Privacy Policy

1. Introduction

This Privacy Policy explains how SEIYON Rent A Car Sdn Bhd (Company No. 202201009716 (1455413-T), MOTAC Licence L/N/10657) ("SEIYON", "we", "us" or "our") collects, uses, discloses and protects your personal data when you use our website seiyon.com.my or mobile applications, make a booking, or rent a vehicle from us.

We process personal data in accordance with the Personal Data Protection Act 2010 of Malaysia, as amended by the Personal Data Protection (Amendment) Act 2024 ("PDPA"). By using our website or services, you consent to the processing of your personal data as described in this Policy.

This Policy is available in English and Bahasa Malaysia. If there is any difference between the versions, the English version prevails.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

3.1 Identity and Licence Information

• Full name, date of birth and nationality
• Passport or MyKad (NRIC) details and copies
• Driving licence details and copies, International Driving Permit (IDP) or licence translation
• Signed declarations, including the IDP Declaration and Indemnity Form

3.2 Contact Information

• Phone number, WhatsApp number and email address
• Home or billing address, and flight or accommodation details where relevant to pick-up or delivery

3.3 Booking and Payment Information

• Booking details, rental history, rental agreements and invoices
• Payment card details, deposit and refund records, and bank account details for refunds
• Bookings and details passed to us by travel agents and online booking platforms

3.4 Vehicle and Rental Data

• Pick-up and return locations, dates and times
• Mileage and fuel levels at pick-up and return
• GPS location, speed and vehicle data from tracking devices fitted to our vehicles
• Toll usage, including Toll Card and SmartTag records
• Photos and videos of the vehicle condition at pick-up and return
• Accident reports, police reports, damage records and insurance claims
• Traffic summons, fines, toll records and related court proceedings

3.5 Communications

• Messages and calls with us by WhatsApp, email, phone or our website forms
• Reviews and feedback you give us

3.6 Website Data

• IP address, device identifiers, browser type and operating system
• Pages visited, time spent, referring website and click patterns
• Cookies and similar technologies, including analytics and advertising tools such as the Meta (Facebook) Pixel

4. Obligatory and Voluntary Data

The information in Sections 3.1 to 3.4 is obligatory. We need it to verify your identity and eligibility to drive, meet legal and insurance requirements, and manage your rental. If you do not provide it, we cannot rent a vehicle to you.

Other information, such as marketing preferences and feedback, is voluntary.

5. How We Use Your Personal Data

• To process bookings, rentals, payments, deposits and refunds
• To verify your identity, age, driving licence and IDP status
• To deliver, collect, track and recover our vehicles
• To provide roadside assistance, courtesy cars and customer support
• To handle accidents, damage, insurance claims and disputes
• To process traffic summons and fines, and to represent or assist you in related court proceedings
• To recover amounts owed to us, including charges made after your rental ends
• To prevent fraud, theft and misuse of our vehicles
• To comply with legal, regulatory, tax and accounting obligations
• To improve our website and services
• To send you offers and updates, where you have agreed to receive them

6. GPS Tracking

All SEIYON vehicles are fitted with GPS tracking devices. We use location and vehicle data only for:

• Vehicle security, theft prevention and recovery
• Roadside assistance and emergency response
• Investigating accidents, damage, summons, and breaches of our Terms of Service, including restricted areas and border crossings
• Confirming late returns and vehicle location at return

We do not use tracking data for marketing, and we do not sell it.

7. Who We Share Your Personal Data With

We share personal data only where necessary for the purposes in Section 5:

• Booking partners: travel agents and online booking platforms through which you booked
• Service providers: our rental management system, website, IT, cloud storage and communication providers
• Payment providers: banks and payment processors that handle card payments, deposits and refunds
• Insurers and assistance providers: our insurers, loss adjusters, and Allianz Road Rangers for roadside assistance
• Authorities: the Royal Malaysia Police (PDRM), Road Transport Department (JPJ), courts and other government bodies where required by law
• Legal advisers: our lawyers, including for summons, court proceedings and disputes
• Credit reporting and debt recovery: CTOS and debt collection agencies, where you breach our Terms of Service or amounts remain unpaid
• Repair and maintenance: workshops handling damage to our vehicles
• Toll operators: for processing toll charges
• Partner locations: partners at pick-up and return locations, where needed to hand over or collect the vehicle

We do not sell your personal data.

8. Transfer Outside Malaysia

Some of our booking partners and service providers are based outside Malaysia. Your personal data may be transferred to and stored in other countries. Where this happens, we take reasonable steps to make sure your data receives a level of protection consistent with the PDPA.

9. How Long We Keep Your Personal Data

• Rental, payment and accounting records: at least 7 years, as required by Malaysian tax and company law
• Records linked to summons, accidents, insurance claims or court proceedings: until the matter is fully concluded, and then for the period above or longer if required by our insurers
• GPS tracking data: only as long as needed for the purposes in Section 6, unless linked to an incident or dispute
• Website analytics: up to 26 months
• Marketing data: until you withdraw consent

When personal data is no longer needed, we delete or anonymise it securely.

10. How We Protect Your Personal Data

We take practical security measures to protect your personal data from loss, misuse, unauthorised access, change or disclosure. These include:

• SSL/TLS encryption for data sent through our website
• Card payments handled through licensed banks and payment processors
• Access controls and password protection on our systems
• Limiting access to staff who need the data for their work

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as required by law. If the breach is likely to cause you significant harm, we will also notify you without unnecessary delay.

11. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Correct personal data that is inaccurate, incomplete or out of date
• Withdraw consent to processing, including marketing, at any time
• Limit how we process your personal data
• Request deletion of your personal data, subject to the records we must keep by law
• Object to processing for marketing purposes
• Data portability: ask us to transfer your personal data to another organisation, where technically feasible
• Prevent processing likely to cause you damage or distress

Withdrawing consent or limiting processing may mean we can no longer provide some or all of our services. It does not affect data we must keep by law, or data needed to settle amounts owed, summons or claims linked to a past rental.

To exercise these rights, contact our Data Protection Officer (Section 16). We may need to verify your identity, and may charge a fee for access requests as permitted by law. We will respond within the time required by the PDPA.

12. Marketing

We send promotional messages only where you have agreed to receive them. You can opt out at any time by using the unsubscribe link, replying "STOP" to our WhatsApp messages, or contacting us.

13. Cookies

Our website uses cookies to make the site work, remember your preferences, understand how visitors use the site, and show relevant advertising. You can block or delete cookies in your browser settings, but some parts of the website may not work properly.

14. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children, except limited details of child passengers where needed, such as for a child seat request.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted on our website, with the "Last updated" date revised.

16. Contact Us

For questions about this Policy or to exercise your rights, contact our Data Protection Officer:

SEIYON Legal Associate

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia: