Introduction
Access Digital is a brand for cloud-based smart parking and property management systems, used by companies and their users to manage their parking and property related operations, through Access Digital's range of Apps and Web services.
This policy applies to Access Digital's websites, mobile applications, Access Digital-branded apps, and other related sites, apps, communications and services, including website visitors.
Consent
If you use our Services, you consent to the collection, use and sharing of your personal data under this Privacy Statement (which includes our Cookie Policy and other documents referenced in this Privacy Statement) and agree to the User Agreement.
You have choices that allow you to opt-out or control the use and sharing of your data. Modified statements will be communicated through the Services or other means. Continued use after updates constitutes consent to the changed policies. You may close your account if you object to any changes.
About Personal Information
Personal information encompasses any data relating directly or indirectly to an individual, including information distinguishing, identifying or contacting them. "Sensitive personal information" covers health data, political opinions, religious beliefs, and similar categories. This policy applies exclusively to natural persons / individuals.
Who Collects and Processes Data Collected
Access Digital operates under PDPA 2010, PDPA 2024, and GDPR compliance standards. The company functions in dual capacities:
Access Digital as Data Controller: Access Digital is the Data Controller for personal data collected directly from individuals who register for our services (referred to as "Subscribers"). This includes personal data collected through our websites, mobile apps, marketing materials, customer support (e.g., telephone, email, chat), and other official channels.
Access Digital as Data Processor: When subscribers use our services to manage user data within their accounts (such as user data, attendance logs, or access control), the subscriber acts as the data controller while Access Digital processes information solely per their instructions.
All personal and sensitive data, including biometric information such as fingerprints and facial recognition, is handled in full compliance with PDPA 2024 principles and requirements.
Subscribers maintain complete control over personal data stored in their accounts, including phone numbers and addresses. After initiating services, subscribers create users with various privilege levels, including administrator rights. At any time, subscribers and administrators may add, modify, delete or share user data. Because this data is user generated, it is the Subscriber's responsibility to ensure that collection and processing of data is done in accordance with applicable law.
Access Digital processes data solely as instructed by subscribers, not for other purposes or by other means. Users seeking access, correction, amendment, or deletion should contact the subscriber / data controller. Access Digital will not process Personal Data for other purposes or by other means than instructed by its Subscribers.
Information We Collect
Access Digital collects relevant personal information to provide apps, web services and to operate efficiently, including:
- Contact information such as your name, company name, address, phone number and e-mail address provided when you communicate with us. This includes instances where you register to use our websites, applications or services (including free trials), download the Access Digital App, respond to marketing materials, or contact us for enquiries by telephone, email, chat services and social media.
- Financial information such as credit card details upon subscription purchases, managed by payment providers rather than Access Digital directly.
- Information about your computer or device used to access our Services, and about your visits to and use of our websites (including your IP address, geographical location, operating system, browser type, number of visits, average time spent on the site and pages viewed).
- Cookie and web beacon tracking data used to provide website usage overviews, not for user profiling.
- Details of the emails and other electronic communications you receive from us, including whether that communication has been opened and whether you have clicked on any links within it. We use this to help ensure our communications are useful for you.
- Personal data from registration for publications, newsletters, online forms, surveys, blog posts, white papers, and interactive website areas.
- Data provided during business relationships as service providers or partners.
- Complaint and feedback information.
- Third-party personal information from credit agencies, financial institutions, and sources where consent exists or lawful permission applies.
- Biometric information provided, such as fingerprint and facial recognition data, collected particularly for authentication, verification, and access control purposes.
How We Use Your Data
Access Digital may collect and use personal data for multiple purposes, including:
- Identity verification.
- Assessing and processing applications / requests for apps, websites, and services.
- Administering and managing services including charging, billing, payment facilitation, and debt collection.
- Assessing and verifying credit worthiness.
- Detecting and preventing fraudulent activity.
- Maintaining contact and providing requested information.
- Engaging in business transactions for services offered or provided.
- Establishing and managing business relationships.
- Processing communications, queries, complaints, and feedback.
- Notifying users about service benefits and feature changes.
- Producing anonymized / aggregated data, reports, and statistics that do not identify individuals.
- Investigating and defending claims involving Access Digital (M) Sdn Bhd.
- Conducting internal marketing and promotional activities including newsletters, special offers, promotions, and product information, with unsubscribe options via email links.
- Maintaining security, claims, and legal records.
- Complying with legal and regulatory requirements.
- Internal auditing, data analysis, and research to improve products and services.
- Other lawful purposes required or permitted by law and regulatory authorities.
AI & Automated Data Processing
We may use AI technologies to analyze personal data for purposes such as customer support, operational optimization, service personalization, document automation, property and parking management, and other lawful business purposes. By using our services, you consent to such AI-assisted processing of your data in accordance with this Privacy Policy.
Data Disclosure
Access Digital may disclose information to third parties for service provision and operations, including:
- Law enforcement agencies.
- Government agencies.
- Companies / organizations acting as agents, contractors, service providers (including subcontractors), and professional advisers.
- Companies / organizations assisting in transaction processing and service fulfillment.
- Business associates and related parties.
- Parties receiving express or implied consent.
- Disclosures subject to applicable laws, regulations, guidelines, and obligations.
