Privacy Policy

1. Introduction

Carzeval ("we", "us", "our") is committed to handling the personal data of our clients with care and transparency. This policy explains what data we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to data collected through our website at carzevaal.pro and through direct communication with our team in the course of arranging and managing vehicle rental for business travelers visiting Kuala Lumpur.

This policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia, which sets out the obligations of data processors and the rights of individuals whose data is processed within Malaysia.

2. Personal Data We Collect

We collect the following categories of personal data:

• Identity data: Full name, as provided on the enquiry form or during booking communication.
• Contact data: Email address and phone number, used to confirm and manage the arrangement.
• Travel information: Dates, hotel name, flight details, and schedule requirements relevant to the arrangement — provided voluntarily by the client.
• Company information: Employer name and, if relevant, company registration details for invoice preparation purposes.
• Technical data: IP address, browser type, and page interaction data collected automatically through website cookies and analytics.

Legal basis for processing: We process personal data on the basis of contractual necessity (to fulfil the rental arrangement), legitimate interest (to respond to enquiries and improve our service), and consent (for optional communications and analytics cookies).

Retention: Client data relating to completed arrangements is retained for a period of three years from the date of arrangement completion, in line with standard business record-keeping practice. Enquiry data from contacts that did not result in an arrangement is retained for twelve months.

3. How We Use Your Data

Personal data collected is used for the following purposes:

• To process and confirm rental arrangement enquiries
• To coordinate vehicle handover timing, pickup location, and hotel delivery logistics
• To prepare and issue invoices formatted for corporate expense submission
• To communicate relevant updates during the arrangement period
• To prepare end-of-trip summaries where included in the arrangement
• To respond to post-arrangement queries or invoice clarifications
• To understand how our website is used (analytics data, where consent is given)

Data sharing: We do not sell, rent, or share your personal data with third-party marketing organisations. Data may be shared with service providers who assist in operating our website (hosting, analytics) under contractual obligations that require them to handle data in accordance with applicable law. We do not share data with advertisers.

Marketing communications: We do not send unsolicited marketing material. Any follow-up communication from Carzeval will relate directly to an existing or recent enquiry. You may opt out of any such communication at any time by notifying us at [email protected].

4. Data Protection Measures

We take reasonable steps to protect the personal data we hold against unauthorised access, loss, or disclosure. Measures in place include:

• HTTPS encryption across the website
• Access to client data restricted to team members who require it for the arrangement
• Data stored on password-protected systems with regular access reviews
• Third-party service providers assessed for data handling standards before engagement

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify affected parties and, where required, the relevant authority under Malaysian PDPA obligations, within a reasonable timeframe.

5. Cookies

Our website uses cookies to support basic functionality and to understand how visitors engage with content. Essential cookies are required for the site to operate. Optional cookies (analytics and preference cookies) are only set if you consent to them through the cookie notice displayed on your first visit.

For full details on the cookies we use and how to manage them, please refer to our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data held by Carzeval:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that inaccurate or incomplete data be corrected.
• Withdrawal of consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that occurred before withdrawal.
• Objection to processing: You may object to processing of your data in certain circumstances, particularly where processing is based on legitimate interest.
• Complaint: You have the right to lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia, if you believe your data has been handled unlawfully.

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law, generally within thirty days.

7. Third-Party Links

Our website may contain links to third-party websites for reference purposes. Carzeval is not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

8. Children's Privacy

Our services are intended for use by adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that data from a minor has been submitted, we will take steps to delete it promptly.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last Updated" date. Where changes are material, we will make reasonable efforts to inform clients directly.

Continued use of our services after a policy update constitutes acceptance of the revised terms.

10. Contact for Data Enquiries

For questions about this policy or to exercise your data rights, please contact: