Privacy Policy

1. Introduction

This Privacy Policy applies to Wira Wheels, operating from Lot 2-08, Komtar JBCC, Jalan Wong Ah Fook, 80000 Johor Bahru, Malaysia. We act as the data controller for personal information processed in connection with our car rental services. This policy applies to data collected through our website, by phone, and in person during vehicle collection and return.

2. Data We Collect

We collect the following categories of personal data:

• Identity information: Full name, MyKad or passport number, driving licence details.
• Contact information: Phone number, email address.
• Booking information: Rental dates, selected service, vehicle preference, destination details.
• Financial information: Payment records (processed securely; we do not store card details).
• Usage data: Website interactions, form submissions, and enquiry correspondence.

3. How We Use Your Data

Your personal data is used for the following purposes:

• Processing and fulfilling rental bookings and enquiries.
• Arranging Vehicle Entry Permits (VEP) for Singapore cross-border rentals — identity documents are required for this purpose.
• Coordinating insurance coverage for your rental period and route.
• Communicating with you about your booking, including changes and confirmations.
• Complying with legal obligations under Malaysian law, including vehicle permit requirements.
• Improving our website and service quality based on aggregated usage data.

4. Legal Basis for Processing

We process personal data on the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA): performance of a contract (to fulfil your rental agreement), compliance with legal obligations (VEP and insurance requirements), legitimate interests (improving service quality), and consent (where you have provided it, such as for marketing communications).

5. Data Sharing

We share personal data only where necessary:

• Singapore Land Transport Authority (LTA): Name and identification details for VEP registration on cross-border rentals.
• Insurance providers: Relevant details to arrange and verify rental coverage.
• Chauffeur contractors: Booking details shared only for prestige event rentals where a chauffeur is arranged.

We do not sell, rent, or share personal data with third parties for marketing purposes.

6. Data Retention

Rental records are retained for a minimum of seven years in line with financial recordkeeping requirements under Malaysian law. Identity documents are not retained beyond what is required for VEP registration and insurance purposes. Website enquiry data is retained for up to two years or until you request deletion.

7. Data Protection Measures

We maintain reasonable technical and organisational measures to protect personal data, including restricted access to customer records, secure email communications for document exchange, and regular review of data handling practices. In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required by Malaysian law.

8. Cookies

Our website uses cookies to manage your preferences and understand how the site is used. You can manage your cookie preferences at any time via our Cookie Policy page.

9. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent where processing is based on consent.
• Request that we cease processing your data for direct marketing purposes.
• Lodge a complaint with Malaysia's Personal Data Protection Department (JPDP).

To exercise any of these rights, contact us at [email protected].

10. Third-Party Links

Our website may link to third-party sites such as Google Maps. We are not responsible for the privacy practices of these external sites and encourage you to review their policies separately.

11. Minors

Our services are intended for persons aged 18 and above who hold a valid driving licence. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this policy periodically. Any significant changes will be communicated via the website. The "Last Updated" date at the top of this page reflects the most recent revision.

13. Contact for Data Enquiries

For any privacy-related enquiry, contact our data point of contact: