Privacy Policy

1. What we collect

There are four ways personal data reaches us.

What you give us: your name, phone or WhatsApp number, the car you are interested in, your country and timeline when you use an enquiry form, and the address and identity documents needed to register a car in your name.
What you give us for financing, only if you ask us to arrange it: the income and identity documents the bank requires.
What you give us if you apply to join us as a partner agent: the details that form asks for, which include your name, email address, race and gender, and a screenshot you upload.
What we collect automatically: page views through our analytics tool, standard web server logs, and the IP address recorded when a sign-in code is requested.
What we receive about a car: auction sheets, inspection and history reports, and, where you have applied, the bank's decision.

2. Why we use it, and on what basis

We use your data to answer your enquiry, prepare a quotation, run your import, and keep you updated while it is in progress. That is the performance of the service you asked us for.

Customs, permit and registration filings require us to submit certain details to government authorities. That is a legal obligation.

We send marketing only where you have agreed to it, and you can withdraw that at any time without affecting an import already under way.

Giving us your details is voluntary. But we cannot answer an enquiry, prepare a quotation, or register a car in your name without them, so declining means we cannot provide the service.

3. Verification codes and WhatsApp

Signing in to save or share a calculation sends a one-time code to your phone by WhatsApp or SMS through our messaging provider, Mocean. We record the time of the request and the IP address it came from, to limit abuse of that endpoint.

Once you are a customer, milestone updates are sent to the same number by WhatsApp.

4. Analytics and cookies

We use Umami to count page views, and it is the only analytics tool on this site. It sets no cookies, does not follow you across other websites, and does not identify you individually. We use it to see which pages are read, not who read them.

We run no tag manager, no advertising pixel and no session recorder. We do not build advertising audiences from your visit, and we do not share your browsing with an advertising network.

The cookies we do set are listed below. Some of our older pages embed videos from YouTube, and those set Google cookies when a video loads. You can block them from your browser's cookie settings or with any tracker-blocking extension you already use, and blocking them does not stop you using the site or the calculator.

Cookie	Set by	What it does
Cookie Session cookie	Set by Us	What it does Keeps your session while you use the calculator and our forms.
Cookie XSRF-TOKEN	Set by Us	What it does Protects form submissions against cross-site request forgery.
Cookie salesmanWhatsappContact	Set by Us	What it does Remembers which advisor shared a link with you, so you reach the same person. Set for five years.
Cookie YouTube cookies	Set by Google	What it does Set by the videos embedded on our older pages when one of them loads.

5. Who we share it with

Running an import means passing some of your details to the parties who handle each stage. We share the minimum each one needs, and we do not sell your personal data to anyone.

Auction houses, sellers and our overseas agents in Japan, the United Kingdom and Australia.
Shipping lines, freight forwarders and marine insurers.
Customs agents and the Malaysian authorities responsible for permits, inspection and registration.
Banks and insurers, where you have asked us to arrange financing or cover.
Anyone we are required to disclose to by law, or by a court.

6. The technology providers we use

Beyond the parties above, a small number of service providers handle data on our behalf. This is the complete list, and it is the one we maintain rather than a generic one.

Provider	What we use it for	What reaches it
Provider Umami	What we use it for Counting page views	What reaches it The page you are on and where you came from. It sets no cookies and does not identify you.
Provider Google Fonts	What we use it for Serving the typefaces this site is set in	What reaches it Your IP address and browser.
Provider YouTube	What we use it for Playing the videos embedded on our older pages	What reaches it Your IP address, browser, and Google cookies.
Provider Mocean	What we use it for Sending SMS and WhatsApp messages	What reaches it Your phone number and the message we send you.
Provider Slack	What we use it for The internal workspace a new enquiry is routed through	What reaches it Your name, phone number, email and the message you sent us.
Provider Mailtrap	What we use it for Sending our transactional email	What reaches it Whatever the email itself contains.
Provider Revenue Monster	What we use it for Taking online payments	What reaches it Your phone number and the order details. Card details go to the payment provider, never to us.
Provider Our auction report provider	What we use it for Looking up a vehicle history report	What reaches it The chassis number you search for.
Provider Content delivery networks	What we use it for Serving scripts, stylesheets and icons	What reaches it Your IP address and browser.

7. Transfers outside Malaysia

Importing a car is inherently cross-border, so some of your data reaches auction houses, sellers, agents and shipping lines in Japan, the United Kingdom and Australia.

Several of the providers in the table above are also based outside Malaysia, mainly in the United States and Europe. Our analytics, font, map, video, messaging and email providers all fall into that group.

Where we transfer data abroad we do so to deliver the service you have asked for, and we share only what the recipient needs to play its part.

8. How long we keep it

We keep enquiry details while we are in contact with you and for a reasonable period afterwards, in case you come back to us.

Records relating to a completed import are kept for at least seven years, because company and tax law require us to hold accounting records for that long.

You can ask us to delete personal data that we are not required to keep, and we will.

9. How we protect it

Access to customer records is limited to the people who need it to do their job, and data travelling between your browser and this website is encrypted.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your data we will tell you, and we will notify the Personal Data Protection Commissioner where the law requires it.

10. Your rights, and how to use them

Under the PDPA you can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, withdraw consent to marketing, and ask us to limit how we process it.

Send the request to any of the contacts below. We may need to confirm your identity first, so that we are not handing your data to someone else. The Act sets the period within which we must respond, and we will not take longer than it allows.

11. Children

This website and our service are intended for adults. We do not knowingly collect personal data from anyone under 18.

12. Changes to this policy

We may update this policy. The current version and its date are shown at the top of this page.

13. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Personal Data Protection Commissioner in Malaysia.