1. Who We Are
Aksesori Kereta is the data user/controller responsible for the personal data described in this Privacy Policy. This Policy explains how we collect, use, disclose, store, and protect personal data when you visit www.aksesorikereta.com, buy car accessories from us, contact us, or use our services.
2. Personal Data We Collect
We may collect:
Identity and contact details: name, email address, phone number, billing address, delivery address
Order and transaction details: products purchased, order number, purchase date, delivery date, returns and refund records
Payment details: payment method and transaction reference. Full card details are processed by our payment provider and are not stored by us.
Customer service records: emails, messages, complaint and warranty records
Technical data: IP address, device type, browser type, pages visited, cookies and similar technologies
Marketing preferences: whether you consent to receive marketing
Identity verification information where required for returns, refunds, fraud prevention, or legal compliance
We do not intentionally collect sensitive personal data unless required by law or with your explicit consent.
3. How We Collect Personal Data
We collect personal data:
Directly from you when you place an order, contact us, request a return, or sign up for marketing
Automatically through cookies and similar technologies when you use our website
From third parties such as payment providers, couriers, and IT service providers
4. Purposes of Processing
We process personal data to:
Process and fulfil orders
Arrange delivery and returns
Process refunds and exchanges
Provide customer support and respond to enquiries
Manage warranty and product defect claims
Prevent fraud and misuse
Maintain business, tax, and accounting records
Comply with legal obligations
Send marketing communications only where you have consented or where permitted by law
Analyse and improve our website and services
5. Legal Basis
We process personal data based on one or more of the following, as applicable under the PDPA:
Your consent
Performance of a contract with you
Compliance with legal obligations
Legitimate interests permitted by law
Other lawful bases permitted under the PDPA
Where consent is required, you may withdraw it at any time using the contact details below. Withdrawal does not affect processing carried out before withdrawal.
6. Disclosure to Third Parties
We may disclose personal data to:
Payment providers
Delivery and courier companies
IT, hosting, analytics, and email service providers
Returns and logistics partners
Professional advisers and auditors
Government authorities and regulators where required by law
Law enforcement or fraud prevention bodies where necessary
We do not sell personal data. We require service providers to protect personal data and use it only for the purposes we specify.
7. Marketing
We will send marketing communications only where you have consented or where permitted by law. You can opt out at any time by using the unsubscribe link or contacting info@aksesorikereta.com. Opting out of marketing does not stop transactional messages about orders, returns, or refunds.
8. Cookies and Similar Technologies
We use cookies and similar technologies for:
Strictly necessary website functions
Remembering preferences
Analytics
Marketing, where consented
You can manage cookies through your browser settings and our cookie settings tool. Blocking some cookies may affect website functionality.
9. Retention
We retain personal data only as long as necessary for the purposes collected and for legal, tax, accounting, warranty, and dispute-resolution requirements. Our retention schedule is set out in Document 6 below.
10. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, encryption where appropriate, and staff confidentiality obligations. No method of transmission or storage is completely secure.
11. International Transfers
Where personal data is transferred outside Malaysia, we will take steps required under the PDPA, including ensuring appropriate safeguards or relying on permitted exceptions.
12. Your Rights
Subject to the PDPA and applicable law, you may:
Request access to your personal data
Request correction of inaccurate personal data
Withdraw consent
Limit or prevent processing likely to cause damage or distress
Opt out of direct marketing
Ask questions about how we process personal data
Lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia
To exercise your rights, contact info@aksesorikereta.com or use the forms in the Exact Supporting Documents section.
13. Children
Our website and services are not directed to children under 18. We do not knowingly collect personal data from children without parent or guardian consent. If you believe a child has provided personal data, contact us.
14. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will be posted with the effective date and version number.