PREMO Review System
Last Updated: 11 August 2026
PREMO Review System ("PREMO Review System", "we", "us", "our") respects your privacy and is committed to protecting the personal data that we collect, use, store and process when you use our website, software, platform and related services.
This Privacy Policy and Privacy Notice ("Privacy Policy") explains how we collect, use, disclose, store, retain and protect personal data when you:
This Privacy Policy is intended to provide information regarding our personal data practices and is designed with reference to applicable Malaysian personal data protection requirements, including the Personal Data Protection Act 2010 ("PDPA"), as amended from time to time.
By using the Service or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.
PREMO Review System operates a software-as-a-service ("SaaS") platform designed to assist businesses with review management, customer engagement, marketing content, QR code functionality, AI-assisted content generation and related business tools.
For the purposes of applicable data protection laws, PREMO Review System may act as a data user / data controller in relation to personal data that we collect and process for our own business purposes.
In certain circumstances, we may process personal data on behalf of our business Customers as part of providing the Service.
Where applicable, the Customer may remain responsible for determining the purpose and manner in which personal data is collected and used through the Customer's account.
Depending on how you use the Service, we may collect different categories of personal data.
When you create an account, we may collect:
If you subscribe to the Service as a business, we may collect information relating to your business, including:
Customers using our Service may choose to collect or process information relating to their own customers.
This may include:
Where a business Customer uses our Service to process personal data relating to its own customers, the business Customer is responsible for ensuring that the collection and use of such personal data complies with applicable laws and that any required notice or consent has been obtained.
When you subscribe to our Service, payments may be processed through a third-party payment service provider.
Depending on the payment method used, we may receive information such as:
Where payment processing is handled by a third-party payment provider, we do not intentionally store complete credit card numbers or CVV/security codes on our own servers.
Your payment information may be processed directly by the relevant payment provider according to its own privacy policy and terms.
Payments, subscription charges and recurring billing may be processed through authorised third-party payment service providers, such as Razorpay or other payment providers used by PREMO.
PREMO does not store complete credit card numbers, CVV/security codes or full card credentials on its own servers.
Payment information may be processed by the relevant payment provider in accordance with its own privacy policy, terms and security requirements.
PREMO may receive limited payment-related information such as transaction status, payment reference, subscription status or masked payment information for billing and account management purposes.
When you access the Service, we may automatically collect certain technical information, including:
This information may be used for security, analytics, troubleshooting, performance monitoring and service improvement.
We may collect information about how you interact with the Service, including:
Customers may upload or submit content to the Service.
This may include:
Such information may contain personal data depending on what the Customer chooses to upload.
When you contact us, we may collect information contained in your communication, including:
We may collect personal data through:
We may also receive information from third-party service providers where permitted by applicable law.
We may collect, use and process personal data for the following purposes:
To:
We may use personal data to:
We may process personal data to:
Where the Customer subscribes to a recurring Subscription, payment-related information may be processed for the purpose of automatically charging the Customer's registered payment method.
The Service may store or receive information necessary to determine:
We do not intentionally store complete credit card numbers or CVV/security codes on our own servers where payment information is handled by an authorised third-party payment provider.
We may use personal data to:
We may use information about how Customers use the Service to:
Where reasonably practicable, we may use aggregated or anonymised information for analytics and product improvement.
We may process personal data to:
We may use your contact information to send:
These may include:
These communications may be sent even if you have opted out of marketing communications because they are necessary for the operation of your account or Service.
Where permitted by applicable law, we may send marketing communications relating to:
You may opt out of marketing communications by using the unsubscribe mechanism provided in the relevant communication or by contacting us.
Opting out of marketing communications will not prevent us from sending essential service-related communications.
Certain features of the Service may use artificial intelligence or machine learning technologies.
AI may be used to assist with:
When you use an AI feature, information you provide may be processed by our AI technology providers where necessary to provide that feature.
We will take reasonable steps to use appropriate contractual, technical or organisational measures where applicable.
AI-generated content may contain inaccuracies or errors.
Customers should not submit highly sensitive personal information into AI features unless it is necessary for the Service and permitted by applicable law.
We do not intentionally use Customer Content to train a publicly available AI model unless separately disclosed or otherwise permitted by applicable law.
The Service may interact with or provide tools relating to Third-Party Platforms such as:
These Third-Party Platforms have their own privacy policies and terms.
We do not control how Third-Party Platforms collect, use or process information once information is submitted directly to those platforms.
Customers should review the privacy policies of the relevant Third-Party Platform before using their services.
Where the Service assists Customers with Google Review-related activities, certain information may be processed to provide the relevant functionality.
This may include:
We do not guarantee the availability, accuracy, retention or display of information on Google or other Third-Party Platforms.
Where Customers use features or guidance relating to Xiaohongshu (XHS), information may be processed to provide the relevant functionality.
Customers remain responsible for complying with XHS's applicable terms, privacy policies and content requirements.
We do not control XHS's data processing activities.
Any information submitted directly to XHS may be processed according to XHS's own privacy policies.
We may use third-party service providers to help us operate the Service.
These may include:
These providers may process personal data on our behalf where necessary to provide their services.
We aim to engage service providers that provide appropriate safeguards for personal data.
We may disclose personal data where reasonably necessary for the purposes described in this Privacy Policy.
This may include disclosure to:
We may disclose information to service providers that help us operate the Service.
Payment-related information may be disclosed to payment processors to process transactions and recurring payments.
Information may be processed by hosting, database, cloud, AI, analytics, security and other infrastructure providers.
We may disclose information to:
We may disclose information where required or permitted by law, regulation, court order, government authority or lawful request.
If our business is sold, merged, reorganised, acquired or transferred, personal data may be transferred as part of the relevant transaction, subject to applicable law.
Some of our service providers, infrastructure providers or technology partners may operate outside Malaysia.
As a result, personal data may be stored, accessed or processed in countries outside Malaysia.
Where personal data is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are applied as required by applicable law.
Different countries may have different data protection laws.
By using the Service, you acknowledge that your information may be processed in locations outside Malaysia where necessary to provide the Service.
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The retention period may depend on:
When personal data is no longer required, we may delete, anonymise or securely dispose of it, subject to applicable legal requirements.
When a Customer cancels a Subscription, certain personal data may remain in our systems for a reasonable period.
This may include:
Cancellation of a Subscription does not necessarily result in immediate deletion of all personal data.
Certain information may be retained where required or permitted by law.
Customers may request deletion of personal data by contacting us.
Where legally and reasonably possible, we will consider requests to delete personal data.
However, deletion may not be possible where information is required for:
Subject to applicable law, you may request access to personal data that we hold about you.
We may require reasonable verification before processing an access request.
This is intended to protect personal data from unauthorised disclosure.
We may charge a reasonable fee for certain access requests where permitted by applicable law.
If you believe that personal data held by us is inaccurate, incomplete or outdated, you may contact us to request correction.
Where appropriate, we will take reasonable steps to correct or update the information.
Customers are responsible for ensuring that information provided to us remains accurate.
Where processing is based on consent, you may withdraw your consent by contacting us, subject to applicable legal requirements and contractual obligations.
Withdrawal of consent may affect our ability to provide certain features or services.
For example, if certain information is necessary to operate your account, withdrawal of the relevant information may result in the account or feature becoming unavailable.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
The Service is intended primarily for businesses and adult users.
We do not knowingly collect personal data directly from children for purposes unrelated to providing the Service.
If you believe that a child has provided personal data to us without appropriate authorisation, please contact us so that we can review and take appropriate action.
If you use the Service to collect, store, manage or process personal data relating to your customers, employees or other individuals, you are responsible for ensuring that:
You should not upload sensitive or unnecessary personal data to the Service.
We may use cookies and similar technologies to:
Cookies may be:
Required for core website and account functionality.
Used to remember preferences and settings.
Used to understand how users interact with the Service.
Used to help detect suspicious or malicious activity.
You may be able to control cookies through your browser settings.
Disabling certain cookies may affect the functionality of the Service.
We may use analytics tools to understand how Customers interact with the Service.
Analytics information may include:
Where possible, analytics information may be aggregated or anonymised.
We take reasonable technical and organisational measures to protect personal data against:
Security measures may include:
However, no online system is completely secure.
We cannot guarantee that personal data will never be accessed, disclosed, altered or destroyed due to circumstances beyond our reasonable control.
If we become aware of a security incident involving personal data, we will assess the incident and take reasonable steps to contain, investigate and address the incident.
Where required by applicable law, we may notify relevant authorities and/or affected individuals.
The nature and timing of any notification will depend on the circumstances and applicable legal requirements.
Customers are responsible for maintaining the confidentiality of their login credentials.
You should:
We are not responsible for unauthorised access resulting from Customer negligence, compromised credentials or insecure devices outside our reasonable control.
The Service may contain links to external websites or Third-Party Platforms.
We are not responsible for the privacy practices, security, content or policies of external websites.
Customers should review the privacy policy of any external website before providing personal information.
Where a business Customer uses the Service to process personal data relating to its own customers, employees or other individuals, the business Customer may determine the purposes for which that information is collected and used.
In such circumstances, the business Customer may be responsible for:
We may process such information only to provide the Service and in accordance with our contractual relationship with the Customer.
We do not sell personal data to third parties for their own independent marketing purposes.
We may disclose or share information with service providers where reasonably necessary to operate the Service and provide the functionality requested by Customers.
Some web browsers provide a "Do Not Track" feature.
Because there is currently no universally accepted technical standard for responding to Do Not Track signals, the Service may not respond to such signals in every circumstance.
We may update this Privacy Policy from time to time.
Changes may be made to reflect:
The updated Privacy Policy will be published on our website with a revised "Last Updated" date.
Where required by applicable law, we may provide additional notice regarding material changes.
Subject to applicable law, you may have rights relating to your personal data, including the right to:
Certain rights may be subject to legal limitations and reasonable verification requirements.
If you believe that we have handled your personal data improperly, you may contact us directly so that we can investigate the matter.
We encourage Customers to contact us first so that we can attempt to resolve the issue promptly.
Nothing in this Privacy Policy prevents you from exercising any rights available to you under applicable Malaysian law.
If you have any questions, requests or concerns regarding this Privacy Policy or your personal data, please contact us through the official contact information provided on the PREMO Review System website.
PREMO Review System
Website:
https://review.premostudio.my/
Last Updated: 11 August 2026
By using the PREMO Review System, you acknowledge that:
You have read and understood this Privacy Policy.
You understand that personal data may be collected, used, stored and processed for the purposes described above.
You understand that certain Service Providers may process personal data on our behalf.
You understand that certain data may be processed or stored outside Malaysia where necessary to provide the Service.
You understand that payment processing may be handled by third-party payment providers.
You understand that Third-Party Platforms such as Google, Xiaohongshu, Meta, Facebook, Instagram and WhatsApp operate independently and have their own privacy policies.
You understand that if you use the Service to process personal data relating to your own customers, you remain responsible for complying with applicable privacy and data protection requirements relating to those individuals.
You understand that you may contact us regarding access, correction, deletion or other permitted requests relating to your personal data.
You understand that certain personal data may need to be retained after account cancellation for legal, accounting, security, fraud prevention or other legitimate purposes.
You understand that we take reasonable measures to protect personal data but cannot guarantee absolute security of information transmitted or stored online.