Privacy Policy

This Privacy Policy explains how Legendary Capital Sdn Bhd (“we,” “us,” or “our”), operating as Luxury Car Rental KL, Malaysia, collects, uses, stores, and protects personal data when you visit luxurycarrental.my (the “Website”) or use our car rental, chauffeur, and related services (the “Services”).

This policy is written to comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you are visiting from outside Malaysia, additional rights may apply to you under your local law, and section 11 below addresses this.

By using the Website or booking our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please do not use the Website or provide us with your personal data.

1. Who We Are

Luxury Car Rental KL, Malaysia is operated by Legendary Capital Sdn Bhd, a company registered in Malaysia.

Registered address: 85, Jalan SS15/4C, SS15, 47500 Subang Jaya, Selangor, Malaysia.

Contact email: info@luxurycarrental.my

Contact phone: +60 11-1111 3619

2. Personal Data We Collect

We collect personal data in three ways: information you give us directly, information collected automatically as you browse, and information generated when you book or inquire about a rental.

2.1 Information You Provide Directly

• Contact form: your name, email address, and the content of your message when you submit an inquiry through our Contact page.
• Newsletter subscription: your email address, when you subscribe to updates through the footer newsletter form.
• WhatsApp inquiries: your phone number and the content of messages you send us through WhatsApp.
• Booking and rental inquiries: your name, email address, phone number, and, where required to complete a booking, your driving licence details, International Driving Permit (if applicable), and identification or passport details for verification and insurance purposes.
• Car search tool: the pickup location, rental start and end dates, and number of passengers you enter when searching for a vehicle.

2.2 Information Collected Automatically

• Technical data such as your IP address, browser type, device type, and operating system.
• Usage data such as the pages you visit, how long you spend on them, and which page referred you to our Website, collected through Google Analytics.
• Cookies and similar tracking technologies, described in section 3 below.

2.3 Information From Third Parties

We do not purchase personal data from third-party data brokers. In limited cases, we may receive booking or payment confirmation details from a payment processor if online payment is used, solely to confirm and complete your transaction.

3. Cookies and Similar Technologies

Cookies are small text files stored on your device when you visit a website. We use the following categories of cookies:

• Essential cookies: required for the Website to function correctly, such as maintaining your session while browsing the car search tool.
• Analytics cookies: used through Google Analytics to understand how visitors use the Website, so we can improve content and navigation.
• Functional cookies: used to remember preferences such as previously entered search criteria.

You can control or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of the car search tool or other interactive features on the Website.

4. How We Use Your Personal Data

We use the personal data described above for the following purposes:

• To respond to inquiries submitted through the Contact form or WhatsApp.
• To process, confirm, and manage car rental, chauffeur, wedding, corporate, and event bookings.
• To verify your identity and eligibility to rent a vehicle, including driving licence and age requirements.
• To arrange delivery of a vehicle to your specified address, where free delivery or handover services are requested.
• To send you updates and offers through our newsletter, where you have subscribed to receive them.
• To analyze Website traffic and usage patterns, so we can improve the Website and our Services.
• To comply with legal, insurance, and regulatory obligations connected to vehicle rental in Malaysia.
• To detect, prevent, and address fraud, unauthorized use of our fleet, or security issues.

5. Legal Basis for Processing

Under the Personal Data Protection Act 2010, we rely on the following bases to process your personal data:

• Consent: for example, when you subscribe to our newsletter or submit a voluntary inquiry.
• Performance of a contract: for example, processing your details to complete a car rental booking you have requested.
• Legitimate interest: for example, using analytics data to improve the Website, provided this does not override your fundamental rights.
• Legal obligation: for example, retaining certain records for insurance, tax, or regulatory purposes under Malaysian law.

6. Third-Party Service Providers

We use the following categories of third-party service providers to operate the Website and deliver our Services. Each provider processes personal data under its own privacy policy, which we encourage you to review.

• Google Analytics: analyzes Website traffic and visitor behavior.
• Mailchimp (via the MC4WP newsletter plugin): manages our email newsletter subscriptions and communications.
• WhatsApp Business: facilitates direct messaging communication between you and our team.
• Web hosting and content management providers: store Website data and content on secure servers.

We do not sell your personal data to third parties for their own marketing purposes.

7. Disclosure of Your Personal Data

We may disclose your personal data in the following circumstances:

• To our staff and chauffeurs directly involved in fulfilling your booking, on a need-to-know basis.
• To insurance providers, where required to process a claim or verify coverage connected to your rental.
• To relevant government authorities, where required by law, such as in connection with a traffic incident or regulatory request.
• To professional advisors, such as legal or accounting advisors, where necessary for our business operations.
• To a successor entity, in the event of a merger, acquisition, or sale of some or all of our business assets.

We do not disclose your personal data to any other party for unrelated commercial purposes without your consent.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including any legal, accounting, or reporting requirements under Malaysian law.

• Booking and rental records, including driving licence and identification details, are generally retained for the period required for insurance and regulatory purposes, after which they are securely deleted or anonymized.
• Newsletter subscriber data is retained until you unsubscribe or request deletion.
• Contact form inquiries are retained only as long as needed to address your inquiry, unless a booking or ongoing relationship follows.

9. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include secure website hosting, restricted access to booking records, and the use of reputable third-party service providers.

While we take data security seriously, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we work to minimize risk and respond promptly to any identified vulnerability.

10. Your Rights Under the Personal Data Protection Act 2010

As a data subject under Malaysian law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent to our processing of your personal data, such as unsubscribing from our newsletter.
• Request that we limit the processing of your personal data in certain circumstances.
• Lodge a complaint with the Personal Data Protection Department of Malaysia if you believe your data has been mishandled.

To exercise any of these rights, please contact us using the details in section 14 below. We will respond to verified requests within the timeframe required under the PDPA.

11. International Visitors

If you access our Website from outside Malaysia, your personal data will be processed in Malaysia, where data protection laws may differ from those in your home country. By using the Website, you consent to this transfer and processing.

Visitors from the European Union or United Kingdom may have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to object to certain processing. We will honor such requests to the extent reasonably applicable to a Malaysia-based business.

12. Children’s Privacy

Our Services are intended for individuals who are at least 18 years old, consistent with the minimum age requirements for renting a vehicle. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it.

13. Links to Other Websites

Our Website may contain links to third-party websites, including vehicle manufacturers, payment processors, or social media platforms. We are not responsible for the privacy practices of these external sites, and we encourage you to review their privacy policies separately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or legal requirements. Any changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Legendary Capital Sdn Bhd, operating as Luxury Car Rental KL, Malaysia
• Address: 85, Jalan SS15/4C, SS15, 47500 Subang Jaya, Selangor, Malaysia
• Email: info@luxurycarrental.my
• Phone: +60 11-1111 3619