1. Controller and contact / Pengawal data dan hubungan
NEST WORLD HOLDINGS PTE. LTD. (Singapore UEN 201622831Z), trading as GoJB, determines how personal data is used for this MVP. Its registered address is 273 Thomson Rd #02-04, Singapore 307644. Use the in-app Privacy & Data Choices centre or hello@gojb.sg for access, correction, export, deletion, closure or complaint requests.
NEST WORLD HOLDINGS PTE. LTD. (UEN Singapura 201622831Z), yang berdagang sebagai GoJB, menentukan cara data peribadi digunakan bagi MVP ini. Alamat berdaftarnya ialah 273 Thomson Rd #02-04, Singapore 307644. Gunakan pusat Privasi & Pilihan Data dalam aplikasi atau hello@gojb.sg untuk permintaan akses, pembetulan, eksport, pemadaman, penutupan atau aduan.
NEST WORLD HOLDINGS PTE. LTD. has designated its Founder/Director as its Data Protection Officer. The public business contact for the DPO is hello@gojb.sg; privacy requests may also use the in-app Privacy & Data Choices centre. / NEST WORLD HOLDINGS PTE. LTD. telah melantik Pengasas/Pengarahnya sebagai Pegawai Perlindungan Data. Hubungan perniagaan awam untuk DPO ialah hello@gojb.sg; permintaan privasi juga boleh menggunakan pusat Privasi & Pilihan Data dalam aplikasi.
2. Data collected / Data yang dikumpul
- Account data such as email, display name, authentication identifiers, locale and legal-acceptance history. / Data akaun seperti e-mel, nama paparan, pengecam pengesahan, bahasa dan sejarah penerimaan undang-undang.
- User choices such as saved outlets, trips, shares, offer presentations, support requests and correction reports. / Pilihan pengguna seperti tempat disimpan, perjalanan, perkongsian, tawaran, permintaan sokongan dan laporan pembetulan.
- Foreground location only after a Near Me request; manual area selection remains available. / Lokasi latar hadapan hanya selepas permintaan Near Me; pilihan kawasan manual kekal tersedia.
- Security and essential operational events, using minimized identifiers and no raw search text, phone number, email address or precise location in analytics. / Peristiwa keselamatan dan operasi penting dengan pengecam minimum tanpa teks carian mentah, nombor telefon, e-mel atau lokasi tepat dalam analitik.
- Merchant organization, listing, offer, rights, authority and verification records required to operate and review marketplace advertising. / Rekod organisasi, penyenaraian, tawaran, hak, kuasa dan pengesahan peniaga yang diperlukan untuk mengendalikan dan menyemak pengiklanan pasaran.
- Channel-specific notification and marketing choices, campaign eligibility evidence, suppression status, delivery outcomes and privacy-safe action attribution. Message bodies and raw contact details are excluded from analytics. / Pilihan pemberitahuan dan pemasaran mengikut saluran, bukti kelayakan kempen, status sekatan, hasil penghantaran dan atribusi tindakan yang memelihara privasi. Kandungan mesej dan butiran hubungan mentah tidak dimasukkan dalam analitik.
3. Purposes / Tujuan
- Provide accounts, saves, trips, sharing, offer presentation and redemption. / Menyediakan akaun, simpanan, perjalanan, perkongsian, paparan tawaran dan penebusan.
- Authenticate users, enforce permissions, prevent fraud and protect the platform. / Mengesahkan pengguna, menguatkuasakan kebenaran, mencegah penipuan dan melindungi platform.
- Operate merchant review, publication, freshness, support and audit workflows. / Mengendalikan semakan peniaga, penerbitan, kesegaran data, sokongan dan audit.
- Measure privacy-safe aggregate product performance and demand gaps. / Mengukur prestasi produk agregat dan jurang permintaan secara selamat.
- Comply with legal duties, investigate complaints and establish or defend legal claims. / Mematuhi kewajipan undang-undang, menyiasat aduan dan mengurus tuntutan undang-undang.
- Send user-requested service reminders and, only with separate channel consent, founder-approved marketing. Deterministic rules apply consent, suppressions, quiet hours and frequency limits; AI may draft or translate content but does not select recipients, approve or send. / Menghantar peringatan perkhidmatan yang diminta pengguna dan, hanya dengan persetujuan saluran berasingan, pemasaran yang diluluskan pengasas. Peraturan tetap mengawal persetujuan, sekatan, waktu senyap dan had kekerapan; AI hanya boleh merangka atau menterjemah kandungan.
4. Consent and choices / Persetujuan dan pilihan
Necessary account processing is required to provide authenticated features. Foreground location and optional marketing require separate choices and can be refused without losing guest discovery. Consent can be withdrawn with reasonable notice, although records required for security, transactions or legal compliance may still be retained.
Pemprosesan akaun yang perlu diperlukan untuk ciri disahkan. Lokasi latar hadapan dan pemasaran pilihan memerlukan pilihan berasingan dan boleh ditolak tanpa kehilangan carian tetamu. Persetujuan boleh ditarik balik dengan notis munasabah, tertakluk pada rekod keselamatan, transaksi atau pematuhan yang perlu disimpan.
