Privacy Policy
Last updated: December 2025
1. Introduction
Carbnb.my ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile application, and car subscription services (collectively, the "Services"). By using our Services, you consent to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Personal Information
We collect personal information that you provide directly to us, including:
- Full name and identification number (NRIC/Passport)
- Contact information (email address, phone number, residential address)
- Date of birth and gender
- Driving license details and driving history
- Employment information and income details
- Payment and billing information
- Emergency contact details
2.2 Automatically Collected Information
When you use our Services, we automatically collect:
- Device information (device type, operating system, unique device identifiers)
- Log data (IP address, browser type, pages visited, time and date of visits)
- Location data (with your consent, for vehicle delivery and service purposes)
- Cookies and similar tracking technologies
2.3 Vehicle Telematics Data
Our vehicles may be equipped with telematics devices that collect data such as vehicle location, mileage, driving behavior, and vehicle diagnostics. This data helps us provide better services and ensure vehicle safety.
3. How We Use Your Information
We use your personal information for the following purposes:
- To process and manage your car subscription
- To verify your identity and assess your eligibility
- To process payments and manage billing
- To deliver vehicles and provide customer support
- To send service-related communications and updates
- To improve our Services and develop new features
- To comply with legal obligations and enforce our Terms of Use
- To prevent fraud and ensure security
- To send marketing communications (with your consent)
4. Information Sharing and Disclosure
We may share your personal information with:
- Service Providers: Third-party companies that help us operate our Services (payment processors, insurance providers, maintenance partners, delivery services)
- Business Partners: Vehicle manufacturers and dealers who supply our fleet
- Financial Institutions: Banks and credit bureaus for credit assessment purposes
- Legal Authorities: When required by law, court order, or government request
- Corporate Transactions: In connection with mergers, acquisitions, or sale of assets
We do not sell your personal information to third parties for their marketing purposes.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your information is no longer needed, we will securely delete or anonymize it.
7. Your Rights
Under the Personal Data Protection Act 2010 (PDPA), you have the right to:
- Access: Request access to your personal information we hold
- Correction: Request correction of inaccurate or incomplete information
- Withdrawal: Withdraw your consent for processing (where consent is the basis)
- Deletion: Request deletion of your personal information (subject to legal requirements)
- Portability: Request a copy of your data in a structured format
To exercise these rights, please contact us using the details provided below.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences and settings
- Understand how you use our Services
- Improve our Services and user experience
- Deliver relevant advertisements
You can manage your cookie preferences through your browser settings. However, disabling cookies may affect the functionality of our Services.
9. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
10. Children's Privacy
Our Services are not intended for individuals under 21 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.
11. International Data Transfers
Your personal information may be transferred to and processed in countries other than Malaysia. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our platform and updating the "Last updated" date. Your continued use of our Services after such changes constitutes acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Carbnb.my - Admin
Email: support@carbnb.my
Phone: +60 19-999 9555
Address: The St. Regis Kuala Lumpur, 50470 Kuala Lumpur, Malaysia