Privacy notice
Draft for OSK to review. Not final until OSK approves it.
- New page: the old site had no privacy notice, only section 7 of its terms. This draft says what the new site keeps about members and why, as it is built. OSK's adviser on personal data (the Personal Data Protection Act 2010) should read it; the Act asks for such a notice in Bahasa Malaysia as well as English.
- Who is responsible for the data: the draft says GLSB, as the Terms do. Should it be OSK?
- Where the servers are is not decided yet; the draft leaves a gap for it.
- Requests to see or correct one's details go to enquiry@autobonus.com.my in this draft. Is that the right address?
AutoBonus is run by Goodway Loyalty Sdn. Bhd. ("GLSB"). This notice says what GLSB keeps about AutoBonus members, why, who sees it, and how a member can see or correct it.
What we keep
- Your member number, company name, your name, e-mail address, phone number and address, as given when you joined or changed since.
- Your password, kept only in a form that cannot be read back: nobody at GLSB can see it.
- Every change to your points, with its reason: points from our partners' sales, rewards redeemed, points returned, corrections and expiry.
- Your orders: what you redeemed, and the delivery name, address, phone and e-mail you gave for each.
- The e-mails the site sends you (about your orders and your password), and when you last signed in.
- For security, the internet address your requests come from may be recorded when you sign in or ask for a password link.
Why we keep it
- To run your account: credit the points our partners' sales earn you (their reports name you by your member number), take them when you redeem, and show you your statement.
- To deliver your rewards, and to tell you about your orders and your password by e-mail.
- To answer your questions, and to put right a mistake in your points.
- To keep the site and your account safe: to stop someone guessing your password, and to find and prevent fraud.
Who sees it
- GLSB's staff who run AutoBonus, each only what their work needs.
- The courier who delivers your reward: the delivery name, address and phone of that order.
We do not sell your details, and we do not use them for advertising by anyone else.
Where it is kept, and for how long
Your details are kept on servers in [to be confirmed], and backed up there. Your account, your points history and your orders are kept while you are a member and afterwards as records of the programme; an account that ends is switched off, not deleted, because orders and points history point to it.
Cookies
The site's cookies only keep you signed in (for up to 14 days) and keep its forms safe; your cart stays in your own browser. It uses no advertising or tracking cookies.
Seeing and correcting your details
You can see your details, points and orders when you sign in (My account, My points, My orders). To correct your details, to ask for a copy of what we keep, or with any question about this notice, write to enquiry@autobonus.com.my or contact us.