生效日期 Effective Date: 2025年1月1日 | January 1, 2025
最后更新 Last Updated: 2025年1月1日 | January 1, 2025
1. 数据控制者信息 | Data Controller Information
中文 Chinese
公司名称：EC Express Transport
注册地址：马来西亚
联系电话：+60 13-456 5866
电子邮箱：ecexpresstpt@gmail.com
数据保护官：EC Express Transport 管理团队
English
Company Name: EC Express Transport
Registered Address: Malaysia
Contact Phone: +60 13-456 5866
Email: ecexpresstpt@gmail.com
Data Protection Officer: EC Express Transport Management Team
2. 个人数据的收集 | Collection of Personal Data
中文 Chinese
2.1 收集的数据类型
我们可能收集以下类型的个人数据：
- 身份信息：姓名、身份证号码、护照号码
- 联系信息：电话号码、电子邮箱地址、通讯地址
- 预订信息：出发地、目的地、出行日期、乘客人数
- 支付信息：银行账户信息、信用卡信息（经加密处理）
- 技术信息：IP地址、浏览器类型、设备信息、cookies
- 特殊需求：健康状况、饮食要求、无障碍需求
2.2 收集方式
- 通过我们的网站直接提供
- 通过电话预订服务
- 通过WhatsApp或其他即时通讯工具
- 通过第三方预订平台
- 自动收集（如cookies和分析工具）
English
2.1 Types of Data Collected
We may collect the following types of personal data:
- Identity Information: Name, NRIC/IC number, passport number
- Contact Information: Phone number, email address, mailing address
- Booking Information: Departure location, destination, travel date, number of passengers
- Payment Information: Bank account details, credit card information (encrypted)
- Technical Information: IP address, browser type, device information, cookies
- Special Requirements: Health conditions, dietary requirements, accessibility needs
2.2 Collection Methods
- Directly provided through our website
- Through phone booking services
- Via WhatsApp or other instant messaging platforms
- Through third-party booking platforms
- Automatically collected (such as cookies and analytics tools)
3. 数据使用目的 | Purpose of Data Processing
中文 Chinese
我们收集和处理您的个人数据用于以下目的：
- 服务提供：处理预订、安排运输服务、客户支持
- 合规要求：遵守法律法规、税务申报、政府要求
- 安全保障：确保乘客和司机安全、防范欺诈
- 服务改进：分析服务质量、优化路线、提升用户体验
- 营销推广：发送服务更新、促销信息（需获得明确同意）
- 财务管理：处理付款、开具发票、会计记录
- 争议解决：处理投诉、法律程序、保险理赔
English
We collect and process your personal data for the following purposes:
- Service Provision: Processing bookings, arranging transport services, customer support
- Compliance Requirements: Legal and regulatory compliance, tax reporting, government requirements
- Safety and Security: Ensuring passenger and driver safety, fraud prevention
- Service Improvement: Analyzing service quality, optimizing routes, enhancing user experience
- Marketing: Sending service updates, promotional information (with explicit consent)
- Financial Management: Processing payments, issuing invoices, accounting records
- Dispute Resolution: Handling complaints, legal proceedings, insurance claims
4. 法律依据 | Legal Basis for Processing
中文 Chinese
根据马来西亚个人数据保护法（PDPA），我们处理您个人数据的法律依据包括：
- 明确同意：您已明确同意我们处理您的个人数据
- 合同履行：为履行与您的运输服务合同所必需
- 法律义务：遵守适用的法律法规要求
- 合法权益：为保护我们或第三方的合法权益
- 生命安全：为保护您或他人的生命或身体安全
English
Under Malaysia's Personal Data Protection Act (PDPA), our legal basis for processing your personal data includes:
- Explicit Consent: You have given clear consent for us to process your personal data
- Contract Performance: Processing is necessary for the performance of our transport service contract
- Legal Obligation: Compliance with applicable laws and regulations
- Legitimate Interests: Protecting our legitimate interests or those of third parties
- Vital Interests: Protecting your life or physical safety, or that of others
5. 数据共享和披露 | Data Sharing and Disclosure
中文 Chinese
我们可能与以下第三方共享您的个人数据：
- 服务提供商：支付处理商、IT服务供应商、云存储提供商
- 政府机构：移民局、海关、税务局等相关政府部门
- 法律要求：法院、执法机构、监管部门
- 保险公司：在发生事故或理赔时
- 业务伙伴：合作的运输公司、酒店、旅游机构
我们仅在必要时共享数据，并要求所有第三方采取适当的安全措施保护您的个人数据。
English
We may share your personal data with the following third parties:
- Service Providers: Payment processors, IT service providers, cloud storage providers
- Government Agencies: Immigration, customs, tax authorities, and other relevant government departments
- Legal Requirements: Courts, law enforcement agencies, regulatory bodies
- Insurance Companies: In case of accidents or claims
- Business Partners: Partnered transport companies, hotels, travel agencies
We only share data when necessary and require all third parties to implement appropriate security measures to protect your personal data.
