At Kress Malaysia (“Positec”), we are committed to protecting and respecting your privacy. Our privacy policy applies to all users of Positec websites and services, including but not limited to my.kresstools.com (“KRESS”) (individually, the “Site” or collectively, the “Sites”).

This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

We take information security seriously and have in place appropriate physical, electronic and administrative procedures to safeguard and secure the Personal Data we collect through our websites, and to help prevent unauthorized access, maintain data security and correctly use the information we collect online.

INFORMATION WE MAY COLLECT FROM YOU

The Personal Information we collect about you depends on how you choose to use our website. Depending on your use, we may collect and process usage data, your name and contact information, your username and password, your payment information, records of your orders from our online e-commerce sites, any information you provide when you fill out online forms or surveys, and your IP address. We may collect and process the following data about you:

• Information that you provide by filling in forms, including but not limited to online product registration, on our Sites. This includes information you provide at the time of registering to use our Sites, registering your product for warranty purposes, subscribing to our promotional or other communication services, or requesting further services. We may also ask you for information when you enter competitions or promotions or if you report a problem with our site.
• If you contact us, we may keep a record of that correspondence.
• Information you provide to us when completing surveys that we use for research purposes.
• Details of transactions you carry out through our Sites or other means and of the fulfillment of your orders.
• Details of your visits to our Sites and the resources that you access.

IP ADDRESSES

When you visit our Site, we may collect certain information automatically from your device.

Specifically, the information we collect automatically may include information about your computer or other electronic devices used to access our Sites, like your IP address, device type, unique device identification numbers, browser type, broad geographic location (country or city-level location), third party webpages accessed from our Site, and other technical information. We may also collect information about how your device has interacted with our Site, including the pages accessed and links connected, including content accessed.

Collecting this information enables us to better understand the visitors who come to our Site, where they come from, and what content and functionality is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Site to our visitors and customers.

We may report aggregate, de-identified information to third party providers with whom we have contracted to provide data analytics purposes. This is statistical data about our users' browsing actions and patterns and does not identify any individual.

How we use your personal information

We may process your personal information: for the purposes described in this Privacy Policy, with your consent, for compliance with a legal obligation to which Positec is subject, for the performance of a contract to which you are party, in order to protect your vital interests, or when we have assessed it is necessary for the purposes of the legitimate interests pursued by Positec or a third party to whom it may be necessary to disclose information .We use information held about you in the following ways:

• To ensure that content from our site is presented in the most effective manner for you and for your computer.
• To provide you with information, products or services that you request from us, or which we feel may interest you, where you have consented to be contacted for such purposes.
• To carry out our obligations arising from any contracts entered into between you and us.
• To allow you to participate in interactive features of our service, when you choose to do so.
• To notify you about important notices, such as communications about purchases and changes to our terms, conditions, and policies.
• To help us create, develop, operate, deliver, and improve our products, services, content and advertising, and for loss prevention and anti-fraud purposes. We may also use your personal information for account and network security purposes, including in order to protect our services for the benefit of all our users, and pre-screening or scanning uploaded content for potentially illegal content. Where we use your information for anti-fraud purposes it arises from the conduct of an online transaction with us. We limit our uses of data for anti-fraud purposes to those which are strictly necessary and within our assessed legitimate interests to protect our customers and our services. For certain online transactions we may also validate the information provided by you with publicly accessible sources.
• For internal purposes such as auditing, data analysis, and research to improve Positec’s products, services, and customer communications.

We may also use your data, or permit selected third parties to use your data, to provide you with information about goods and services, which may be of interest to you, and they or we may contact you about these by email, SMS, mail or telephone.

If you are an existing customer, we will contact you by electronic means (e-mail or SMS) with information about goods and services only for other products we sell or are similar to those which were the subject of a previous sale to you.

If you are a new customer, and where we permit selected third parties to use your data, we (or they) will contact you by electronic means only if you have consented to this.

Collection and Use of Non-Personal Information

We also collect data in a form that does not, on its own, permit direct association with any specific individual. We may collect, use, transfer, and disclose non-personal information for any purpose. The following are some examples of non-personal information that we collect and how we may use it:

• We may collect information such as occupation, language, zip code, area code, unique device identifier, referrer URL, location, and the time zone where a Positec product is used so that we can better understand customer behavior and improve our products, services, and advertising.
• We may collect information regarding customer activities on our website. This information is aggregated and used to help us provide more useful information to our customers and to understand which parts of our website, products, and services are of most interest. Aggregated data is considered non personal information for the purposes of this Privacy Policy.
• We may collect and store details of how you use our services, including search queries. This information may be used to improve the relevancy of results provided by our services.
• We may use the information you provide us in order to respond to your inquiries about our services, and to send you periodic updates about our products and special offers. We may use the information that we collect to improve the design and content of our publications and websites and to enable us to personalize your Internet experience. We also may use this information in the aggregate to analyze website usage.

If we do combine non-personal information with personal information the combined information will be treated as personal information for as long as it remains combined.

