Khomall Privacy Policy

This Privacy Policy (hereinafter referred to as "this Policy") applies only to the "Khomall" application operated by KH transportation Express Co., Ltd. and its affiliates (hereinafter referred to as "We") as the operator, the software development kit (SDK) and application programming interface (API) used by third-party websites and applications to access and use our products or related services (hereinafter referred to as "this Platform"), and does not apply to third-party applications or services that have separate privacy policies and are not covered by this Policy. When you use this Platform, we will collect, store, use, and provide, transmit, and transfer (if applicable) your personal information in accordance with this Policy after you agree to this Policy and the User Service Agreement. At the same time, we will explain to you through this Policy how we provide you with services to access, update, manage, and protect your personal information. This Policy is closely related to your use of this Platform, and we recommend that you carefully read and understand the entire contents of this Policy and make appropriate choices. We strive to use simple and concise language and highlight in bold those clauses that are of significant importance to your rights and interests in this Policy to draw your attention. Please read this Policy carefully before using this Platform to ensure that you have fully understood and comprehended the meaning and corresponding legal consequences of its contents, especially the bolded contents. Your selection of or clicking on "Agree" will be deemed as your acceptance of this Policy, and this Policy will be valid throughout your use of this Platform.

If you have any questions, comments, or suggestions, please contact us through the following ways,

Email: Info.khomall@gmail.com

Customer service phone number: +855 86995996

This policy will help you understand the following:

1. How we collect and use personal information

2. How we store personal information

3. How we protect personal information

4. How we share, transfer, and publicly disclose personal information

5. How we use cookies, similar technologies, and SDKs

6. Your rights

7. How we update this policy

8. How we handle personal information of minors

9. Contact us

10. Others

We are well aware of the importance of personal information to you and will do our best to ensure the security and reliability of your personal information. We are committed to maintaining your trust in us and adhering to the following principles to protect your personal information: the principle of consistency between rights and obligations, the principle of clear purpose, the principle of choice and consent, the principle of minimum necessity, the principle of ensuring security, the principle of subject participation, and the principle of openness and transparency. At the same time, we promise to adopt appropriate security measures in accordance with industry-standard security standards to protect your personal information. Please read and understand this policy carefully before using this platform.

I. The information we collect and use

1. To register an account on this platform

(1)  When you register with your mobile phone number, you need to provide a complete phone number that can receive SMS or calls to complete the registration. We will confirm the validity of your identity by sending a text message or voice verification code. After verification and reading and agreeing to this policy and the "User Service Agreement," your account registration will be completed.

(2)  When you log in to this platform through a third-party account (such as WeChat or Facebook), you need to authorize us to access the public information of the third-party account you use for login (such as profile picture, nickname, gender, and other information you authorize), and bind that account to your account on this platform. If you do not agree to authorize or refuse us to obtain the above information, you will not be able to log in to this platform through the third-party account, but it will not affect your normal use of other functions of this platform.

(3)  After completing the registration of your account on this platform, you can decide whether to provide additional information such as your profile picture and nickname to further complete your online identity. Providing such information can help us provide better service and experience for you, but it will not affect your using of basic functions of this platform if you choose not to provide the above information.

2. To avail audio interactions, image and text messaging features, or live streaming services.

When you actively engage in audio communication, send messages, images, or participate in or watch live streaming, we will collect relevant information such as audio, images, and video from your camera, and display your nickname, profile picture, and the content of your published information.

(1)  When you use the scan QR code, audio communication, speech-to-text, or live streaming services on our platform, we will request your authorization to access the microphone. If you do not agree or refuse to grant permission, you will not be able to use this function, but it will not affect your normal use of other functions on our platform.

(2)  When you use the services such as taking photos to recognize images, sending image messages, starting a live streaming, or modifying your profile, we will request your permission to access storage. If you do not agree or refuse to provide permission, you will not be able to use this function, but it will not affect your normal use of other functions on our platform.