6. 跨境数据传输 | Cross-Border Data Transfer
中文 Chinese
鉴于我们提供马来西亚至新加坡的跨境运输服务，您的个人数据可能会传输至：
- 新加坡政府相关部门（用于入境检查）
- 新加坡的合作伙伴和服务提供商
- 国际支付处理系统
- 云服务提供商的海外服务器
我们确保所有跨境数据传输均符合PDPA要求，并与接收方签署适当的数据保护协议。
English
Given that we provide cross-border transport services between Malaysia and Singapore, your personal data may be transferred to:
- Relevant Singapore government departments (for immigration purposes)
- Partners and service providers in Singapore
- International payment processing systems
- Overseas servers of cloud service providers
We ensure all cross-border data transfers comply with PDPA requirements and sign appropriate data protection agreements with recipients.
7. 数据保留期限 | Data Retention Period
中文 Chinese
我们将根据以下原则保留您的个人数据：
- 预订数据：完成服务后保留7年（税务和会计要求）
- 支付记录：保留7年（财务审计要求）
- 客户通讯：保留3年（客户服务记录）
- 营销数据：直至您撤回同意或要求删除
- 技术日志：保留1年（安全和故障排除）
- 法律纠纷相关：直至争议解决完毕
保留期限届满后，我们将安全删除或匿名化处理您的个人数据。
English
We will retain your personal data according to the following principles:
- Booking Data: 7 years after service completion (tax and accounting requirements)
- Payment Records: 7 years (financial audit requirements)
- Customer Communications: 3 years (customer service records)
- Marketing Data: Until you withdraw consent or request deletion
- Technical Logs: 1 year (security and troubleshooting)
- Legal Dispute Related: Until dispute resolution is complete
After the retention period expires, we will securely delete or anonymize your personal data.
8. 您的权利 | Your Rights
中文 Chinese
根据PDPA，您享有以下权利：
- 访问权：要求获取我们持有的您的个人数据副本
- 更正权：要求更正不准确或不完整的个人数据
- 删除权：在特定情况下要求删除您的个人数据
- 限制处理权：要求限制对您个人数据的处理
- 反对权：反对基于合法权益的数据处理
- 撤回同意权：随时撤回您的同意
- 投诉权：向个人数据保护部门投诉
如需行使上述权利，请联系我们的数据保护官。我们将在30天内回复您的请求。
English
Under PDPA, you have the following rights:
- Right of Access: Request a copy of your personal data we hold
- Right of Correction: Request correction of inaccurate or incomplete personal data
- Right of Deletion: Request deletion of your personal data under specific circumstances
- Right to Restrict Processing: Request restriction of processing your personal data
- Right to Object: Object to data processing based on legitimate interests
- Right to Withdraw Consent: Withdraw your consent at any time
- Right to Complaint: Lodge a complaint with the Personal Data Protection Department
To exercise these rights, please contact our Data Protection Officer. We will respond to your request within 30 days.
9. 数据安全措施 | Data Security Measures
中文 Chinese
我们采取以下技术和组织措施保护您的个人数据：
- 技术措施：SSL/TLS加密、防火墙、入侵检测系统
- 访问控制：最小权限原则、多因素认证、定期权限审查
- 数据备份：定期备份、灾难恢复计划
- 员工培训：数据保护意识培训、保密协议
- 第三方管理：供应商尽职调查、合同约束
- 事件响应：数据泄露应急预案、及时通知机制
English
We implement the following technical and organizational measures to protect your personal data:
- Technical Measures: SSL/TLS encryption, firewalls, intrusion detection systems
- Access Control: Principle of least privilege, multi-factor authentication, regular access reviews
- Data Backup: Regular backups, disaster recovery plans
- Staff Training: Data protection awareness training, confidentiality agreements
- Third-party Management: Vendor due diligence, contractual obligations
- Incident Response: Data breach emergency plans, timely notification mechanisms
10. Cookie政策 | Cookie Policy
中文 Chinese
我们的网站使用以下类型的cookies：
- 必需cookies：网站基本功能运行所必需
- 性能cookies：分析网站使用情况，改善用户体验
- 功能cookies：记住您的偏好设置
- 营销cookies：个性化广告投放（需要您的同意）
您可以通过浏览器设置管理cookies偏好。禁用某些cookies可能影响网站功能。
English
Our website uses the following types of cookies:
- Essential Cookies: Necessary for basic website functionality
- Performance Cookies: Analyze website usage to improve user experience
- Functional Cookies: Remember your preference settings
- Marketing Cookies: Personalized advertising (requires your consent)
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.
11. 政策更新 | Policy Updates
中文 Chinese
我们可能会不时更新本隐私政策。重大变更将通过以下方式通知您：
- 在网站上发布更新通知
- 通过电子邮件发送通知
- 在您下次使用服务时提醒
继续使用我们的服务即表示您接受更新后的隐私政策。
English
We may update this Privacy Policy from time to time. Significant changes will be communicated through:
- Publishing update notices on our website
- Sending email notifications
- Reminding you when you next use our services
Continued use of our services indicates your acceptance of the updated Privacy Policy.