Notice

We, MTrustee Berhad and Hektar Asset Management Sdn Bhd, as the Trustee and Manager of Hektar REIT respectively, recognize the importance of privacy and the sensitivity of personal data. As required under the Personal Data Protection Act 2010, the purpose of this Personal Data Protection Notice ("Notice") is to inform you about how we collect and process your personal data when you apply for or subscribe for or purchase unit(s) of Hektar REIT ("Unit(s)") (collectively known as "unitholder"), when you access and use our website and/or interact with us including through annual general meetings, extraordinary general meetings, telephone conversations or through any correspondence with us.

By becoming our unitholder, by accessing and using our website or by interacting with us, you consent to us using, collecting and processing your personal data in the manner contemplated in this Notice.

This Notice may be amended or updated from time to time. We would advise you to check this Notice on our website at www.HektarREIT.com from time to time for amendments or updates. By continuing to be our unitholder, to use our website or to communicate with us subsequent to any amendments or updates to this Notice, it would confirm and indicate your acceptance to the amendments or updates to this Notice.

What personal data do we collect?

Personal data generally means any information that identifies you. Your personal data is collected and processed by us at the start when you submit your application to subscribe the unit(s), purchase the units, when you access our website or interact with us and, from time to time, thereafter.

The type of personal data collected and processed by us includes:

1. (a) name, address, NRIC / passport number, armed forces or police personnel number, central depository system account number, address, nationality, race, number of units held, type of investor, name of authorized depository and all such other information stipulated in the application form for the units;
2. (b) contact details including email addresses, telephone, mobile and facsimile numbers;
3. (c) name of employer, office address and contact details, designation;
4. (d) such other information relevant or required:
   1. (i) in relation to or in connection with you applying for, subscribing to the units or purchasing the units; and
   2. (ii) to comply with legal and regulatory requirements; and
5. (e) any additional information provided by you or by third parties about you.

Source of personal data

Personal data collected will mainly be from you. However, some personal data may also be collected by us from other available sources including but not limited to credit reporting agencies, government department or agencies, public registries, publications, events, seminars and conferences.

How we use your personal data

Your personal data is collected and processed by us for all and any purpose relating to Hektar REIT including but not limited to the following:

1. (a) to verify your identity;
2. (b) to correspond with you;
3. (c) for all purposes in relation to or in connection with you applying for, subscribing or being a unitholder including but not limited to issuing notification, circulars, prospectus and/or letters, dissemination of annual reports and other types of reports and, distribution of dividends;
4. (d) for all purposes in relation to or in connection with you accessing our website;
5. (e) to comply with legal or regulatory requirements;
6. (f) for internal usage such as for operations and administrative purposes including administering your account, file management, investigations, reporting and audits;
7. (g) to perform surveys, research or analysis;
8. (h) for the purposes of enforcing or defending our legal rights or obtaining legal advice;
9. (i) to assist in the prevention, detection or investigation of crime or possible criminal activities or for the administration of justice; and/or
10. (j) for other purposes as you be consented or directed by you.

Disclosure of your personal data to third parties

Under certain circumstances, we may be required to disclose your personal data to third parties. Third parties to whom your personal data may be disclosed by us are as follows:

1. (a) any persons directed by or consented to by you;
2. (b) any persons required for purposes relating to or in connection with you applying for, subscribing or being a unitholder including but not limited to regulatory bodies;
3. (c) any person for the purposes of compliance with legal and regulatory requirements;
4. (d) to relevant third parties in the event that all or part of Hektar REIT or all or part of Hektar REIT’s assets are acquire by, merged with, sold to, or otherwise disposed of to one or more third parties (including, without limitation, in the event of bankruptcy);
5. (e) our data processors i.e. third party would we engage to process personal data on our behalf including but not limited to our registrar for unitholders, corporate secretarial companies, archival storage, data entry service providers, website service provider, computer backup services, disaster recovery services, banks and financial institutions; and
6. (f) our professional advisors and financiers including but not limited to legal advisors, tax advisors, financial advisors, valuers, surveyors auditors and insurance brokers.

Obligation to provide personal data

We acknowledge that you have the right in deciding the information you wish to provide to us. The provision of the information listed above is voluntary in nature. However, please note that if you do not provide the information above or limit the way such information is to be processed, it may result in us not being able to:

1. (a) communicate or correspond with you;
2. (b) issue or allot you the units; and/or
3. (c) grant you access to our website.

Data access and data correction

If you wish to request:

1. (a) for access to your personal data;
2. (b) for your personal data to be corrected or updated; or
3. (c) to withdraw your consent or limit the use of your personal data,

please submit your written request to

An administrative charge may be imposed for any request under paragraph (a), (b) and (c) above.

Further, we reserve the right to refuse your requests for any reasons permitted under law.

Disclaimer

The accuracy and completeness of your personal data depends on the information you provide. We assume that the information you have provided is accurate, up to date and complete unless you inform us otherwise.

Where you provide any third party information to us including but not limited to employer, and family information, it is our assumption that such information is accurate, up to date and complete and that you have obtained the necessary consent to disclose the same.

Conflict

In the event that there is any conflict between the English and national language version of this Notice, the English language version shall prevail.

This policy was last updated on 1 June 2020