(3)  When you use the functions of live streaming, public screen chat, placing orders, and other information publishing functions to publicly post information, we will request your authorization for camera, microphone, and storage permissions. If you do not agree or refuse to authorize, you will not be able to use this function, but it will not affect your normal use of other functions of this platform.

3. To provide search services

When you use our platform's search service, we collect your search keyword information and search records. In order to provide efficient search services, some of the aforementioned information will be temporarily stored on your device and can be used to show you search results and search history. You can choose whether to clear the aforementioned search history records on your own.

4. Top-up and check virtual assets

When you enter the "Balance" function, you can check the remaining amount of your virtual assets and make purchases and top-ups through this page. We will collect information on the remaining amount of your virtual assets and display it on the "Balance" function page. When you use functions related to payments, product payments will be completed through payment services provided by third-party payment institutions. The third-party payment service may use biometric information for payment verification. When you use third-party payment services, please read the privacy policy of the third-party institution; if you do not agree with the agreement, please stop using the third-party payment service in a timely manner.

5. Identity verification

According to laws, regulations, and regulatory requirements, when you use functions such as successful redemption of bargained products or purchasing special-priced products, you need to provide valid identity document information (prompting you to provide timely and effective identity document information, color photocopies, or photos for us to verify and keep record), contact information, address, and mobile phone number to complete multiple cross-verification of basic identity information. These are sensitive personal information, and you can refuse to provide them, but if you do not provide the aforementioned information, you will be unable to use this function, yet it will not affect your normal use of other product features.

6. Personal information obtained by us from third parties.

(1)  Information collected by us from other users who use this platform, such as personal information about you that may be included in other users' posted information (such as comments, live broadcasts, messages, posted pictures and audio) that are related to you.

(2)  When you use the identity authentication function provided by the product, we will adopt industry-standard practices and make the best commercial efforts to ensure the security of your personal sensitive information in accordance with relevant laws and regulations and/or the necessary requirements of the identity authentication function. If you do not provide this information, you may not be able to acquire the relevant services, but it will not affect your normal use of other functions.

(3)  When you log in using a third-party account, you may choose to authorize the product to read and obtain your publicly available information (including nickname and profile picture) registered, published, and recorded on the third-party platform, provided that it complies with legal requirements. We need your authorization to obtain the above information from third parties in order to remember your login identity as a product user and provide you with better product services. We will only collect and use your personal information within the scope of your authorized consent.

You should note that this policy only explains situation of the information collection, and the actual scope of personal information indirectly obtained from third parties is subject to page display. This policy cannot be used as the privacy policy terms of third-party services. We strongly recommend that you read and understand the specific contents of the service agreement and privacy policy related to third-party services before using them, understand the rules for collecting and using personal information by third-party services, and the protection and personal information rights that you have.

 

II. How we store personal information

1. The personal information collected and generated within the Kingdom of Cambodia by us will be stored within the Kingdom of Cambodia. We will not transfer the above information overseas. If it is necessary to transfer the relevant personal information collected within the Kingdom to overseas institutions for cross-border business, we will comply with relevant national regulations, seek your consent, and follow the requirements of laws, regulations, and relevant regulatory authorities. We will also require the overseas institutions to keep your personal information confidential by signing agreements, conducting on-site inspections, and implementing effective measures.

2. We will only retain your personal information for the period necessary to achieve the purposes stated in this policy, unless it is necessary to extend the retention period or permitted by law. We will only retain your personal information for the period necessary to provide the platform services, for example, the images, audio and video content you publish, we will retain the relevant information during the period before you withdraw, delete or deactivate your account. After the necessary period, we will delete or anonymize your personal information.

 

III. How we protect personal information

The personal information protection measures provided in this policy only apply to this Platform. Once you leave this platform and browse or use other websites, services, and content resources, we have no ability and obligation to protect any personal information you submit on software or websites other than this Platform, regardless of whether you log in, browse or use the aforementioned software or websites based on links or guides from this Platform.

