Personal Data Protection Notice

1. Who We Are

The data controller responsible for your personal data is:

Seri Mestika Sdn Bhd
Company Registration No.: 0168499-K / 1988-01001142
Petaling Jaya, Selangor, Malaysia
Operating under the brand: WeShield

2. What Personal Data We Collect

We collect personal data that you provide to us directly, or that arises in the course of our services to you. This may include:

• Full name and identity card (IC) number or passport number
• Date of birth
• Contact details: mobile number (including WhatsApp), email address, mailing address
• Vehicle information: registration plate, vehicle make, model, year, engine capacity
• Property information: address, type, sum insured
• Payment information (not stored by us — processed via secure payment gateways)
• Claims history and insurance policy details
• Communications you send to us via WhatsApp, email, or our website

3. How We Collect Personal Data

We collect your personal data through the following channels:

• Our website quote form at serimestika.com
• WhatsApp messages sent to our business number (+60122737277)
• Phone calls with our agents
• Email correspondence
• Paper forms completed in person
• Information provided by you when renewing or purchasing insurance policies
• Information received from our insurance principal (Zurich Insurance Malaysia) in connection with your policy

4. How We Use Your Personal Data

Your personal data is used for the following purposes:

• Processing insurance quotations, applications and renewals
• Verifying your identity and eligibility for insurance products
• Submitting your policy details to Zurich General Insurance Berhad and/or Zurich General Takaful Malaysia Berhad
• Communicating with you about your policy, renewal dates, and claims
• Sending you insurance-related information and reminders (you may opt out at any time)
• Complying with regulatory and legal obligations under Malaysian law
• Improving our services and resolving complaints
• Any other purpose for which you have given your consent

5. Who We Share Your Personal Data With

We do not sell your personal data. We share it only in the following circumstances:

• Zurich General Insurance Berhad and/or Zurich General Takaful Malaysia Berhad — your insurance principal, for policy issuance, claims, and regulatory purposes
• Regulatory authorities — Bank Negara Malaysia (BNM) and other authorities as required by law
• Service providers — third-party payment processors and IT service providers acting under our instruction
• Legal or compliance purposes — when required by court order or applicable law

All third parties we engage are required to protect your data in accordance with applicable privacy laws.

6. Retention of Personal Data

We retain your personal data for as long as necessary to fulfil the purposes described in this notice, and as required by Malaysian law and regulatory requirements. For insurance policies, this typically means:

• Active policyholders: for the duration of your policy and any applicable claims period
• Former policyholders: generally up to 7 years after policy expiry, or as required by BNM regulations
• Enquiries and quotations that did not result in a policy: up to 2 years

7. Your Rights Under PDPA 2010

Under the Personal Data Protection Act 2010, you have the right to:

• Access your personal data held by us
• Correct inaccurate or incomplete personal data
• Withdraw consent at any time (subject to legal and contractual limitations)
• Limit processing of your personal data in certain circumstances
• Inquire about our data practices

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 8. We will respond to all requests within a reasonable timeframe and in any event within 21 days.

8. Contact — Data Protection Officer

For any queries, requests, or concerns about your personal data, please contact:

Data Protection Officer
Seri Mestika Sdn Bhd
WhatsApp: +6012-273 7277
Email: steven@serimestika.com
Address: No. 60, Jalan Selangor, Seksyen 52, 46050 Petaling Jaya, Selangor

9. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. The most current version will always be available at serimestika.com/pdpa.html. We will notify existing policyholders of material changes via WhatsApp or email.

By continuing to use our services after any such update, you acknowledge the revised notice.