Strategic partners that work with Access Digital to provide better products and services, or that help Access Digital market to customers. For example, when you inquire about an Access Digital solution, Access Digital may send your email with your personal or non-personal information to third parties (Authorized Resellers, where specified) for sales follow-ups. Personal information will only be shared by Access Digital to provide Access Digital solutions and services to you; it will not be shared with third parties for their marketing purposes.
Access Digital uses data processors that collect, store, and process data on its behalf, offering appropriate technical and organizational security measures. They are used for the following purposes: hosting of our applications or services; hosting of our customer relationship management system; enabling payments; enabling user support functionalities, such as website chat rooms; and enabling visit and usage analytics.
Data Security
We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate administrative, technical and physical safeguards to protect Personal Data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the Personal Data in our possession.
Protective measures include firewalls, password protection, database protection, encryption, and access / authentication controls. We use SSL technology to encrypt data during transmission through the public internet, to be accessed only by those authorized with special access rights to our systems.
However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information you transmit to us or store on the Service, and you do so at your own risk.
Upon discovering security breaches, Access Digital will inform users and authorities per applicable law.
Data Retention
We will retain personal data we process on behalf of our client for as long as needed to provide the Services. We will retain and use this personal information as necessary to comply with our legal obligations, maintain accurate financial and other records, resolve disputes, and enforce our agreements.
International Transfer of Information Collected
Access Digital operates from Malaysia with IT and service providers across multiple countries. Our applications or services or parts of them may be hosted in facilities provided by Amazon Web Services in Malaysia, Singapore, South Africa, and the United States. Meanwhile, our websites may be hosted in Malaysia, and when you send an email to us, this will also be stored on our email servers in Malaysia.
Therefore, your information collected by Access Digital may be stored and processed in the United States, Malaysia, Singapore, Europe, or any other country in which Access Digital or its affiliates or service providers maintain facilities.
Submitting personal data constitutes agreement to such processing, transfer, or storage. Access Digital takes reasonable steps maintaining security per this policy and ensures third parties are contractually bound to use information solely for service provision and adequate safeguarding.
For European data protection laws, information submitted through websites, applications, or services may transfer to the United States or territories outside the EEA. Service providers outside the EEA may receive information for applications, advertising, and service provision.
Access Digital implements steps ensuring information transferred outside the EEA to service and hosting providers includes appropriate protective controls per applicable data protection laws. Transfers are made in accordance with the requirements of Regulation (EU) 2016/679 (the General Data Protection Regulation or "GDPR") and may be based on the use of the European Commission's Standard Contractual Clauses for transfers of personal data outside the EEA.
By using our website, products or services, or by interacting with us in the ways described in this Privacy Policy, you consent to the transfer of your information outside the EEA in the circumstances set out in this Privacy Policy. If you do not want your information to be transferred outside the EEA you should not use our website, applications or services.
Your Rights & Obligations
Right to Access, Correction, Deletion, Data Portability
Access Digital assists users in accessing, correcting, or deleting personal information. Requests should include your name, address, phone / account number, and details of the requested information. We will use reasonable efforts to comply with your request to access, correct or delete your personal information within 30 days of receiving your request.
Responses will be sent electronically unless otherwise specified. Access Digital may withhold access when unable to confirm identity, where the information involves a confidential commercial nature, or where repeated identical requests occur. Notification of denial reasons will be provided.
Restriction of Processing, Object to Processing & Withdraw Consent
Users may request processing restrictions or object on legitimate grounds except where otherwise permitted by law. Opposition to marketing-related processing is available anytime. Where processing relies on consent, users retain withdrawal rights subject to legal or contractual restrictions.
Those believing their data protection privacy rights have been violated should contact Access Digital and may lodge complaints with the data protection authorities.
This provision does not apply to Personal Data that is part of a Customer's Data. In this case, the management of the Customer Data is subject to the Customer's own Privacy Policy, and any request for access, correction or deletion should be made directly to the Customer responsible for uploading and storing such data into the Service.
Incomplete Personal Information
Registration / application forms indicate obligatory personal information necessary for processing applications and providing services. Should you decline to provide such obligatory personal information, we may not be able to process your application or provide you with the Access Digital App, Website & Services.
Your Obligations
Users must provide accurate, complete information about themselves and others whose data they provide, updating information when it becomes incorrect or outdated. This obligation is a condition of the provision of the Access Digital App, Website & Services to you and/or any other person authorised or permitted by you or your organisation / company to use the Products and/or Services.
When providing third-party personal information (such as a spouse, children, or organization representatives), you confirm that you have (i) obtained their consent or are otherwise entitled to provide their personal information to us and for us to use accordingly, and (ii) informed them to read this Privacy Policy at our website.
Protection of Minors
As a general rule, children and persons under the age of 18 years should not disclose personal data to us without the consent of their parents or guardians. We do not solicit personal data from children and we do not knowingly collect personal data from children, use said data in any way, or disclose said data to third parties without authorization.
How to Contact Us
Data Protection Officer (DPO)
Access Digital has appointed a Data Protection Officer (DPO) to oversee our data protection strategies and ensure compliance with the Personal Data Protection Act 2010 and its Amendment Act 2024.
For questions or concerns regarding personal data or to exercise your data protection rights, contact the DPO at: parksupport@accessdigital.com.my
General Contact Information
Access Digital (M) Sdn Bhd
29-1, Jalan Indah 2/14, Taman Universiti Indah, 43300 Seri Kembangan, Selangor.
Tel: +603 - 8959 7113
Email: parksupport@accessdigital.com.my