Privacy Policy

1. Introduction

Carventis ("we", "us", "our") is a group MPV rental service operating from 35 Jalan Putra, 05150 Alor Setar, Kedah, Malaysia. This Privacy Policy describes how we collect, use, store, and protect personal information provided to us when you enquire about or use our rental services.

We take the protection of your personal data seriously. By providing information through our website or during the rental process, you acknowledge that your data will be handled in accordance with this policy and with applicable Malaysian data protection law, including the Personal Data Protection Act 2010 (PDPA).

Questions or requests regarding this policy may be sent to: [email protected]

2. Data We Collect

Information You Provide Directly

• Full name and identity details (required for rental agreements and driving licence verification)
• Email address (used for booking confirmations and correspondence)
• Phone number (used for coordination and on-trip support)
• Driving licence information (collected at handover for the designated driver)
• Message content submitted through our enquiry form

Information Collected Automatically

• Website usage data via analytics tools (pages visited, session duration, browser type)
• Cookies and similar tracking technologies — see our Cookie Policy
• IP address and general location data for service improvement purposes

Legal Basis for Processing

We process personal data on the following grounds: performance of a rental contract (booking and service delivery), your consent (enquiry form submissions and optional communications), and our legitimate interest in maintaining safe and effective vehicle rental operations.

Rental agreement data is retained for a minimum of seven years in accordance with Malaysian commercial record-keeping requirements. Enquiry data not resulting in a booking is deleted within 12 months.

3. How We Use Your Data

• Processing rental bookings and confirming arrangements
• Verifying the designated driver's licence and identity at handover
• Communicating with the group lead before, during, and after the rental
• Coordinating mid-trip support (applicable to weeklong package)
• Sending operational communications related to your booking
• Improving our website and service based on usage patterns
• Complying with legal and regulatory obligations

We do not use personal data submitted through our enquiry form for marketing purposes without explicit consent. If you have opted in to receive service updates, you may withdraw this consent at any time by contacting [email protected].

4. Sharing of Personal Data

We do not sell, rent, or trade personal information to third parties. Data may be shared in the following limited circumstances:

• With our insurance provider, to the extent required for vehicle coverage documentation
• With analytics service providers (anonymised and aggregated data only)
• When required by Malaysian law or by order of a competent authority
• With service vendors who assist in operating our website, under data processing agreements that prohibit independent use

Any third parties with whom data is shared are required to maintain appropriate security standards consistent with our obligations under PDPA 2010.

5. Data Protection Measures

We implement technical and organisational measures to protect personal data from unauthorised access, modification, disclosure, or destruction. These include:

• Secure storage of rental records with access restricted to authorised staff
• HTTPS encryption for data transmitted through our website
• Regular review of access permissions and data handling procedures
• Physical security for paper-based rental documentation

In the event of a data breach that poses risk to individuals, we will notify affected parties and relevant authorities in accordance with applicable Malaysian requirements.

6. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. Cookies are small files stored in your browser. Essential cookies are required for the site to function. Analytics and preference cookies are optional and subject to your consent.

You can manage your cookie preferences at any time through our Cookie Policy page.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to the processing of your data (where processing is based on consent)
• Request that we cease processing your data for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Note that some requests may be subject to legal or operational constraints (for example, rental agreement records that must be retained for statutory periods).

8. Third-Party Links

Our website may contain links to external websites. This Privacy Policy applies only to Carventis's own website and services. We are not responsible for the privacy practices of third-party sites and recommend that you review their policies independently before providing any personal information.

9. Age Policy

Our rental services are available only to adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been submitted, it will be deleted promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any material changes will be noted at the top of this page with an updated effective date. Continued use of our website following a policy update constitutes acceptance of the revised terms.

11. Contact for Data Enquiries

For privacy-related enquiries, correction requests, or complaints regarding this policy:

• Email: [email protected]
• Address: Carventis, 35 Jalan Putra, 05150 Alor Setar, Kedah, Malaysia
• Phone: +60 18-296 4738

The Department of Personal Data Protection (JPDP) Malaysia may be contacted at www.pdp.gov.my if you wish to make a formal complaint regarding our handling of your personal data.