.
We determine the retention period of personal data based primarily on the following criteria:
1. To fulfill the transactional purpose related to you, maintain corresponding transaction and business records, and to address any queries or complaints you may have;
2. Whether you have agreed to a longer retention period;
3. Based on the needs related to the statute of limitations for litigation;
4. Whether there are other special agreements or legal regulations concerning the retention period. After exceeding the retention period, we will delete or anonymize your personal information in accordance with applicable laws. With regards to the use and retention period of cookies, please read our Cookie Policy
After exceeding the retention period, we will delete or anonymize your personal information in accordance with applicable laws.
With regards to the use and retention period of cookies, please read our Cookie Policy

Updates to this privacy policy

We reserve the right to update this Privacy Policy at any time, and we will provide you with a new Privacy Policy when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.

Contact us

If you wish to access, correct, update or erase your Personal Information, or if you have questions about AUX 's privacy practices in general or a complaint, submit your request via marketing@auxair.com . In the event that you are located in a country that is governed by the General Data Protection Regulation and would like to contact the local Data Protection Officer, please indicate this in the email and your inquiry will be directed to the appropriate person.