1. To ensure the security of your information, we are committed to using various security technologies and supporting management systems to minimize the risk of your information being leaked, damaged, misused, accessed, disclosed, or changed without authorization.

We will take all reasonable and feasible measures to protect your personal information. For example,

(1)  When exchanging data (such as banking information) between your device and our "Product Service," it is protected by SSL encryption.

(2)  We use encryption technology to ensure the confidentiality of the data.

(3)  We use trusted protection mechanisms to prevent data from being maliciously attacked.

(4)  We deploy access control mechanisms to ensure that only authorized personnel can access personal information.

(5)  We hold security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal information.

(6)  We believe in implementing other reasonable and feasible protection measures.

2. We will use encryption technology not lower than industry peers, anonymization and other reasonable means to protect your personal information, and use security protection mechanisms to prevent malicious attacks on your personal information.

3. We will take all reasonable and feasible measures to ensure that no irrelevant personal information is collected.

4. The internet is not an entirely secure environment, and instant messaging and communication with other users are not encrypted. We strongly advise you not to send personal information through such means. Please use complex passwords to help us ensure the security of your account. It is essential that you safeguard your login name and other identity elements. When using this platform, we will identify you by your login name and other identity elements. If you disclose any of the above information, you may suffer losses and may be subject to adverse legal consequences. If you suspect or find that your login name and/or other identity elements may have been compromised, please contact us immediately so that we can take appropriate measures to avoid or reduce any related losses.

5. We will periodically update and publicly disclose relevant contents of security risk and personal information security impact assessment reports.

6. The internet environment is not 100% secure, and we will do our best to ensure or guarantee the security of any information you send us. If our physical, technical, or management protection measures are compromised, resulting in unauthorized access, public disclosure, tampering, or destruction of information, and causing damage to your legal rights and interests, we will assume corresponding legal responsibilities.

7. After a personal information security incident occurs, we will promptly inform you in accordance with legal and regulatory requirements: the basic situation and possible impact of the security incident, the measures we have taken or will take, suggestions for you to prevent and reduce risks, and remedial measures for you. We will inform you of the relevant information of the incident by email, phone, or push notification in a timely manner. If it is difficult to inform each individual whose information is affected, we will publish a notice in a reasonable and effective manner. We will also proactively report to regulatory authorities on the handling of personal information security incidents as required.

IV. How we share, transfer, and disclose personal information

1.  How to share personal information

We will not share your personal information with companies, organizations, and individuals outside of the product and service providers. We may share certain personal information with partners to provide better customer service and user experience. We will only share your personal information for legitimate, lawful, necessary, specific, and explicit purposes, and only the personal information necessary to provide the service will be shared. The specific situations are as follows:

(1)  Sharing with explicit consent: We will share your personal information with other parties with your explicit consent.

(2)  Sharing based on legal requirements: We may share your personal information with external parties in accordance with legal and regulatory requirements, litigation dispute resolution needs, or requests made by administrative or judicial authorities in accordance with the law.

(3)  Sharing for the purpose of realizing product functions or services:

i. Your personal information may be shared with our affiliated companies. We will only share necessary personal information and will be bound by the purposes stated in this policy. If our affiliated companies need to change the purposes of processing your personal information, they will seek your authorization and consent again.

ii. When you use functions provided by our affiliates or third parties, or when

software service providers, smart device providers, and system service providers cooperate with us to provide you with services, we will share the information necessary to achieve the business with these affiliates and third parties. It should be noted that when the relevant service provider provides services to you by accessing third-party pages such as redirecting to the service provider's page, the corresponding service provider will directly obtain the corresponding personal information authorization and usage license from you. The personal information collected directly by the service provider is not within the scope of personal information shared by us with them.

iii. Balance function: The related services in the balance function are provided by our affiliates and partners. When you use wallet-related functions, our affiliates and partners will collect necessary information within the required limits based on the function or service.

iv. Payment Function: The payment function is provided to you by a

third-party payment institution that cooperates with us. The third-party payment institution may need to collect your name, bank card type and number, expiration date, and mobile phone number. Bank card number, expiration date, and mobile phone number are sensitive personal information, and this information are necessary for the payment function. Refusing to provide them will result in your inability to use this function, but it will not affect the normal use of other functions.

