We may collect personal data directly from you when you interact with our website or services, including when you register an account, make an inquiry, complete a transaction, or communicate with us. The personal data we collect may include, but is not limited to:

• Full name (as stated on your identity card)
• Identity card number
• Age
• Residential address
• Telephone number
• Email address
• Payment details

We may also retain correspondence, communications, or user-generated content submitted through our platform. This information enables us to provide, operate, and improve our services and to fulfill our contractual and legal obligations.

When you access or use our website or services, certain information may be automatically collected by our servers. This may include:

• Internet Protocol (IP) address
• Browser type and settings
• Access times and referring/exiting URLs
• Clickstream data and user interaction patterns
• Pages viewed and other browsing activities

This information is collected for system administration, security, analytics, and service optimization purposes.

We may use your personal data for one or more of the following purposes:

(a)          Marketing and Communications

To send you marketing materials, newsletters, promotional content, and service updates via email or other communication channels. You may opt out at any time.

(b)          Service Delivery and Support

To administer your account, respond to inquiries, process transactions, and deliver the services you request.

(c)           Research and Internal Record-Keeping

To conduct internal research, benchmarking, statistical analysis, and maintain business and legal records.

(d)          Legal Compliance

To comply with applicable laws, regulations, and legal obligations.

We do not sell or rent your personal data. We only disclose personal data as reasonably necessary for the purposes stated in this Privacy Policy, or as required or permitted by law.

(a)          Within the SHH Group of Companies

We may disclose your personal data to other entities within the SHH Group for internal administration, service coordination, regulatory compliance, or group-wide support. All affiliated entities are required to handle data in accordance with this Privacy Policy and applicable laws. You may request a list of SHH Group Entities by contacting our Data Protection Officer below.

(b)          Third-Party Service Providers

We may engage third parties to process data on our behalf (e.g., payment gateways, IT support, logistics providers). These providers are contractually bound to implement appropriate safeguards and may process your data only for authorized purposes.

(c)           Legal and Regulatory Disclosure

We may disclose data to comply with legal obligations, cooperate with law enforcement, protect our rights or property, or prevent fraud or security threats.

(d)          With Your Consent

We may share personal data with third parties when you have provided express consent, or where consent is reasonably inferred from your actions.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. When data is no longer needed, we will securely delete or anonymize it.

We implement reasonable administrative, technical, and physical safeguards to protect your personal data from unauthorized access, disclosure, alteration, or destruction. While we take appropriate measures, no method of data transmission or storage is completely secure.

If your personal data is transferred or accessed from outside Brunei (for example, by group entities or third-party providers), we take reasonable steps to ensure such transfers comply with applicable data protection laws and that your data receives an adequate level of protection.

You may contact us if you wish to view or update your personal data, or if you have any concerns about how your data is handled. We may need to verify your identity before processing your request.

Our website may use cookies, web beacons, and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. You may disable cookies through your browser settings; however, some features may not function properly if cookies are disabled.

We may amend this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any updates will be posted on this page with the date of the latest revision.

For any inquiries, requests, or complaints regarding this Privacy Policy or the handling of your personal data, please contact:

Data Protection Officer: Amanda Ngo

Email: amanda.hui@shh-group.com

Postal Address: Unit 1–3, 2nd Floor, Lot 31750, Bangunan Melabau Complex, Jalan Muara, Kg Serusop, Bandar Seri Begawan, Brunei Darussalam