MASTER CORPORATE PERSONAL DATA PROTECTION POLICY

Your privacy is important to us. The purpose of this Privacy Policy is to inform you of how Malaysia Dairy Industries Pte Ltd manages personal data in accordance with the Personal Data Protection Act 2012 (“the Act”). Please take a moment to read this Privacy Policy so that you know and understand the purposes for which we collect, use and disclose your Personal Data.

By interacting with us, submitting information to us or signing up for any promotions or services offered by us, you agree and consent to Malaysia Dairy Industries Private Limited, its related corporations and affiliates, (collectively referred to herein as "MDI", "us", "we" or "our"), as well as our respective representatives collecting, using, disclosing and sharing amongst themselves your Personal Data, and disclosing such Personal Data to MDI’s authorised service providers and relevant third parties in the manner set forth in this Privacy Policy.

This Privacy Policy supplements but does not supersede nor replace any other consents you may have previously provided to MDI nor does it affect any rights which MDI may have at law in connection with the collection, use or disclosure of your Personal Data. MDI may from time to time update this Privacy Policy to ensure that this Privacy Policy is consistent with our future developments, industry trends and/or any changes in legal or regulatory requirements. Subject to your rights at law, you agree to be bound by the prevailing terms of the Privacy Policy as updated from time to time on our websites. Please check regularly for updated information on the handling of your Personal Data.

Your Personal Data

1.1

In this Privacy Policy, “Personal Data” refers to any data or information about you from which you can be identified either (a) from that data; or (b) from that data and other information to which we have or are likely to have access. Examples of such Personal Data which you may provide to us include (depending on the nature of your interaction with us:

(a)

your name, NRIC, passport or other identification number, telephone number(s), mailing address, email address and any other information relating to you which you have provided us in any forms you may have submitted to us, or in other forms of interaction with you;

(b)

information about your use of MDI’s website and services, including cookies, IP address, subscription account details and membership details, but only to the extent that MDI may identify you from such information;

(c)

your employment history, education background, and income levels;

Collection of Personal Data

2.1

Generally, MDI collects your Personal Data in the following ways:

(a)

when you submit forms relating to any of our products;

(b)

when you register for or use any of our products on websites owned or operated by us or when you register as a member of websites owned and/or operated by us, or use services on such websites;

(c)

when you interact with our customer service officers;

(d)

when you subscribe to our products online;

(e)

when you establish any online accounts with us;

(f)

when you request that we contact you;

(g)

when you are contacted by, and respond to, our marketing representatives and agents;

(h)

when you respond to our request for additional Personal Data;

(i)

when you ask to be included in an email or other mailing list;

(j)

when you respond to our promotions and other initiatives;

(k)

when you submit a job application, scholarship application or enter into employment with us;

(l)

when you enter into tenancy agreements with us;

(m)

when we receive references from business partners and third parties, for example, where you have been referred by them;

(n)

when you submit your Personal Data to us for any other reason.

2.2

When you browse our website, you generally do so anonymously but please see the section below on cookies.

2.3

If you provide us with any Personal Data relating to a third party (e.g. information of spouse, children, parents, employees and/or authorised representatives), by submitting such information to us, you represent to us that you have obtained the consent of the third party to you providing us with their Personal Data for the respective purposes.

2.4

You should ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with products and services you have requested.

Purposes for the Collection, Use and Disclosure of Your Personal Data

3.1

Generally, MDI collects, uses and discloses your Personal Data for the following purposes:

(a)

responding to your queries and requests and responding to complaints;

(b)

managing the infrastructure and business operations of MDI and complying with internal policies and procedures;

(c)

facilitating business asset transactions (which may extend to any merger, acquisition or asset sale;

(d)

matching any Personal Data held which relates to you for any of the purposes listed herein;

(e)

verifying your identity;

(f)

preventing, detecting and investigating crime, including fraud and money-laundering, and analyzing and managing other commercial risks;

(g)

protecting and enforcing our contractual and legal rights and obligations;

(h)

conducting audits, reviews and analysis of our internal processes, action planning and managing commercial risks;

(i)

preventing, detecting and investigating crime and managing the safety and security of our premises and services (including but not limited to carrying out CCTV surveillance and conducting security clearances

(j)

compliance with any applicable rules, laws and regulations, codes of practice or guidelines or to assist in law enforcement and investigations by relevant authorities; and/or

(k)

any other purpose relating to any of the above.