(4)  Sharing for Product Safety and Analysis:

i. Ensuring Safe Use: In order to protect the security of your account and property, and to ensure that your and our legitimate rights and interests are not unlawfully infringed upon, we and our affiliated companies or service providers may share necessary device, account and log information.

ii. Analyzing product usage: In order to analyze the usage of our service and improve the user experience, we may share statistical data on product usage (crashes, flashbacks) with affiliates or third parties. These data are difficult to combine with other information to identify your personal identity.

iii.  Academic Research: To enhance research capabilities in relevant fields and

promote scientific and technological development, we may share de-identified or anonymized data with research institutions or universities, under the premise of ensuring data security and legitimate purposes.

(5)  User-initiated information sharing

Several services provided by this platform allow you to share your information not only with your social network, but also with all users who use this service publicly, for example, the information you upload or publish on this platform (including your public personal information and the lists you create), your responses to the information uploaded or published by others, and the log information related to this information. Other users who use our services may also share information (including log information) related to you. In particular, our social media service is designed to enable you to share information with users around the world, so that shared information can be transmitted in real time and widely. As long as you do not delete shared information, the information will remain in the public domain. Even if you delete shared information, the information may still be cached, copied, or stored independently by other users or non-affiliated third parties that are not under our control, or may be saved by other users or such third parties in the public domain. The content and information you provide, upload or publish in our service (such as photos or information about your social activities) may disclose your sensitive personal information. You need to carefully consider whether to use our service to disclose your sensitive personal information.

Therefore, please carefully consider the information you upload, publish, and communicate through our platform's services. In some cases, you can control the range of users who have the right to view your shared information through the privacy settings of certain services on our platform. If you request to delete your personal information from our services, please follow the instructions provided in the relevant special service terms.

2. How to transfer personal information

We will not transfer your personal information to any company, organization or individual, except in the following circumstances:

(1)  Transfer with explicit consent: We will transfer your personal information to other parties with your explicit consent.

(2)  In the event of a merger, acquisition, asset transfer, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization that holds your personal information to continue to be bound by this policy, and continue to protect your personal information in accordance with laws and regulations, and security standards not lower than those required by this policy. Otherwise, we will require the company or organization to re-solicit your authorization and consent.

3. How personal information is disclosed

We will only publicly disclose your personal information and adopt security measures that comply with industry standards in the following circumstances:

(1)  With your explicit consent and based on legal disclosure,

(2)  We may publicly disclose your personal information in situations where it is required by law, legal proceedings, litigation, or government regulatory agencies.

(3)  We may also publish notices of penalties for accounts in violation or engaged in fraudulent activities.

4. Sharing, transferring, and disclosing personal information without obtaining consent

According to laws, regulations, and national standards, we may share, transfer, or publicly disclose your personal information without obtaining your authorization or consent in the following circumstances:

(1)  Directly related to national security or defense;

(2)  Directly related to public safety, public health, or significant public interests;

(3)  Directly related to criminal investigation, prosecution, trial, and judgment enforcement;

(4)  Necessary to protect your or other individuals' significant legal rights and interests but difficult to obtain your consent;

(5)  Personal information voluntarily disclosed by you to the public;

(6)  Collecting personal information from legally disclosed information, such as legal news reports and government information disclosure channels.

V. How we use Cookie, similar technologies, and SDKs

1. Cookie

To provide you with a more seamless browsing experience, we may identify your identity through small data files when you use our products. This can help you avoid the step of repeatedly entering registration information or help determine the security status of your account. These data files can be cookies, which typically contain identifiers, site names, and some numbers and characters. You can manage or delete cookies according to your preferences. However, please note that if you disable cookies, you may not be able to enjoy the best service experience, and some services may not function properly. In addition to cookies, we also use website beacons, pixel tags, and other similar technologies on our website.

2. Similar technologies to cookies

In addition to cookies, we also use website beacons, pixel tags, and other similar technologies (such as beacons and proxies), but we will not use cookies and similar technologies (such as beacons and proxies) for any purposes other than those described in this policy.

3. SDK technology (Software Development Kit technology)

Detailed disclosure is required if other third-party SDKs are integrated. Directory of third-party SDKs.

 

VI. Your rights

In accordance with relevant laws, regulations, national standards, and industry practices, we ensure that you have the following rights with respect to your personal information, and the scope and method of accessing, modifying, and deleting your personal information will depend on the specific service you are using:

1. Accessing your personal information

You have the right to access your personal information, except in cases provided by laws and regulations. If you wish to exercise your data access rights, you can access it on your own through the following ways:

Account information - If you wish to access or edit the personal information in your account, you can do so by clicking "Mine"-"Setting" in the lower right corner on Home Page of this platform and performing the corresponding operation.

If you cannot access the personal information above through the above methods, you can contact us through our customer service phone or email.

We will respond to your access request within 15 working days.

2. Correcting your personal information

In general, you can browse, modify, and delete the information you submit at any time, and directly delete the content you post. However, for security and identification purposes, you may not be able to independently modify certain initial registration information submitted during registration (such as phone number). If you need to modify such information, you can submit a correction request by calling customer service or sending an email, and we will review the issue as soon as possible and respond promptly after verifying your user identity by a dedicated person.

3. Delete Your Personal Information

Requests for Deletion of Personal Information You can request us to delete your personal information in the following situations:

(1)  If our processing of personal information violates laws and regulations;

(2)  If we collect and use your personal information without your consent;

(3)  If our processing of personal information violates our agreement with you;

(4)  If you no longer use our platform or services;

(5) If we no longer provide our platform or services to you.

You can provide us with feedback on your other needs for deleting personal information through manual customer service, and we will respond within 15 working days. If we decide to respond to your deletion request, we will also notify entities that have obtained your personal information from us to promptly delete it, unless otherwise required by laws and regulations or these entities have obtained your independent authorization.

When you delete information from our service, we may not immediately delete the corresponding information from our backup system, but we will delete this information when the backup is updated.

4. Manage your authorization scope

Each business function requires some basic personal information to be completed. For the collection and use of additional personal information, you can give or withdraw your authorization at any time.

You can take the following actions by yourself:

You can change your authorization scope in the function and service by deleting information or disabling device functions.

Specific business functions and services will require your personal information to be completed. If you withdraw your consent, we will not be able to continue providing you with the corresponding function and service, nor will we process your corresponding personal information. However, your decision to withdraw your consent will not affect the personal information processing that we have carried out based on your consent before.

If you encounter difficulties in withdrawing your consent, you can contact us through manual customer service, and we will reply to your withdrawal request within 15 working days. After you complete the withdrawal of consent, we will no longer process the corresponding personal information. However, your decision to withdraw your consent will not affect the personal information processing that we have carried out based on your authorization before.

5. Delete account (need to add account delete function)

You can log out of your account by going to "Mine" - "Setting" - "Delete Account" in the product application. Please make sure that the account you apply for delete is the one created by yourself according to the provisions of the "User Service Agreement" and provided to you by us. It is recommended that you back up all relevant information of the account before deletion, and please confirm that all services related to the account have been properly handled.

Before you delete your account, we will verify your personal identity, security status, and device information. If your account is involved in disputes or controversies, including but not limited to complaints, reports, lawsuits, arbitration, or investigations by national authorities, you understand and agree that we have the right to decide whether to terminate the deletion of your account, without the need to obtain your further consent.

