PERSONAL DATA PROTECTION NOTICE / PRIVACY STATEMENT
Your privacy is important to MITSUBISHI HC CAPITAL MALAYSIA SDN. BHD. [198301006407(101631-U)] (MHCMY). This Privacy Statement outlines how we collect, use, disclose, and safeguard your personal information in connection with our lease and hire purchase facilities, in compliance with Malaysia’s Personal Data Protection Act 2010 (PDPA) and its 2024 amendments effective from 1st June 2025.
1. Collection of Personal Information
1.1 We collect personal information that you voluntarily provide to us when you contact us, express an interest in obtaining information about us or our product(s) and Services, register on the Website or otherwise when you participate in activities on the Website.
1.2 The information we collect may include the following:
a) Identification Data: Name, date of birth, national ID number, driver’s license, passport details.
b) Contact Details: Home or mailing address, phone number, email address.
c) Financial Information: Income, employment details, credit history, and bank account information (for payment processing).
d) Transactional Information: Details of your lease or hire purchase agreements, repayment history, and account activity.
e) Demographic Data: Age, gender, marital status, education level, and language.
f) Sensitive Personal Data:
i) Religion (only where required by law or with your explicit consent)
ii) Biometric Data (e.g., fingerprint or facial recognition, if applicable)
g) Technical Data: IP address, browser and device characteristics, operating system, referring URLs, device name, country, location, information about how and when interacting with our Website and other technical information, device and application identification numbers, location, browser type, hardware model Internet service provider and/or mobile carrier, operating system and system configuration information (if applicable).
h) Other details that you may submit to us or that may be included in the information provided to us by third parties.
1.3 We also collect information through cookies and similar technologies.
2. Use Of Collected Information
2.1 We will process, collect, record, hold, store, retrieve, use and disclose your personal data for the business and activities of MHCMY and for the purposes relating to the transaction you have with MHCMY including but not limited to the following purposes:-
a) assess, review and process applications for lease and hire purchase facilities;
b) verify your identity and conduct creditworthiness assessments;
c) manage and administer contracts, including billing and collections;
d) comply with legal and regulatory obligations, including reporting requirements to regulatory authorities;
e) conduct internal analytics and improve customer experience;
f) for liaison purposes;
g) for internal administrative purposes including record-keeping, auditing, data analysis;
h) for risk management and security purposes including for purposes of crime detection, prevention and prosecution;
i) for purposes of pursuing or defending claims on behalf of MHCMY, affiliates, employees and agents;
j) to maintain the security and operation of our Website; and
k) to send you marketing and promotional communications.
3. Legal Basis for Processing
3.1 We process your personal data based on:
a) Contractual necessity: To fulfill our obligations under the lease or hire purchase agreements.
b) Legal obligations: To comply with applicable laws and regulations.
c) Legitimate interests: To manage our business operations and improve our services.
d) Consent: For specific purposes where we have obtained your consent.
4. Sharing of Collected Personal Information
4.1 Your personal data may be transferred, accessed and disclosed to third parties for the purposes stated above. The classes of third parties to whom your personal data may be disclosed are as follows:
a) our professional advisors, including our legal advisors, auditors, accountants and consultants;
b) our business and promotional partners;
c) our service providers including our maintenance contractors, it service providers, company secretarial service providers, payroll administrators, advertising, marketing and public relations agencies, delivery or courier service providers and such companies engaged by MHCMY to perform functions on behalf of MHCMY;
d) payment processors and identity verification service providers;
e) credit reference agencies and debt collection agencies;
f) regulatory and governmental authorities;
g) to post testimonial on website and/or social media (where applicable); and
h) by any other MHCMY riders in the course of fulfilling the ordering and delivery process.
5. Retention of Collected Personal Information
5.1 We will only retain your personal information for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement and to comply with legal, regulatory, or operational requirements.
6. Your Access to and Request for Correction of your Personal Data
6.1 In accordance with the PDPA, you may do the following:
a) access your personal data that MHCMY holds;
b) request for such personal data to be corrected where it is inaccurate, incomplete, misleading or not up-to-date;
c) enquire or complaint about the use or processing of your personal data;
d) request that your personal data not be used for specific purposes including the use of your sensitive data or for direct marketing purposes;
e) request erasure of your data under lawful circumstances;
f) withdraw consent for data collected and processed based on consent;
g) request data portability (transfer of your personal data to another data controller) where technically feasible.
Provided always that you:
a) make your request in writing clearly to our Data Protection Officer (DPO) using the contact details provided hereunder, identifying the personal data that you wish to access, correct, enquire or complaint about or to limit its use to; and
b) pay the relevant administrative fee for the request as notified by MHCMY.
6.2 You acknowledge that, in certain circumstances permitted by law, MHCMY may be unable to comply with your request for access to or correction of personal data, particularly where fulfilling such a request would involve a disproportionate cost relative to the risk posed to your privacy or that of another individual.
6.4 You further acknowledge that the withdrawal of your consent (whether in whole or in part) may, in specific cases, result in the termination of your relationship with MHCMY. Notwithstanding such withdrawal, MHCMY may retain the legal right to continue processing your personal data where permitted or required by applicable laws or regulations.
6.4 All personal information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.
7. Securing your data
7.1 MHCMY will take reasonable technical and organisational precautions to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Our data processors are also required to comply with these security measures.
7.2 MHCMY will store all the personal information you provide on the secure servers.
8. Cross-Border Data Transfers
8.1 We may transfer your personal data to countries outside Malaysia. In such cases, we ensure that the receiving country has data protection laws substantially similar to the PDPA or that appropriate safeguards are in place to protect your data.
9. Data Breach Notification
9.1 We have implemented procedures to detect, report, and investigate personal data breaches. In the event of a breach that is likely to result in significant harm to you, we will notify the Personal Data Protection Commissioner within 72 hours and inform you without undue delay, as required by the PDPA.
10. Updating this Notice
10.1 MHCMY reserves the right to amend, revise and update this Notice at any time and will place notice of such amendments, revisions and update on this website with the revised effective date.
11. Other websites
11.1 MHCMY Website contains links to other websites.
11.2 MHCMY is not responsible for the privacy policies or practices of any third party.
12. Acknowledgement and Consent
12.1 You confirm that you have read and understood this Notice and consent to the processing of your personal data by MHCMY. Should you not consent to the processing of your personal data or wish to withdraw your consent, kindly contact MHCMY using the details described above.
13. Contact Us
13.1 If you have any questions or concerns about this Privacy Statement or would like to withdraw your consent to any use of your Personal Information or would like to obtain access or make corrections to your Personal Information records, please contact our DPO as follows :-
Company Name : Mitsubishi HC Capital Malaysia Sdn Bhd
Department : Credit Management
Address : D-29-3A, Menara Suezcap 1, KL Gateway,
No. 2, Jalan Kerinchi, Gerbang Kerinchi Lestari,
59200 Kuala Lumpur, Wilayah Persekutuan.
Email Address : mhcmy-dpo@mitsubishi-hc-capital.my
Phone Number : 03-7941 2830
Fax Number : 03-7932 2438
