PRIVACY NOTICE
Guan Ho Leong Group Sdn Bhd
Trading as Guan Ho Leong Optical and Guan Ho Leong Optical – BDC
Last updated: 15/07/2026
1. Who We Are
Guan Ho Leong Group Sdn Bhd ("we", "us", "our") is the data controller for the Guan Ho Leong Optical retail outlets, including Guan Ho Leong Optical – BDC, located at 985 Ground Floor, BDC Commercial Centre, Taman Satria Jaya BDC, Jalan Stutong, 93350 Kuching, Sarawak, Malaysia.
This Privacy Notice applies to:
Our physical store;
Our official websites at help.ghlg.my, updates.ghlg.my, and csr.ghlg.my;
Our official social media and messaging channels (Facebook, Instagram, Google Business, Telegram, and WhatsApp).
This Notice applies exclusively to outlets owned and operated by Guan Ho Leong Group Sdn Bhd. Other retailers using similar or identical trading names are independent entities and are not covered by this Notice.
A Bahasa Malaysia version of this Privacy Notice is available on this page. This Privacy Notice is issued in both English and Bahasa Malaysia. In the event of any conflict, inconsistency, or discrepancy between the English version and the Bahasa Malaysia version, the English version shall prevail.
2. Personal Data We Collect
We collect personal data to provide our optical services effectively. This includes:
Category | Examples |
|---|---|
Identity Data | Full name, contact number, email address. NRIC numbers are collected only where strictly necessary (e.g., for loyalty schemes, senior citizen discounts, warranty registration, or government‑mandated tax/audit purposes) and with your explicit consent. |
Sensitive Personal Data | Optical prescriptions, vision health records, and eye care history. Processing of this data is subject to your explicit, informed consent. |
Transactional Data | Purchase history, receipts, and promotion redemption records. |
CSR Data | Information submitted via our CSR portal (csr.ghlg.my), including partnership proposals, vision screening requests, and beneficiary support enquiries. |
Technical & Marketing Data | Website activity, QR code scan logs, social media engagement metrics (including Instagram and Facebook), and marketing chat group preferences (Google Business, Telegram, WhatsApp). |
3. Purposes of Processing
We process your personal data for the following lawful purposes:
To fulfil optical services, including eye examinations, dispensing of spectacles and contact lenses;
To manage loyalty programmes, warranties, and special discounts (including verification of NRIC where applicable);
To administer promotional campaigns and supplier redemptions;
To respond to customer enquiries, feedback, and after‑sales support;
To manage CSR initiatives and community outreach programmes;
To send direct marketing communications (only with your explicit opt‑in consent) via email, Facebook, Instagram, WhatsApp, Telegram, or other channels;
To comply with Malaysian statutory, tax, audit, and legal requirements.
4. Disclosure of Personal Data
We do not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes outlined above:
Third Party | Purpose |
|---|---|
Contact Lens Suppliers | Manufacturers of contact lenses (including but not limited to CooperVision and Johnson & Johnson) for contact lens promotion fulfilment and product-related after‑sales support. |
Optical Lens Suppliers | Manufacturers of prescription spectacle lenses (including but not limited to Zeiss) for eyewear promotion fulfilment, product warranties, and lens‑related after‑sales support. |
NGOs / Community Partners | For CSR activities, only with your prior explicit consent. |
Service Providers | IT, cloud hosting, and operational support providers. |
Legal & Regulatory Authorities | As required by law or to defend our legal rights. |
5. Data Security and Retention
We implement robust physical and digital safeguards to protect your personal data from unauthorised access, loss, or disclosure. Access is restricted to authorised staff only.
We adhere to the following retention schedule:
Record Type | Retention Period |
|---|---|
Transactions and tax records | 7 years (per Malaysian statutory requirements). |
CSR programme records (operational) | 3 years from the date of the relevant programme or activity. |
Marketing data / chat group memberships | Until you withdraw your consent or opt out. |
Media‑related records (consent forms, photo/video releases) | For as long as the associated media (photographs, videos, or other content) remains published on our websites, social media channels, or partner platforms. In cases where our NGO partners (including Rotary International and its affiliated clubs) require longer retention for their audit or compliance purposes, we will retain relevant records for the period reasonably required to fulfil our partnership obligations, provided such retention is consistent with the purposes for which the data was collected. |
Once the applicable retention period expires, your data will be securely destroyed or anonymised.