Petromare ("we", "us", "our") respects the privacy of every person who contacts us about a vacation car rental, books a vehicle, or simply browses our website. This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, and the choices you have. It is written in line with the Personal Data Protection Act 2010 of Malaysia (PDPA).
1. Who we are
Petromare is a vacation car rental business based in Selangor, Malaysia. Our registered contact details are:
- Address: 19 Jalan Wira 9, 47000 Sungai Buloh, Selangor
- Phone: +60 19-857 3624
- Email: [email protected]
For any matter relating to this policy or to your personal data, please contact us using the details above.
2. What personal data we collect
We collect only the data we need to prepare a rental and to keep our records in good order. Depending on the way you contact us, this may include:
- Identification details — your full name and date of birth, and a copy of your driving licence at the time of vehicle handover.
- Contact details — your phone number, email address, and home or stay address in Malaysia.
- Booking details — the rental dates, pick-up and drop-off points, vehicle category, and any notes you share (for example, child-seat needs or planned destinations).
- Payment details — the payment method used and the reference of the transaction; we do not store full card numbers.
- Website data — basic technical information such as your browser type, device, and pages viewed, collected through cookies and similar tools described in our Cookie Policy.
3. How we use your data
We use the personal data described above for the following purposes:
- To prepare and confirm your rental booking and to communicate with you about it.
- To verify driving licences and confirm that the driver meets the conditions of the rental.
- To issue invoices, receipts, and other tax-required documents.
- To respond to your questions, complaints, or feedback.
- To keep records that we are required to keep under Malaysian law, including tax records.
- To improve the way our website and booking process work.
We will not use your personal data for any purpose that is not described here without first letting you know.
4. Legal basis
We process your personal data on the following bases under the PDPA:
- Your consent, given when you submit a booking enquiry or sign a rental agreement.
- The performance of a contract — the rental agreement — to which you are a party.
- Compliance with legal obligations that apply to us in Malaysia.
- Our legitimate interest in running and improving a small rental business, where this is balanced against your rights.
5. How long we keep your data
We hold rental and booking records for the duration of the rental and for the period after that during which Malaysian tax and accounting records must be kept. Website data collected through cookies is held for the periods set out in our Cookie Policy. When the relevant period ends, we remove or anonymise the data.
6. Sharing your data
We do not sell your personal data. We share it only where it is necessary to provide the rental service or to meet our obligations. This may include sharing with:
- Payment service providers who process transactions on our behalf.
- Insurance partners that cover the rental vehicle, where this is required.
- Authorities such as the Royal Malaysia Police or PUSPAKOM, where we are required by law to do so.
- Service providers that help us run our website and email, under written terms that protect your data.
We do not transfer personal data outside Malaysia for marketing purposes.
7. Your rights
Under the PDPA you have the right to:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct any data that is wrong or out of date.
- Ask us to stop processing your data for marketing purposes.
- Withdraw consent you previously gave, although this may mean we can no longer provide the rental service.
- Make a complaint to the Personal Data Protection Department of Malaysia.
To exercise any of these rights, please write to us at [email protected]. We will reply within 21 calendar days of receiving your request.
8. Data security
We hold paper rental files in a locked storage cabinet at our office and keep digital records on access-controlled devices and email accounts protected by strong passwords and two-factor sign-in. Only the small number of Petromare staff who need access to your data in order to do their work are able to see it.
9. Cookies
Our website uses cookies. Detailed information on what cookies we use, what they do, and how to manage them is set out in our separate Cookie Policy.
10. Children's data
Our services are intended for adults who hold a valid driving licence. We do not knowingly collect personal data from anyone under the age of 18. Where a rental involves children as passengers, we collect only the information needed to provide child-seat support and not detailed records about the child.
11. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of the policy shows when it was last updated. Material changes will be highlighted on our home page for a reasonable period.
12. Contact us
If you have any questions about this Privacy Policy or about the way we handle your personal data, please write to us at [email protected], call +60 19-857 3624, or visit our office at 19 Jalan Wira 9, 47000 Sungai Buloh, Selangor during opening hours.