Introduction
In compliance with the Personal Data Protection Act 2010 ("PDPA"), 茶洽 ("Cha Cha") ("the Company," "we," "us") is committed to protecting your personal information. This notice explains how we collect and handle your data.
Description of Personal Data
We collect information provided by you during membership registration via our POS system or website, including but not limited to:-
Name and Gender
Mobile Phone Number
Email Address
Date of Birth
Transaction and Purchase History
Purpose of Collection
Your data is collected and processed for the following purposes:-
To manage and verify your membership account.
To record and redeem loyalty points and rewards.
To send birthday-specific vouchers and marketing promotions (via SMS / WhatsApp / Email).
To improve our menu and services through data analysis.
Disclosure of Data
We do not sell your data. Your information is only shared with:-
Our POS and cloud storage providers (Data Processors).
Government or regulatory authorities if required by law.
Your Rights
You have the right to:-
Request access to your personal data.
Request correction of inaccurate data.
Withdraw consent for marketing communications.
Request the deletion of your account.
To exercise these rights, contact our Data Coordinator at chacha_crm@my-orbitous.com.
Data Security and Retention
We implement strict security measures to prevent unauthorised access. We retain your data only for as long as you remain an active member or as required for tax / audit purposes.