Atrium Real Estate Investment Trust (“Atrium REIT”, “We”) is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010.

1. Personal Data Collected

   We may collect personal data including name, NRIC/ passport number, contact details, address, bank details, unitholding/ tenancy information, employment details, CCTV recordings, and any information required for our business and regulatory purposes.

2. Purpose of Processing

   We process personal data to:

   • Manage unitholdings, distributions, and investor communications;
   • Manage tenancy agreements, property operations, billing, maintenance and security;
   • Onboard and manage vendors and service providers;
   • Manage human resources, compliance, and governance matters;

   Fulfil legal, regulatory, audit, tax, and reporting requirements;

   Prevent fraud, misconduct, or unlawful activities;

   Respond to enquiries and maintain business operations.

3. Integrity and transparency

   Atrium REIT is committed to collecting, storing, and processing personal data lawfully, fairly, transparently, and with integrity.

   We inform individuals of the purpose of data collection and their rights under PDPA, and we ensure processing is limited only to what is necessary.

4. Appointment of Third Parties

   Where third parties are engaged to process personal data on our behalf, Atrium REIT will:

   • Conduct appropriate due diligence;
   • Ensure they provide sufficient security and confidentiality safeguards;
   • Enter into agreements requiring compliance with PDPA;
   • Monitor their performance where appropriate.

   Third parties may process data only for authorised transactions purposes.

5. Disclosure of Personal Data

   Your data may be disclosed to:

   • The REIT Trustee, regulators and government authorities;
   • Share registrars, bankers, auditors, tax agents, and professional advisors;
   • Property managers and service providers;
   • Insurers and security contractors;
   • Any party as required or permitted by the law

6. Data Protection and Retention

   We implement reasonable security measures to safeguard personal data and retain it only as long as necessary for operational, legal, and regulatory purposes.

7. Your Rights

   You may request access, correction, or withdrawal of consent (subject to legal limitations) by contacting our Investor Relation Office at ir@atriumreit.com.my

8. Consequences of Not Providing Data

   Failure to provide required personal data may affect our ability to process distributions, manage tenancies, deliver services, or meet statutory obligations.

9. Updates

   This Policy may be revised from time to time. The latest version will be made available through our official communications or website.