Privacy Policy

1. Introduction

Wendrip ("we", "us", "our") is committed to handling personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect personal information in connection with our corporate fleet rental services and website at wendripx.cyou.

This policy applies to personal data collected through our website contact forms, direct correspondence, and fleet arrangement agreements. It covers individuals who make enquiries and the employee or driver data submitted by corporate clients as part of fleet arrangements.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about this policy, contact us at [email protected].

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, company name
• Correspondence data: content of enquiry messages submitted through our website contact form
• Driver and employee data: full name, NRIC or equivalent identification, driving licence details, and contact information submitted by corporate clients for named driver registration
• Usage data: IP address, browser type, pages visited, and session duration collected via website analytics tools
• Cookie data: as described in our Cookie Policy

We do not knowingly collect personal data from individuals under 18 years of age.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA and applicable data protection principles:

• Consent: where you have provided explicit consent, such as submitting the website contact form
• Contractual necessity: to fulfil obligations under a rental arrangement agreement, including driver registration and invoicing
• Legitimate interests: to respond to business enquiries, improve our website, and operate our services effectively
• Legal obligation: where required by Malaysian law, including PDPA compliance and any applicable regulatory requirements

4. How We Use Personal Data

Personal data is used for the following purposes:

• Responding to enquiries and providing information about our fleet rental plans
• Preparing, administering, and managing rental arrangement agreements
• Registering named drivers under company policy as part of a fleet arrangement
• Issuing monthly invoices and processing payments
• Coordinating vehicle servicing and maintenance with relevant parties
• Generating monthly usage reports for fleet plan clients
• Communicating operational updates, servicing schedules, and billing notifications
• Improving our website and understanding how visitors use it

We do not use personal data for unsolicited marketing communications. Where we send account-related communications, these relate directly to your arrangement with Wendrip.

5. Data Sharing and Third Parties

We do not sell personal data to third parties. We may share personal data with the following categories of third parties in limited circumstances:

• Authorised workshops and servicing partners: vehicle registration or driver contact details may be shared for the purpose of coordinating servicing appointments
• Insurance providers: vehicle and arrangement details may be shared with insurers as required under fleet coverage agreements
• Analytics services: anonymised website usage data may be processed by analytics providers to help us understand site traffic
• Legal and regulatory authorities: if required by Malaysian law or court order

Any third party receiving personal data from Wendrip is required to handle that data appropriately and use it only for the stated purpose.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Enquiry data (website form submissions with no arrangement): up to 12 months
• Arrangement-related data (driver registrations, invoices, agreements): up to 7 years after the arrangement ends, in line with Malaysian record-keeping requirements
• Website analytics data: as per the analytics provider's retention settings, typically 26 months
• Cookie consent records: 12 months from the date of consent

7. Data Protection Measures

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Access controls restricting personal data to staff who require it for their role
• Secure document handling for physical records containing personal data
• Password protection and access logging for digital records
• Secure email and communication channels for transmitting personal data

In the event of a data breach that is likely to affect the rights of individuals, we will take appropriate steps and notify affected parties in accordance with our obligations under Malaysian law.

8. Cookies

Our website uses cookies to function correctly and to understand how visitors use it. For a full explanation of the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

9. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent for processing where consent was the legal basis
• Object to the processing of your personal data in certain circumstances
• Request that personal data be deleted where there is no lawful reason for continued retention

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. We may need to verify your identity before processing the request.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Continued use of our website or services after a policy change indicates acceptance of the updated terms.

12. Contact for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold:

• Email: [email protected]
• Address: Wendrip, 23 Jalan Sultan Idris Shah, 30000 Ipoh, Perak, Malaysia
• Phone: +60 11-2864 7193