3.2

In addition, MDI may collect, use and disclose your Personal Data for the following purposes, depending on the nature of our relationship with you:

(a)

If you have an account with us:

(i)

to maintain your account with us;

(ii)

to verify and process your personal particulars and payments in relation to provision of product subscription to you;

(iii)

to provide you with the product which you have signed up for.

(iv)

communicating with you to inform you of changes and development to MDI policies, terms and conditions and other administrative information, including for the purposes of servicing you in relation to products offered to you;

(v)

resolving complaints and handling requests and enquiries;

(vi)

conducting market research for statistical, profiling and statistical analysis for the improvement of services provided to you; and

(vii)

the processing of your Personal Data in relation to any of the purposes stated above.

(b)

If you are a prospective tenant or a tenant:

(i)

conducting appropriate due diligence checks to ensure suitability of tenant;

(ii)

preparation of documentation, including letters of offer, other relevant leasing documentation and applications for any relevant licences which may be required; and

(ii)

any other purpose directly relating to any of the above.

(c)

If you submit an application to us as a candidate for employment, scholarshipor an internship:

(i)

processing your application including pre-recruitment checks;

(ii)

providing or obtaining employee references or other references where relevant for background screening/vetting;

(iii)

collecting information about your suitability for the scholarship or position applied for;

(iv)

organising training and staff development programs;

(v)

assessing your performance;

(vi)

administrating benefits and payroll processing;

(vii)

providing you with tools to facilitate or as required for you to do your job;

(viii)

communicating with you as required by MDI to comply with its policies and processes, including for business continuity purposes; and

(x)

any other purposes relating to the aforesaid.

(d1)

If you are an employee, supplemental Personal Data which we may collect in the context of your employment with us includes, without limitation, your:

(i)

name or alias, gender, NRIC/FIN or passport number, date of birth, nationality, and country and city of birth;

(ii)

mailing address, telephone numbers, email address and other contact details;

(iii)

employment and training history;

(iv)

salary information and bank account details;

(v)

details of your next-of-kin, spouse and other family members;

(vi)

work-related health issues and disabilities;

(vii)

records on leave of absence from work;

(viii)

photographs and other audio-visual information;

(x)

performance assessments and disciplinary records; and

(xi)

any additional information provided to us by you as a job applicant (that is, prior to being engaged as an employee).

(d2)

As an employee, your personal data will be collected and used by us for the following purposes and we may disclose your personal data to third parties where necessary for the following purposes:

(i)

performing obligations under or in connection with your contract of employment with us, including payment of remuneration and tax;

(ii)

all administrative and human resources related matters within our organisation, including administering payroll, granting access to our premises and computer systems, processing leave applications, administering your insurance and other benefits, processing your claims and expenses, investigating any acts or defaults (or suspected acts or defaults) and developing human resource policies;

(iii)

managing and terminating our employment relationship with you, including monitoring your internet access and your use of our intranet email to investigate potential contraventions of our internal or external compliance regulations, and resolving any employment related grievances;

(iv)

assessing and evaluating your suitability for employment/appointment or continued employment/appointment in any position within our organisation;

(v)

ensuring business continuity for our organisation in the event that your employment with us is or will be terminated;

(vi)

performing obligations under or in connection with the provision of our goods or services to our clients;

(vii)

facilitating any proposed or confirmed merger, acquisition or business asset transaction involving any part of our organisation, or corporate restructuring process; and

(viii)

facilitating our compliance with any laws, customs and regulations which may be applicable to us.

The purposes listed in the above clauses may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under any contract with you).

3.4

If you have provided your Singapore telephone number(s) and have indicated that you consent to receiving marketing or promotional information via your Singapore telephone number(s), then from time to time, MDI may contact you using such Singapore telephone number(s) (including via voice calls, sms, fax or other means) with information about our products and services (including discounts and special offers).

3.5

In relation to particular products or services or in your interactions with us, we may also have specifically notified you of other purposes for which we collect, use or disclose your Personal Data. If so, then we will collect, use and disclose your Personal Data for these additional purposes as well, unless we have specifically notified you otherwise.

3.6

You also consent to the collection, use and disclosure of your Personal Data by MDI in connection with any transaction relating to the acquisition, divestment, securisation, amalgamation, listing or other transaction relating to any interest in MDI, the shares or assets of MDI, and any other corporate transaction involving MDI, including any evaluation or due diligence relating thereto, as well as to the collection, use and disclosure of such information by the counterpart(ies) thereto for the same purposes, and the provision of goods and services by such counterpart(ies) following such transaction, as may be relevant.