5. Disclosure and overseas processing / Pendedahan dan pemprosesan luar negara
Data is disclosed only to service providers needed for hosting, authentication, storage, security, support or approved integrations, and to authorities where law requires. GoJB does not sell personal data.
Data hanya didedahkan kepada penyedia perkhidmatan yang diperlukan untuk pengehosan, pengesahan, storan, keselamatan, sokongan atau integrasi yang diluluskan, dan kepada pihak berkuasa apabila diwajibkan undang-undang. GoJB tidak menjual data peribadi.
Where data is processed outside Singapore or Malaysia, GoJB must use contractual, technical and organizational safeguards intended to provide protection comparable to applicable requirements. Exact vendor regions and subprocessors must be verified before production launch.
Jika data diproses di luar Singapura atau Malaysia, GoJB mesti menggunakan perlindungan kontrak, teknikal dan organisasi yang setanding dengan keperluan berkenaan. Wilayah vendor dan subpemproses mesti disahkan sebelum pelancaran produksi.
Resend is a provisional email delivery subprocessor for a future production phase. Live delivery remains disabled until its region, contract, domain authentication, webhook security and cross-border safeguards are verified. / Resend ialah subpemproses penghantaran e-mel sementara untuk fasa produksi akan datang. Penghantaran langsung kekal dimatikan sehingga wilayah, kontrak, pengesahan domain, keselamatan webhook dan perlindungan rentas sempadannya disahkan.
Stripe is the intended payment provider for GoJB merchant-plan fees. A Stripe-hosted payment flow may collect merchant billing contact and payment-method information under Stripe's own terms and privacy notice. GoJB should retain only the customer, subscription, invoice, payment-status and reconciliation references needed to administer the plan, not complete card details. Live billing remains disabled until tax, cancellation, refund, webhook-security and vendor-processing settings are confirmed. / Stripe ialah penyedia pembayaran yang dirancang untuk yuran pelan peniaga GoJB. Aliran pembayaran yang dihoskan oleh Stripe mungkin mengumpul maklumat hubungan bil dan kaedah pembayaran peniaga tertakluk pada terma dan notis privasi Stripe. GoJB seharusnya menyimpan hanya rujukan pelanggan, langganan, invois, status pembayaran dan penyelarasan yang diperlukan untuk mentadbir pelan, bukan butiran kad lengkap.
6. Retention / Penyimpanan
Personal data is retained only while needed for the stated purpose, security, dispute handling or legal obligations, then deleted or anonymized. Merchant marketplace and advertising records may require a minimum three-year retention period under applicable Malaysian rules. A detailed retention schedule remains a launch deliverable.
Data peribadi disimpan hanya selama diperlukan bagi tujuan dinyatakan, keselamatan, pertikaian atau kewajipan undang-undang, kemudian dipadam atau dinyahnamakan. Rekod pasaran dan pengiklanan peniaga mungkin perlu disimpan sekurang-kurangnya tiga tahun di bawah peraturan Malaysia.
7. Security and incidents / Keselamatan dan insiden
GoJB uses access controls, Row Level Security, encryption in transit, secret separation, audit records and least-privilege administration. No system is risk-free. Suspected incidents are assessed and notified to authorities and affected individuals when applicable law requires.
GoJB menggunakan kawalan akses, Keselamatan Aras Baris, penyulitan semasa penghantaran, pemisahan rahsia, rekod audit dan pentadbiran hak minimum. Insiden yang disyaki akan dinilai dan dimaklumkan apabila diwajibkan undang-undang.
8. Rights / Hak anda
Subject to applicable exceptions, you may request access, correction, export, deletion, account closure, consent withdrawal or information about use and disclosure. Identity may need to be verified before a request is fulfilled. GoJB will explain a lawful refusal.
Tertakluk pada pengecualian undang-undang, anda boleh meminta akses, pembetulan, eksport, pemadaman, penutupan akaun, penarikan persetujuan atau maklumat penggunaan dan pendedahan. Identiti mungkin perlu disahkan sebelum permintaan dipenuhi.
9. Automated suggestions and children / Cadangan automatik dan kanak-kanak
Planner and ranking features assist discovery but do not make legal or similarly significant decisions about a person. GoJB accounts and offer redemption are limited to people aged 18 or older, and the MVP is not directed to children.
Ciri perancang dan penarafan membantu carian tetapi tidak membuat keputusan undang-undang atau keputusan penting yang serupa tentang seseorang. Akaun dan penebusan GoJB dihadkan kepada individu berumur 18 tahun ke atas.
10. Changes and complaints / Perubahan dan aduan
Material changes receive a new version and notice. Use the Privacy & Data Choices centre to submit a complaint. You may also approach the relevant Singapore or Malaysian regulator where applicable.
Perubahan penting akan menerima versi dan notis baharu. Gunakan pusat Privasi & Pilihan Data untuk mengemukakan aduan. Anda juga boleh menghubungi pengawal selia Singapura atau Malaysia yang berkaitan.