DATA PRIVACY POLICY FOR ZALORA JOB APPLICANTS

  • We wish to thank you for your interest in a career with ZALORA! Please read through this Data Privacy Policy (“Policy”), which outlines ZALORA’s collection, use, protection, disclosure and retention of your personal data collected as part of your job application.
  • This Policy applies to all persons who have applied for any position with ZALORA and all references to employment shall apply equally to internships and traineeships (as may be applicable).
  • We may collect the following personal data about you during the recruitment process:
    • Name or alias, gender, NRIC/FIN or relevant national identification number, date of birth, nationality, country and city of birth;
    • Mailing address, contact numbers, email address and other contact details;
    • Resume, educational qualifications, professional qualifications, certifications and employment references;
    • Employment and training history;
    • Photographs and if you are interviewing at our premises, videos of you for on-site security purposes; and
    • Information about you from third parties (including but not limited to information from your referees, public records, background check agencies, recruitment agencies) regarding the qualifications, experience, eligibility and/or other information for recruitment-related purposes.
  • We generally collect personal data that:
    • you knowingly and voluntarily provide in the course of or in connection with your job application with us (for example, in your employment application form), or via a third party who has been duly authorized by you to disclose your personal data to us (your “authorized representative”, which may include your job recruitment agent or your online jobs listing website), after (i) you (or your authorized representative) have been notified of the purposes for which the data is collected and (ii) you (or your authorized representative) have provided written consent to the collection and usage of your personal data for those purposes; or
    • where our collection and use of such personal data without your explicit consent is deemed, permitted or required by the relevant personal data protection legislation (e.g. the Singapore Personal Data Protection Act 2012, the Malaysia Personal Data Protection Act 2010, the Taiwan Personal Information Protection Act, the Indonesia Law No. 11 of 2008 regarding Electronic Information and Transactions, the Philippines Data Privacy Act of 2012 and the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (“Applicable Data Privacy Laws”).
  • We collect and use your data for various purposes including for the following purposes (“Purposes”):
    • Assessing and evaluating your suitability for employment in any current or prospective position within our organisation;
    • Verifying your identity and the accuracy of your personal details and other information provided;
    • Performing background checks for fraud, criminal history or credit history as may be relevant to the nature of your job application with us; and
    • Sharing with other members of the ZALORA Group for evaluation for other roles or careers with other ZALORA Group members.

    The Purposes listed above may continue to apply for a reasonable period following your initial job application even in situations where your initial job application was unsuccessful.

  • We shall seek your consent before collecting any additional personal data and before using your personal data for a purpose which has not been notified to you (except where permitted or authorized by law).
  • We will not disclose personal data provided by you to any third party without your consent except to our a) employees, consultant, temporary workers; b) ZALORA Group members; c) our professional advisors, agents, vendors, suppliers, contractors, third party service providers, business partners, insurance companies; or e) statutory, regulatory and governmental authorities, within or outside Malaysia for the Purposes set out above.
  • The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time you withdraw your consent in writing. You may withdraw your consent and request us to stop using and/or disclosing your personal data for any of all of the purposes listed above by submitting your request in writing to us or via email to hr@zalora.com. Upon receipt of your written request to withdraw your consent, we may require a reasonable period of time (depending on the complexity of the request and its impact on our relationship with you) to process your request. In general, we will seek to process and effect your request within thirty (30) days of our receipt.

    Please note that your withdrawal of your consent does not affect our right to collect, use and disclose personal data where such collection, use or disclosure without consent is permitted or required under applicable laws and regulations.

  • If you wish to make:
    • an access request to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or
    • a correction request to correct or update any of your personal data which we hold,

    You may submit your request in writing or via email to HR at hr@zalora.com. Please note that an access request under (a) above may be subject to a reasonable fee in accordance with the Applicable Data Privacy Laws, depending on the scope of your request. If so, we will inform you of the fee before processing your request.

    We will respond to your access request as soon as reasonably possible. Should we be unable to respond to your access request within thirty (30) days after receiving your access request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so.

    Please note that depending on the request made, we will only need to provide you with access to the personal data contained in the documents requested, and not the entire documents themselves. For example, we may not be required to provide you with documents which we created for evaluative purposes. In those cases, we may choose to provide you with a redacted copy or provide you with confirmation of the personal data that we have on record, if the record of your personal data forms a negligible part of the document.

  • We have introduced appropriate administrative, physical and technical measures such as up-to-date antivirus protection, encryption and access controls to secure all storage and transmission of personal data by us to safeguard your personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal or other similar risks. We will only disclose your personal data both internally and to our authorized third-party service providers on a need-to-know basis only.
  • However, please note that no method of transmission over the Internet or method of electronic storage is completely secure. Nonetheless, we strive to protect the security of your personal data at all times and constantly review and enhance our information security measures.
  • We may retain your personal data for as long as it is necessary to fulfil the purposes for which they were collected, or as required or permitted by applicable laws including data protection laws and regulations.

    We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purposes for which your personal data were collected, and are no longer necessary for legal or business purposes. Generally, we will not retain your personal data beyond one (1) year from the date of your application.

  • We may store your personal data on our third-party servers provided to us by reputable third party vendors such as Amazon Web Service, Google Drive. These servers may be located outside of the jurisdiction in which your personal data was collected by us.
  • We reserve the right to update and amend this Policy from time to time. Any changes we make to this Policy in the future will be posted on our website You agree to be bound by the prevailing terms of the Policy as updated from time to time.
  • You confirm that all personal data provided by you is accurate and complete, and that you will promptly update us in the event of any change to such personal data.
  • If you are an applicant from Malaysia, you may notice that this Policy is issued in both English and Bahasa Malaysia. In the event of inconsistencies or discrepancies between this English version and Bahasa Malaysia version, this English version shall prevail.
  • In the event that you have disclosed the personal data of any third party (e.g. spouse, family members) in your job application, you warrant that you have procured the consent of such third party to disclose such personal data in your job application.
By acknowledging this form,
  • You acknowledge that you have read, understood and agreed to the above Policy, and consent to the collection, use and disclosure of your personal data by us for the purposes set out in the Policy;
  • In the event that we have received your job application or personal data from any third party pursuant to the purposes set out in the Policy, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the Policy; and
  • In the event that you have disclosed the personal data of any third party (e.g. spouse, family members) in your job application, you warrant that you have procured the consent of such third party to disclose such personal data in your job application.