Disclosure of Personal Data

4.1

MDI will take reasonable steps to protect your Personal Data against unauthorised disclosure. Subject to the provisions of any applicable law, this Personal Data may be disclosed, for the purposes listed above (where applicable), to the following third parties, whether they are located overseas or in Singapore:

(a)

MDI affiliates;

(b)

agents, contractors or third party service providers who provide operational services to MDI, such as telecommunications, information technology, payment, payroll, processing, training, market research, newspaper vendor services, newspaper delivery services, storage, archival or other services to MDI;

(c)

vendors or any third party business partners who offer goods and services or sponsor contests or other promotional programs on MDI’s sites, whether in conjunction with us or not;

(d)

external business and charity partners in relation to corporate promotional events;

(e)

the Credit Bureau, or in the event of default or disputes, any debt collection agencies or dispute resolution centres;

(f)

any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or asset sale;

(g)

anyone to whom we transfer or may transfer our rights and duties;

(h)

banks, credit card companies and their respective service providers;

(i)

our professional advisors such as our auditors and lawyers;

(j)

relevant government regulators or authority or law enforcement agency to comply with any laws or rules and regulations imposed by any governmental authority; and

(k)

any other party to whom you authorise us to disclose your personal data

Use of cookies

5.1

When you interact with us on our websites, we may collect or analyseanonymised information from which individuals cannot be identified (“Aggregate Information”), such as number of users and their frequency of use, the number of page views (or page impressions) that occur on the website and common entry and exit points into website.

5.2

MDI uses "cookies", where a small data file is sent to your browser to store and track Aggregate Information about you when you enter our websites. The cookie is used to track information such as the number of users and their frequency of use, profiles of users and their preferred sites.

5.3

MDI may use an independent company (the “Third Party Market Research Company”) to measure and analyse the Internet usage across MDI web sites. MDI uses the Third Party Market ResearchCompany’s services to collect the following core information on the usage of our web sites, including:

(a)

The number of page views (or page impressions) that occur on MDI web sites;

(b)

The number of unique visitors to MDI web sites;

(c)

How long these unique visitors (on average) spend on MDI web sites when they do visit; and

(d)

Common entry and exit points into MDI web sites.

5.4

This information is aggregated by the Third Party Market Research Company and provided to MDI to assist in analysing the usage of MDI web sites. Such data is also accessible by media organizations and research companies, for the purpose of conducting industry comparisons with other Internet portals.

5.5

Pages on MDI web sites may be coded with software which enables the Third Party Market Research Company to track visitors to our web sites.

5.6

For more information about the cookies we use, please see our Cookie Policy. Should you wish to disable the cookies associated with these technologies, you may do so by changing the setting on your browser. However, you may not be able to enter certain part(s) of our website.

Third-Party Sites

6.1

Our website may contain links to other websites operated by third parties, such as our business partners. We are not responsible for the privacy practices of websites operated by third parties that are linked to our website. We encourage you to learn about the privacy policies of such third party websites. Some of these third party websites may be co-branded with our logo or trademark, even though they are not operated or maintained by us. Once you have left our website, you should check the applicable terms, conditions and policies of the third party website to determine how they will handle any information they collect from you.

Withdrawal, Access and Correction of your Personal Data

7.1

Should you wish to withdraw consent to use of your Personal Data or obtain access to or make corrections to your Personal Data records, please log in to the relevant account through which the Personal Data was provided, if any, failing which please contact the relevant Personal Data Protection Officer, contact details of which are found in the Personal Data Protection Statement or similar document elsewhere on the relevant MDI website.

7.2

Please note that if your Personal Data has been provided to us by a third party, you should contact such party directly to make any queries, feedback, and access and correction requests to MDI on your behalf.

7.3

Please note that if you withdraw your consent to any or all use of your Personal Data, depending on the nature of your request, MDI may not be in a position to continue to provide its products to you or administer any contractual relationship in place, and this may also result in the termination of any agreements with MDI and your being in breach of your contractual obligations or undertakings, and MDI’s legal rights and remedies in such event are expressly reserved.

Withdrawal, Access and Correction of your Personal Data

8.1

This Privacy Policy shall be governed in all respects by the laws of Singapore.

PDPA Version Date

27.5.2020