Privacy Policy

1. Introduction

Welcome to Kereta CRM ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our car dealership management platform and services in Malaysia.

This policy complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection regulations.

2. Information We Collect

2.1 Personal Information

When you register as a sales advisor or use our services, we may collect:

• Full name and contact information (email address, phone number)
• Business information (company name, business registration details)
• Account credentials (username, encrypted password)
• Payment and billing information
• Identity verification documents (as required by law)

2.2 Vehicle Listing Information

For vehicle listings created on our platform:

• Vehicle details (make, model, year, specifications)
• Pricing and sales information
• Vehicle images and media files
• Vehicle history and documentation

2.3 Publicly Accessible Content

Important Notice: All images and media files you upload to the platform will be publicly accessible to website visitors and potential buyers. By uploading content, you acknowledge and consent to this public display of your uploaded materials.

2.4 Technical Information

• IP address and device information
• Browser type and version
• Usage data and analytics
• Cookies and tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our CRM services
• To process your transactions and manage subscriptions
• To display vehicle listings to potential buyers
• To communicate with you about your account and services
• To improve our platform and user experience
• To comply with legal obligations and prevent fraud
• To send promotional materials (with your consent)
• To analyze usage patterns and generate insights

4. Public Display of Uploaded Content

By using our platform, you understand and agree that:

• All vehicle images and media you upload will be publicly visible to website visitors
• These images may be viewed, downloaded, and shared by users and search engines
• You are responsible for ensuring you have the right to upload and publicly display all content
• You should not upload any personal, confidential, or sensitive information in images unless intended for public viewing
• Vehicle listing information will be accessible to potential buyers and the general public

5. Information Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in operating our platform (hosting, payment processing, analytics)
• Business Partners: Authorized dealers and partners in the automotive industry
• Legal Authorities: When required by law or to protect our rights and safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales

We do not sell your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate security measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and updates
• Limited access to personal data by authorized personnel only
• Secure data storage facilities and backup systems

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records for 7 years)
• Resolve disputes and enforce our agreements
• Maintain business records as required by Malaysian law

When no longer needed, we securely delete or anonymize your personal information.

8. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access: Request access to your personal data we hold
• Correction: Request correction of inaccurate personal data
• Withdrawal of Consent: Withdraw consent for data processing (where applicable)
• Limit Processing: Request limitation of processing in certain circumstances
• Data Portability: Request your data in a structured, machine-readable format
• Deletion: Request deletion of your personal data (subject to legal obligations)

To exercise these rights, please contact us using the information provided below.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze site traffic and usage patterns
• Improve our services and user experience

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our platform.

10. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and stored on servers located outside of Malaysia. We ensure that such transfers comply with PDPA requirements and that adequate safeguards are in place to protect your personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

For complaints regarding personal data protection, you may also contact the Personal Data Protection Commissioner of Malaysia at www.pdp.gov.my