Privacy Policy

Last Update: 20 August 2024.

1. About this Privacy Policy

This Privacy Policy, on behalf of Bebee Sdn Bhd, explains how and what type of data related to you as a natural person (“Personal Data”) is collected, why it is collected, and to whom it is shared or disclosed. It also contains information about your rights related to your Personal Data.

Please read this Privacy Policy carefully.

This Privacy Policy applies when you:

• Visit Bebee Sdn Bhd website, social media pages, or physical office premises.
• Visit any of our store for the purchase of baby food.
• Access or use any of our platform’s product and service, including Bebee Diary.
• Register and/or attend any virtual or in-person events hosted or attended by us.
• Contacting our customer support or completing a webform.
• Participate in our user research activities.
• Otherwise interact or communicate with us.

These criteria are hereinafter collectively referred to as Bebee Sdn Bhd “Services”.

On our websites, we also collect cookies information, for details please refer to the section below.

2. About Us

When we refer to “Bebee” (“we”, “us”) in this Privacy Policy, we mean Bebee Sdn Bhd with company registration number 202101015272 (1415572-M) and registered address at 51, Jalan Puteri 5/18, Bandar Puteri, 47100 Puchong, Selangor) and/or our licensee that is responsible for the processing of your Personal Data.

Any request related to data privacy can be addressed to enquiries@bebee.asia

3. What types of Personal Data do we collect?

We collect and process the following types of Personal Data:

(a) Contact Information Data

Contact Information Data includes, but are not limited to, full name, email address, NRIC/ identity number and phone number.

(b) Communication and Interaction Data

Communication data refers to the data resulting from your interaction with us, e.g. emails, chat messages, webinars visited, files downloaded, user research activities and product interest information. We may also collect registration information related to your attendance at one of our events, including scheduling information, food preferences or allergies, and accessibility requests. When attending our event, Bebee and its agents may photograph and record the event and activities related to the event in visual or audio media. For property under Bebee responsibility, we may process video surveillance (CCTV) information.

(c) Application-related Usage Data

We may automatically gather and analyze information on how and whether specific features of our Services are used.

(d) Device and Browser Data

When you as a user visit one of our websites and/or product applications, data from your computer or mobile devices may be collected, such as device type, basic location, information about the browser type and version, the operating system and version, the internet service provider or mobile carrier, the IP Address (or proxy server) as well as geographic areas derived from your IP address, time and date of access. Duration of access, referring URL (if any), and identifiers that help us to recognize your device and validate that you are a licensed user.

(e) Websites Cookies

Cookies serve as digital markers, capturing information about your device and Internet connectivity, including data such as your IP address, operating system, and browser type.

Our utilization of this information, accessed through cookies, aims to refine our services, ensuring tailored content delivery and bolstering our advertising and marketing initiatives. This process primarily involves the employment of session cookies, which are temporary and are automatically cleared from your browser upon concluding your visit to our site. These session cookies yield insights into visitor interactions, facilitating our analysis to enhance the website’s user-friendliness, strategically position key content on frequently visited pages, and shape our marketing strategies to align with our audience’s interests.

Additionally, certain cookies persist on your device longer, enabling us to recognize repeat visits. We assure that the information gleaned from our cookies is not shared with third parties. The use of cookies can be managed through your browser’s “Incognito” or “Private” mode, or by modifying browser settings, although this may impact some website functionalities. Nevertheless, Sonoholding.com remains accessible, including login and all services, even without cookies.

Our legal basis for cookie usage is grounded in Section 13(2) of the Personal Data Protection Act 2010 (PDPA), driven by our legitimate interest in optimizing our product, enhancing user experience, improving customer support, and increasing internal process efficiency.

4. How do we collect and process your Personal Data?

You provide Personal Data directly to us by accessing one of our websites or applications, attending one of our events, coming for a consultation appointment, registering and/or using one of the Services, and participating in activities with us (e.g. user research activities). We may also obtain Personal Data in the context of providing the Services or obtain information about you from third party sources, such as public databases and social media platforms.

5. Why do we process your Personal Data?

We may process your Personal Data for one or more of the following purposes:

(a) Provide the requested Services

To provide the requested Services and to make sure that we fulfill contractual obligations with you. This includes but is not limited to:

• Specific pregnancy health data includes expected due date, weight, blood pressure, and any other relevant health information necessary for providing accurate scanning reports and scheduling appointments. This data is used to generate detailed pregnancy scanning reports, track fetal development, and provide personalized recommendations for maternal health.
• Transaction behavior data collected includes purchase history and browsing behavior within the website and mobile app to understand user preferences and recommend relevant products or services. This data may also be used for targeted advertising and marketing initiatives to improve the overall user experience.
• Responding to your requests for assistance, payment processing, billing, data storage and responding to any request you may send us through our website, email or any other way.

(b) Improve and enhance our Services

To improve our operations, systems, products, processes in order to enhance your experience, we need to understand your preferences, analyze aggregated, anonymized or statistical usage data and crash information as well as conduct surveys with regards to our Services.

(c) Enable security and compliance

To maintain the security and compliance of our Services with the objective to protect against, investigate and deter fraudulent, unauthorized, or illegal activity and to avoid and detect attacks on our applications or misuse of our Services. To ensure appropriate security of our office premises and comply with any legal and regulatory obligations.

(d) Perform sales, marketing and events related activities

To communicate news about upcoming events, products, services and for direct advertising; To inform you about our Services; To manage your registration to our events and to make visual and audio media related to the event available to you.

6. When will we process your Personal Data?

We process your personal data only when one of the following criteria applies:

• We need to process your Personal Data to perform our contractual responsibilities or requested Services,
• We have a legitimate interest to process your Personal Data (which is not overridden by your rights),
• You have given consent to process your Personal Data,
• We need to process your Personal Data to comply with a legal or regulatory obligation.

When we are processing your Personal Data, the legal basis for the data collection is Section 13(2) of the Personal Data Protection Act 2010 (PDPA).

7. Who will have access to your Personal Data?

Depending on the purpose and the necessity, we may disclose your Personal Data to the following categories of recipients:

• To internal personnel of Bebee on a “need-to-know” basis.
• To agencies, auditors, or other advisors under professional obligations of confidentiality in connection with corporate functions.
• When you sign up to one of our events and a third parties was appointed by Bebee to host, sponsor or present, including webinars and trainings, we may grant your Personal Data access to the respective third party who may use it to provide access to the event or to contact you for related marketing purposes.
• To government, law enforcement and regulatory bodies to meet applicable legal or regulatory obligations.

We may transfer information that we collect about you, including personal information, to affiliated entities, or to other third parties (as provided herein) across borders and from your country or jurisdiction to other countries or jurisdictions around the world.

If you are located in the European Union or other regions with laws governing data collection and use that may differ from Malaysia law, please note that you are transferring information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction, and you consent to the transfer of information to Malaysia and the use and disclosure of information about you, including personal information, as described in this Privacy Policy.

8. How long do we store your Personal Data?

When permitted and in compliance with applicable laws and regulations, Your Personal Data will be deleted upon your request or as soon as it is no longer serving the purpose for which it has been collected. If regulations require longer storage of your Personal Data, or if we need your Personal Data to assert legal claims or defend against legal claims, we will store your Personal Data until the expiration of the corresponding storage period or until the settlement of the claims.

Our legal basis for the deletion or blocking of personal data is Section 10(2) of the Personal Data Protection Act 2010 (PDPA). You have the right to raise your concern, revoking your data consent of your Personal Data including, but not limited to data collection, storage, modification, transfer and deletion by contacting enquiries@bebee.asia.

9. How do we protect your Personal Data?

To protect your Personal Data against accidental or unlawful destruction, loss, use, or alteration and against unauthorized disclosure or access, we use adequate physical, technical, and organizational security measures.

In particular:

• Encryption of data at rest and in transit
• Regular security audits and penetration testing
• Access controls that restrict access to Personal Data on a need-to-know basis
• Data backup and disaster recovery procedures

While we strive to ensure the security of your Personal Data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure.

In the event of a data breach, we will notify you and the relevant authorities as required by law.

10. What are your rights regarding your Personal Data?

We are committed to transparency regarding the collection and use of your Personal Data. We provide easily accessible information on our website and within our apps about the types of data we collect, the purposes for which it is used, and your rights under the PDPA, we provide you with the following rights:

• Right to access: You have the right to request access to your Personal Data and obtain a copy of it.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete Personal Data.
• Right to erasure: You have the right to request the deletion of your Personal Data, subject to certain exceptions outlined in the PDPA.
• Right to restrict processing: You have the right to restrict the processing of your Personal Data in certain circumstances.
• Right to data portability: You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
• Right to object: You have the right to object to the processing of your Personal Data for direct marketing purposes or for reasons related to your particular situation.

If you have any questions or concerns about this Privacy Policy or our data privacy practices, please contact us at enquiries@bebee.asia.

11. Updates

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on our website and, if applicable, through other communication channels.

Last Updated on 20 August 2024.