This policy sets out how BreatheLife will handle personal information in accordance with the Data Protection Act 2010 and Payment Card Industry Data Security Standard in light of who we are and who we aspire to be as an organisation.
BreatheLife is committed to protecting the privacy of our donors, supporters, employees and other stakeholders. We value the trust of those we deal with, and of the public, and recognise that maintaining this trust requires that we be transparent and accountable in how we treat the personal information that you choose to share with us.
During the course of our various activities, we frequently gather and use personal information. This information may be obtained directly from you or collected from third parties that have the right to disclose this information to us. Anyone from whom we collect such personal information should expect that it will be carefully protected and that any use of or other dealing with this personal information is subject to express or implied consent. Our privacy practices are designed to achieve this.
Depending on where you live, BreatheLife may not be under any statutory obligations with respect to the protection of the personal information that you provide to us. Notwithstanding such, BreatheLife has voluntarily decided to adhere to best practices for the collection, use and disclosure of personal information as outlined in this policy.
Personal information is information about an identifiable individual. This includes any information that can be used to distinguish, identify or contact a specific individual. An individual’s opinions or beliefs, as well as facts about or related to the individual may also be considered personal information. Business contact information and certain publicly available information, such as names, addresses and telephone numbers as published in telephone directories, are not usually considered personal information.
Where an individual uses his or her home contact information as business contact information as well, we consider the contact information provided to be business contact information, and therefore may not be subject to the same level of protection as personal information.
Personal information collected by BreatheLife may include: name, address, telephone number(s), email address(es) and other contact information, date of birth, credit card or bank account information for sponsorship and/or donation purposes, countries or programmes an individual wishes to support, language preference, demographic information such as age and gender, and communication preferences for marketing purposes.
We also use “cookies” to track visits to our website; you can usually disable cookies in your internet browser settings. You can find out more about cookies by looking at our Terms of Use.
Personal information gathered by our organisation is kept in confidence. Our personnel are authorised to access personal information based only on their need to deal with it for the reason(s) for which it was obtained. Safeguards are in place to ensure that personal information is not disclosed or shared more widely than is necessary to achieve the purpose for which it was gathered. We contractually require any person or organisation providing services to BreatheLife to comply with privacy legislation. We also take measures to ensure that the integrity of personal information is maintained and retained only as long as it is required.
We collect, use and disclose personal information only for purposes that a reasonable person would consider appropriate in light of the circumstances. We do not rent or sell personal information to any other organisation.
BreatheLife collects personal information in order to service your account, understand your giving preferences and provide you with relevant communications and marketing materials.
We might use your information for the following purposes:
We may share this information with BreatheLife employees for the purposes of marketing, research and analysis. In certain limited circumstances, personal information collected by BreatheLife (excluding financial information) may be stored or processed outside of Malaysia and therefore subject to the legal jurisdiction of those countries.
If we use personal information in ways other than as stated in this policy, we will ensure we comply with the legal requirements.
We do not disclose your personal information to other organisations except for purposes relating to our core business; importantly, we don’t rent, sell or exchange our supporter information.
Nonetheless, information about you might be given to:
When this occurs, we provide only the information that is required to provide the services and strict terms of confidentiality are established. We take reasonable steps to make sure that our agreements with service providers include appropriate privacy and confidentiality obligations.
Occasionally we may use overseas/regional/international facilities or contractors to process or back up information or to provide other services. As a result, we may transfer your personal information to our overseas facilities or contractors for these purposes. However, any transfer of information does not change our commitment to safeguard your privacy.
Our website uses secure response forms when we ask for your personal and payment card details and we work hard to keep your information secure by having safe systems in place. We commit to de-identifying or destroying your information where we no longer need to keep it.
We will take all reasonable steps to keep your information safe (whether electronically or in hard copies) and to keep it up to date. This includes complying with the Payment Card Industry Data Security Standard, which covers security of payment card information. Our employees and service providers use password protocols when accessing sensitive information and are expected to keep personal and payment card information confidential and secure.
If at any time you want to know what personal information we hold about you, please address your request to our Donor Care Officers. If you wish to have your personal information deleted, we will take reasonable steps to delete it unless we need to keep it for legal, auditing or internal risk management reasons. If we use personal information in ways other than as stated in this policy, we will ensure we comply with the requirements of Privacy law.
If you are 18 or over, we will usually assume that you can make your own privacy decisions. Where you are under 18, we may need to confirm your decision with a parent or guardian.
If you have made an error in contributing to BreatheLife, we will honour your request for a refund made within 30 days of your donation. All requests must be accompanied by proof of payment. To request a refund, email us at info@breathelife.org.my or call us at (6017) 413 0454.
We regularly review our privacy practices for our various activities, and update our policy. Please check our website on an ongoing basis for information on our most up-to-date practices.