COOKIES AND OTHER TECHNICAL INFORMATION

We may send "cookies" to your computer to enhance your online experience and to provide you with information on our products and special offers that are more relevant on a personal level. "Cookies" are files that can identify you as a unique customer and store your personal preferences as well as technical information (including click through and click stream data). Cookies can either be permanent (i.e., they remain on your computer until you delete them) or temporary (i.e., they last only until you close your browser). We may also use "Web beacons" that monitor your use of our websites. Web beacons are one-pixel transparent images (although they can be visible images as well) located on a Web page or in an e-mail or other type of message, and are hosted on a server enabling the verification of a user's viewing or receipt of a Web page or message. Web beacons can be used to track the IP (Internet Protocol) address of the computer or device that downloaded the page on which the Web beacon appears, the URL (Uniform Resource Locator) of the page on which the Web beacon appears, the time the page containing the Web beacon was viewed, the type of browser used to access the Web page containing the Web beacon and the identification number of any cookie on the computer or device previously placed by the server hosting the web beacon. When we correspond with you via HTML capable e-mail, Web beacons let us know whether you received and opened our e-mail. On their own, cookies or Web beacons do not contain or reveal any personally identifiable information. However, if you choose to furnish the website with personally identifiable information, this information can be linked to the data stored using cookies/Web beacons.

We work with third party advertising networks to either display advertising on our site or to manage our advertising on other sites. Those networks may use cookies and web beacons to collect information about your activities on our site and other sites to provide you targeted advertising based upon your interests. These technologies and the information collected may be used to track your activity across multiple devices. If you wish to not have this information used for the purpose of serving you targeted ads, you may opt out by using the contact details provided under the “Contact Us” heading below. Please note that this does not opt you out of being served advertising. You will continue to receive generic ads.

By accepting this Privacy Notice, you specifically agree to our use of cookies and Web beacons as described herein. You may adjust your browser to reject cookies from us or from any other website. If you have a Flash player installed on your computer, your Flash player may be able to be set to reject or delete Flash cookies. Please consult the "Help" section of your browser or Flash player for more information. Additionally, by setting your Web browser to display HTML e-mails as text only, you may be able to prevent the use of some Web beacons. However, you should be aware that disabling cookies or similar devices might the efficiency of your access to our content.

WHERE WE STORE YOUR PERSONAL DATA

The data that we collect from you may be transferred to, and stored at, a destination outside India. It may also be processed by staff operating outside India, who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfillment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Our Sites use various appropriate technical and organizational security measures, which may include, but are not limited to, network and host security controls (e.g., firewalls, intrusion detection systems), data encryption (both at rest and during transmission), and operating procedures that are designed to protect your personal information. You should protect your user ID and password and not share it with anyone. If you believe your user ID and password have been compromised or you have trouble changing your user ID or password, please contact us using the contact details provided under the “Contact Us” heading below.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

DISCLOSURE OF YOUR INFORMATION

We will disclose information we maintain when required to do so by law, for example, in response to a court order or subpoena. We may also disclose such information in response to a law enforcement agency's request, to exercise, establish or defend our legal rights, or to protect the rights, property, or safety of Positec, our employees, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

We may use third-party partners to help operate our website and deliver our products and services, and we may share your information with our service providers and other third parties that provide products or services for or through this website or for our business.

Although we take appropriate measures to safeguard against unauthorized disclosures of information, we cannot assure you that personally identifiable information that we collect will never be disclosed in a manner that is inconsistent with this Privacy Notice.

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.

We may disclose your personal information to third parties:

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If Positec or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.

YOUR RIGHTS

You have the following data protection rights:

• If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “Contact Us” heading below. Note that if you submit a request to delete your personal information, this may reduce the efficiency of your use of the Site or our services provided to you.
• You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. To opt out of other forms of marketing (such as postal marketing or telemarketing), then please contact us using the contact details provided under the “Contact Us” heading below.
• If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
• In certain countries, you may have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority, if applicable.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

Our site may, from time to time, contain links to and from Third-party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. You should consult the other websites' privacy notices, because we have no control over information that is submitted to, or collected by, these third parties. The inclusion of a link to a third-party website does not imply endorsement of the website by Positec or any association with the third-party website's operators.

CHILDREN

We understand the importance of taking extra precautions to protect the privacy and safety of children using Positec products and services. Positec does not knowingly request personally identifiable information from anyone under the age of 13 without requiring parental consent. Any person who provides their personal information to us through our Sites represents that they are older than 12 years of age.

CHANGES TO OUR PRIVACY POLICY

Positec may update this Privacy Policy from time to time in response to changing legal, technical or business developments. The revised Privacy Notice will be posted to this page so that you are aware of the information we collect, how we use it, and under what circumstances we may disclose it. We encourage you to periodically check and review this page so that you know what information we collect, how we use it and to whom we disclose it. Under certain circumstances (for example, in connection with certain material changes), we may also elect to notify you of changes or updates to our Privacy Notice, or to request your consent for such changes, by additional means, such as posting a notice on the front page of our website or sending you an e-mail.