Thyme Out Personal Data Protection Notice

1. This Personal Data Protection Notice (“Notice”) sets out the policies of Thyme Out Café,
located in Bangunan AICB and owned and operated by STF Resources Sdn. Bhd. (the
“Restaurant”) regarding the processing of your Personal Data. In the event of any conflict
between the English and other language versions, the English version shall prevail.

2. “Personal Data” means information about you, from which you are identifiable, including but
not limited to your name, address, contact details, email address, your company details, credit
cards or payment details, information related to your reservation or your dining at the
Restaurant, information relating to your purchase and receipt of products or services,
information provided on any suggestion cards or customer surveys and/or any information
about you that has been or may be collected, stored, used and processed by the Restaurant
from time to time.

3. In addition to the Personal Data you provide to the Restaurant directly, the Restaurant may
also collect your Personal Data from a variety of sources, including when you make a
reservation or dine at the Restaurant, from online restaurant reservations providers (such as
TABLEAPP), when you provide your business card or fill up a suggestion card, when you
make an inquiry or interact with the Restaurant via its social media page or website or when
you interact and communicate with the Restaurant at events.

4. The provision of your Personal Data is mandatory when you make a reservation to dine at the
Restaurant. If you do not provide the Restaurant your Personal Data, the Restaurant will not
be able to process and record your reservation. The provision of your Personal Data is
voluntary for Marketing Purposes (as outlined below).

Purposes of Use

5. The Restaurant may use and process your Personal Data for the purposes relating to the
business and activities of the Restaurant which shall include, without limitation the following
(“the Purposes”):
(a) to process and record your reservation to dine at the Restaurant;
(b) to communicate with you regarding your reservation;
(c) to provide you the goods, products and services you have requested;
(d) for purposes of billing and payments and for any goods and services you have purchased
or requested;
(e) to respond to questions, comments and feedback from you;
(f) to improve our services;
(g) for the Restaurant’s administrative and management purposes including auditing,
accounting, data analysis and investigations;
(h) for the Restaurant to comply with regulatory requirements and obligations under law;
and you agree and consent to the Restaurant using and processing your Personal Data in the
manner as identified in this Notice.

Marketing and promotional purposes

6. The Restaurant may also use and process your Personal Data for other purposes such as to
send you updates and news on its latest products, services, promotions and events that are
or may be offered by the Restaurant or its partners which may be of interest to you, by way of
messaging service (such as WhatsApp) and/or by email (“Marketing Purposes”).

7. If you do not consent to the Restaurant processing your Personal Data for the Marketing
Purposes, please notify the Restaurant using the contact details stated below.
Use by and disclosure to third parties

8. Your Personal Data may be transferred, accessed or disclosed to third parties for the Purposes
or for Marketing Purposes. Further, the Restaurant may engage other companies, service
providers or individuals to perform functions on the Restaurant’s behalf, and consequently
may provide access or disclose to your Personal Data to such service providers or third parties.
The third parties referred to in this section include (without limitation):-
(a) service providers such as online restaurant reservations providers (such as TABLEAPP);
(b) professional advisors including legal advisors, auditors, financial advisors and consultants;
and
(c) governmental authorities to comply with statutory, regulatory and governmental
requirements

Access and Correction Requests and Inquiries

9. Subject to any exceptions under applicable laws, you may request for access to and/or request
correction of your Personal Data, request to limit the processing of your Personal Data for
Marketing Purposes and/or make any inquiries regarding your Personal Data by writing to:-

F&B Operations Manager
Telephone Number: 03-2602 4200
Email Address: thymeout@stfresources.com

10. The Restaurant has the right to refuse an access or correction request for the reasons
provided under law. The Restaurant also reserves the right to impose a fee for access of your
Personal Data in the amounts as permitted under law.

11. Please note that if you withdraw your consent for the Restaurant to process your Personal
Data for the Purposes, the Restaurant may consequently not be able to provide you the goods
or services which you requested or ordered.

Acknowledgement and Consent

By providing your Personal Data to the Restaurant, by ordering from the Restaurant and/or by
dining at the Restaurant, you confirm that you have read and understood this Notice and consent
to the processing of your Personal Data by the Restaurant as described above. In the event you
do not consent to the processing of your Personal Data as described in this Notice, please contact
the Restaurant using the contact details above.