NIMROC APP

PART B — PRIVACY POLICY

1. INTRODUCTION

Nimroc Holdings Sdn. Bhd. respects the privacy of customers and is committed to handling personal data responsibly and in accordance with applicable Malaysian personal data protection requirements.

This Privacy Policy explains what information may be collected through the NIMROC App and related services, why it is used, how it may be shared, how long it may be retained and the choices available to customers.

 

2. DATA WE MAY COLLECT

Depending on the features actually implemented, the NIMROC App may collect or process:

i. Account Data

• name;

• mobile number;

• email address;

• date of birth where requested;

• address;

• profile information;

• authentication information.

ii. Booking Data

• selected outlet;

• barber;

• service;

• appointment date/time;

• booking status;

• cancellation/rescheduling; and

• No-Show records.

iii. Transaction Data

• services/products purchased;

• transaction amount;

• payment status;

• transaction reference;

• refund information; and

• outlet.

iv. Loyalty Data

• points earned;

• points redeemed;

• points reversed;

• rewards selected;

• vouchers;

• voucher redemption;

• referral code/link;

• referral status; and

• reward history.

v. Service History

• previous visits;

• previous services;

• previous barber; and

• relevant service information.

vi. Photos Haircut or service photos selected, uploaded or stored where the feature is enabled.

vii. Customer Communications

• reviews;

• ratings;

• feedback;

• complaints; and

• customer-service communications.

viii. Technical / Device Information Where actually collected:

• device information;

• operating system/app version;

• IP address;

• security logs;

• crash information;

• analytics information; and

• notification/device tokens.

​

3. WHY WE USE PERSONAL DATA

Personal data may be processed to:

• register and authenticate accounts;

• manage customer profiles;

• process appointments;

• provide barbering and grooming services;

• maintain service history;

• process transactions and refunds;

• calculate NIMROC Points;

• process reward redemptions;

• issue and validate vouchers;

• administer referrals;

• prevent fraud and system abuse;

• provide customer support;

• investigate complaints;

• maintain security;

• improve the App and customer experience;

• perform appropriate analytics;

• send essential service communications;

• provide marketing where permitted; and

• comply with legal and regulatory requirements.

​

4. PAYMENTS

Payment information may be processed through NIMROC and/or an authorised third-party payment service provider.

NIMROC may retain transaction-related information such as:

• amount;

• payment status;

• transaction reference;

• refund status; and

• accounting records.

Sensitive payment credentials may be processed directly by the applicable payment provider rather than stored by NIMROC.

Payment Gateway / Provider: Not applicable — no payment is made within the App, so no payment gateway is integrated.

​

5. POINTS, REWARDS & REFERRAL DATA

NIMROC processes loyalty information to operate the loyalty programme.

This includes linking:

Customer Account ↔ Transaction ↔ Points ↔ Reward ↔ Voucher ↔ POS Redemption

Referral information may also be processed to determine whether a referral has successfully qualified.

A referrer does not need to be shown the referred person's private purchase details.

​

6. PHOTOS

Where customers voluntarily use haircut/service photo features, NIMROC may store or process those images for service history and consultation purposes.

Access should be limited to authorised persons where reasonably necessary.

Service-history photos will not automatically be used for advertising or public social-media content solely because they are stored in the App.

Separate permission should be obtained where required for marketing use.

Camera Permission: Required — the App requests Camera access. Photo Library Permission: Required — the App requests Photo Library access.

 

7. MARKETING

NIMROC may send promotions, news, campaigns, product information and other marketing where permitted.

Marketing preferences should be separate from essential communications such as:

• booking confirmations;

• security notices;

• payment information; and

• account-related notices.

Customers should be provided with an appropriate method to manage marketing preferences.

 

8. WHO DATA MAY BE SHARED WITH

Personal data may be disclosed where reasonably necessary to:

• relevant NIMROC outlets;

• authorised NIMROC employees;

• authorised barbers or operational personnel;

• the App developer or authorised App/IT service providers;

• hosting/cloud providers;

• payment providers;

• analytics providers;

• push-notification providers;

• authentication providers;

• professional advisers;

• regulators or authorities where legally required; and

• other authorised service providers necessary to operate the App.

Service providers should only process personal data for authorised purposes and subject to appropriate safeguards.

NIMROC does not sell customer personal data for monetary consideration.

 

9. DATA SECURITY

NIMROC and its authorised technology providers will take reasonable administrative, technical and organisational measures to protect personal data against:

• unauthorized access;

• loss;

• misuse;

• alteration;

• destruction; or

• unauthorized disclosure.

No digital platform can guarantee absolute security.

 

10. DATA RETENTION

Personal data will be retained only for as long as reasonably necessary for the purposes for which it was collected and for applicable:

• operational;

• legal;

• accounting;

• transaction;

• fraud-prevention;

• security;

• dispute; and

• regulatory purposes.

Customer data is retained for as long as the customer's account remains active, and is only deleted upon the customer's request to delete their account.

 

11. CUSTOMER RIGHTS & REQUESTS

Subject to applicable law, customers may contact NIMROC regarding:

• access to their personal data;

• correction of inaccurate information;

• withdrawal of consent where applicable;

• marketing preferences;

• account deletion;

• personal-data deletion where applicable; and

• privacy questions or complaints.

Requests may be subject to reasonable identity verification.

 

12. ACCOUNT & DATA DELETION

Customers may initiate deletion of their NIMROC account through the available account deletion process.

Where deletion is completed, associated personal data will be deleted or anonymised as appropriate except information that must or may lawfully be retained.

NIMROC should clearly inform customers if certain transaction or legal records cannot immediately be deleted.

In-App Path: Profile → Settings → Delete Account

Public Web Deletion Request Page: Not provided — deletion requests are handled only within the App.

 

13. CHILDREN / MINORS

NIMROC provides Kids Haircut services.

Where personal data or photographs involving minors are processed, appropriate parent or guardian involvement or consent should be obtained where required.

 

14. CROSS-BORDER DATA PROCESSING

Some technology service providers may process or store information outside Malaysia.

Where applicable, NIMROC will take reasonable steps to ensure that personal data is handled in accordance with applicable legal requirements.

Cloud Provider: Perfect Cloud

Primary Data Hosting Country/Region: Malaysia only — no cross-border data processing.

 

15. ANALYTICS & TECHNICAL SERVICES

The App may use analytics, crash-reporting, push-notification or other technical services to maintain and improve the App.

Analytics: Firebase Analytics

Crash Reporting: Apple App Store Connects
Analytics Push Notifications: Firebase 
Authentication/Login Provider: Phone number with OTP/TAC verification (first-time login)
Location Data: Yes — collected for geolocation, to identify the nearest barber outlet when booking and for walk-in purposes.

 

16. SECURITY INCIDENTS

Where a personal-data security incident occurs, NIMROC will assess and respond to the incident in accordance with applicable requirements.

17. CHANGES TO THIS PRIVACY POLICY

NIMROC may update this Privacy Policy when necessary because of:

• App changes;

• new features;

• technology changes;

• operational changes; or

• legal/regulatory requirements.

Material changes should be communicated appropriately.

The latest version and Last Updated date will be made available through the App and/or NIMROC website.

18. PRIVACY CONTACT

 

Privacy enquiries may be directed to:

​

Nimroc Holdings Sdn. Bhd.

B-3A-07, Neo Damansara,

Jalan PJU 8/1, Damansara Perdana,

47820 Petaling Jaya, Selangor, Malaysia.

​

Privacy Contact: +60 10-985 7268

Email: hello@nimroc.com

​