01 / Introduction
This Personal Data Protection Notice ("Notice") describes how Rhino Superior Resources Sdn Bhd (Company No. 202001036641 / 1392962-X) ("we", "us", or "our") collects, uses, discloses, and protects your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA").
By engaging with our services, submitting an enquiry, or otherwise providing your personal data to us, you consent to the processing of your personal data on the terms set out below.
02 / Personal Data We Collect
We may collect the following categories of personal data from you, your representatives, or your appointed agents:
- Identification & contact — full name, identification number (NRIC / passport), business address, telephone, email.
- Corporate — company name, registration number, designation, signing authority.
- Project — site addresses, project specifications, drawings, tender submissions, and correspondence.
- Financial — bank account details, billing information, and other payment particulars relevant to a contract.
- Technical — IP address, device identifiers, browser type, and pages visited when you access this website.
We collect personal data directly from you (e.g. enquiry forms, contracts), from publicly available sources, and from third parties such as referrers, consultants, or government registries (SSM, CIDB).
03 / How We Use Your Personal Data
We process your personal data for the following purposes:
- To respond to enquiries, quotations, and tender submissions.
- To negotiate, perform, and administer construction and engineering contracts.
- To carry out billing, accounting, and tax compliance.
- To comply with regulatory and statutory obligations (CIDB, SSM, IRB, MOF).
- To manage project communications, site coordination, and quality records.
- To detect, prevent, and respond to fraud or security incidents.
- To improve our website, services, and customer experience.
- To send you company updates, project bulletins, or marketing communications — only where you have not opted out.
04 / Disclosure to Third Parties
We do not sell your personal data. We may disclose it to the following parties strictly for the purposes set out in this Notice:
- Subsidiaries, affiliates, joint-venture partners, and contractors engaged on your project.
- Sub-contractors, suppliers, consultants, and professional advisers (legal, audit, engineering).
- Government bodies, regulators, and statutory authorities where required by law.
- Banks, financial institutions, and insurers in connection with payments or bonds.
- Courts, tribunals, and law enforcement where lawfully compelled.
Where we engage data processors, we require them to apply security measures consistent with this Notice.
05 / Security & Retention
We apply reasonable physical, technical, and organisational safeguards to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including any retention periods required by law or for the establishment, exercise, or defence of legal claims — typically not less than seven (7) years from the conclusion of a project, in accordance with the Income Tax Act 1967 and the Companies Act 2016.
06 / Your Rights
Under the PDPA, you have the right to:
- Access the personal data we hold about you.
- Correct personal data that is inaccurate, incomplete, or out of date.
- Withdraw consent to the processing of your personal data, subject to legal or contractual constraints.
- Limit the processing of your personal data for direct marketing purposes.
- Lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
Requests should be made in writing to the contact below. A reasonable administrative fee may apply for access requests.
08 / Cross-Border Transfer
Personal data we collect may be transferred to, stored, or processed outside Malaysia where our service providers operate (e.g. cloud infrastructure, email services). Where this occurs, we take reasonable steps to ensure the receiving party provides protection consistent with the PDPA.
09 / Updates
We may revise this Notice from time to time. The current version is identified at the top of this page. Material changes will be communicated through this website or via direct notice to active contacts.
10 / Contact
For any matters relating to your personal data, including access or correction requests, please contact our Data Protection Officer:
TEL +60 17-229 9811