Considering that there may be situations where users accidentally request to delete their accounts, we will provide a 15-day account appeal period starting from the day the user submits the account deletion request. During the appeal period, users can log in to the product account to cancel the account deletion request. If the user does not cancel the account deletion request during the appeal period, the account will be automatically deleted when the appeal period expires. After the appeal period expires, the user can use the original phone number or a third-party account to re-register the product account.

You are aware and understand that after you have deleted your account, you will not be able to use any of the previous account or retrieve any of the content or information that you browsed, followed, added, or bound (even if you re-register and use the product with the same phone number). Deleting the account does not exempt or reduce the liability of the account's actions and responsibilities before the deletion. Deleting the account is an irreversible and unrecoverable action. After deleting the account, we will delete the relevant information about you or anonymize it, except as otherwise provided by laws and regulations. Please be aware and understand that according to relevant laws and regulations, we will retain logs for no less than 6 months.

6. How we will respond to your request

For security reasons, you may need to provide a written request or other forms of proof of your identity. We may require you to first verify your identity before processing your request.

We will respond to your request within thirty working days. We do not generally charge a fee for reasonable requests, but for multiple or excessive requests beyond a reasonable limit, we may charge a certain cost fee. We may refuse requests that are unjustified, require excessive technical means (such as developing a new system or fundamentally changing current practices), pose risks to the legitimate rights and interests of others, or are highly impractical.

We will not be able to respond to your request in the following circumstances:

(1)  As required by laws and regulations: directly related to national security and national defense security;

(2)  Directly related to public security, public health, and major public interests;

(3)  Directly related to criminal investigation, prosecution, trial, and execution of judgment;

(4)  Sufficient evidence shows that you have subjective malice or abuse of rights;

(5)  Responding to your request will cause serious damage to your or other individuals' or organizations' legitimate rights and interests;

(6)  Involving business secrets.

7. Report and Complaint

You can make a complaint or report according to our publicized accesses. If you believe that your personal information rights may be infringed upon, or if you find clues of personal information rights infringement, you can contact us through "Mine" - "Help & Report", online customer service, customer service hotline, or email. We will review and respond to your complaint or report within 15 working days.

8. Access Privacy Policy

You can view the full content of this policy by clicking "Mine"/ About Us” and then "Privacy Policy" in registration or login page, or after logging in.

9. Stop operating and notify your rights

If we cease operations, we will promptly stop collecting your personal information and notify you of the cessation of operations through individual delivery or public announcements. We will also delete or anonymize the personal information we hold about you.

VII.  How we update this policy

To provide you with better services, we may make revisions to this policy from time to time. Such revisions will be an integral part of this policy and have the same effect as this policy. If such revisions result in a substantive impairment of your rights under this policy, we will notify you by prominently displaying the changes on the page before the changes take effect. In such a case, if you continue to use our services, you will be deemed to have agreed to be bound by the revised policy.

VIII. How we handle personal information of minors

1. We expect parents or guardians to guide minors in using our services

You must be at least 18 years old or reach the legal age of majority in your jurisdiction to access and use our services. If you are a minor (under 18 years old), we are unable to provide you with our services in accordance with regulatory requirements. You should proactively cancel, uninstall, delete this platform and refrain from using our services.

2. Self-examination and Accepting Feedback

If we discover that we have collected personal information of minors without prior verifiable parental consent, we will make efforts to promptly delete the relevant data. If you are the guardian of a minor and have questions regarding the personal information of the minor you are responsible for, please contact us through the contact information provided in this policy.

IX. Contact us

We provide the following channels for users to provide feedback, complaints, suggestions, and inquiries related to personal information issues, and we will review the issues involved as soon as possible and respond within 15 working days after verifying your user identity:

You can send your feedback to the email address Info.khomall@gmail.com.

X. Other

1. The headings in this Policy are for convenience and reading purposes only and do not affect the meaning or interpretation of any provision in this Policy.

2. The platform and related services referred to in this Policy may vary depending on the model of your mobile phone, system version, and software application version. The final platform and services shall be subject to the products and related services you are using.

 

Release Date: 10-03-2023

Update Date: 11-03-2023