Privacy Notice

1. Data controller and contact

PCC determines why and how the data described here is processed. Our address is Lot 19, Jalan Lingkaran Tengah 2, Taman Intan Baiduri, 52000 Kuala Lumpur. Privacy requests may be made through our contact page or by call/WhatsApp at 016-321 5093. Please write “Privacy request” so it can be routed correctly.

2. Personal data we collect

• Identity and contact: name, phone, email, preferred contact method and consent records.
• Buyer demand: preferred brand, model, variant, year, body type, mileage, transmission, colour, budget, financing needs and purchase timeline.
• Seller and vehicle: plate, ownership and vehicle details, condition, mileage, expected price, loan context, documents and appointment information.
• Transaction and service: booking, payment, financing, transfer, workshop and after-sales records where applicable.
• Technical and campaign: IP address, browser/device data, pages and actions, referrer, session ID, UTM parameters and advertising identifiers such as fbclid, _fbc and _fbp when permitted.
• Communications: messages, call or WhatsApp notes and staff follow-up history.

Website forms identify required fields. If required enquiry or appointment information is not supplied, PCC may be unable to respond or provide the requested service. Do not submit identity documents, bank details or other sensitive information through a general website enquiry form.

3. Sources

We obtain data from you, your authorised representative, website and showroom forms, WhatsApp or calls, Meta lead advertisements, vehicle and transaction documents, staff records and service providers that support the requested process. We do not treat an existing booking, service or transaction record as automatic permission for unrelated advertising.

4. Purposes and choices

• Requested service: respond, verify details, arrange valuation/viewing/service, manage a transaction, prevent fraud and maintain records.
• Demand matching, when selected: retain your criteria, compare them with available or incoming stock and contact you about plausible matches.
• Marketing, when selected: send occasional vehicle updates and offers. You can opt out at any time.
• Analytics, when selected: understand site use and improve performance.
• Advertising, when selected: measure Meta campaigns, attribute conversions and, where expressly permitted, use hashed contact details for audience matching.
• Compliance: protect legal rights, meet accounting/transaction obligations and handle security incidents.

Required operational consent is separate from optional demand retention, marketing and advertising choices. Refusing an optional purpose does not prevent an ordinary enquiry or appointment.

5. Demand matching and profiling

PCC may score compatibility using the vehicle characteristics, budget, financing preference, location and timeline you provide. Matching helps staff prioritise relevant cars; it does not make a legally significant or final decision about you. Staff confirm availability, suitability, financing and any offer. A demand profile is active only when you choose demand matching, normally expires after 12 months, and can be paused, closed or deleted on request.

6. Cookies, Meta and analytics

Necessary storage supports security, forms and your privacy choice. Optional analytics and advertising technologies remain disabled until selected in the privacy controls. Advertising may involve Meta Pixel and Conversions API event data, IP address, user agent, _fbp/_fbc identifiers and, only with the relevant form permission, a phone number or email hashed before transmission. Hashing reduces exposure but does not make matched data anonymous to Meta. Details are in our Cookie Notice. You may reopen “Privacy choices” in the footer to withdraw permission.

7. Disclosures and overseas processing

Access is limited to authorised PCC personnel and providers supporting hosting, databases, communications, analytics, advertising, security and professional advice. This can include Vercel, database/storage providers and Meta Platforms. Some providers process data outside Malaysia, including in the United States or other locations where they operate. PCC uses contractual and organisational safeguards appropriate to the service and does not sell personal data.

8. Retention

• Unsuccessful enquiries and appointments: normally up to 24 months after the last interaction.
• Active demand profiles: up to 12 months unless renewed, closed sooner or required for an ongoing enquiry.
• Marketing permissions: until withdrawal or 24 months without engagement.
• Advertising/analytics identifiers: according to the selected provider and configuration; Meta Business Tool event data may be retained by Meta for up to two years.
• Completed transaction, accounting and legal records: normally up to seven years or longer where law or a dispute requires.
• Consent, withdrawal and privacy-request evidence: normally up to seven years for compliance evidence.

At expiry, data is deleted, securely disposed of or anonymised unless a lawful hold applies.

9. Security and incidents

PCC applies role-based access, authentication, logging, controlled service-provider access and reasonable technical and organisational safeguards. No system is completely risk-free. PCC maintains an incident process and will notify the Malaysian Personal Data Protection Commissioner and affected individuals when required.

10. Your rights

You may request access to or correction of personal data, withdraw consent, stop direct marketing, ask us to close a demand profile, or request deletion/anonymisation where retention is no longer required. We may need to verify your identity and may retain data required by law or an active transaction. Contact PCC using the details in section 1. You may also complain to Malaysia’s Personal Data Protection Commissioner.

11. Children and changes

PCC’s vehicle and financing services are intended for adults. We do not knowingly create advertising audiences from children. We may update this notice when processing or law changes; the date and version above identify the applicable wording.