This statement describes how Tivoly Auto Trading Sdn. Bhd. (Reg. 202301045712 (1531284-K)) collects, uses and protects personal data that visitors and clients share with us. We comply with the Personal Data Protection Act 2010 of Malaysia (PDPA), and we have written this in plain English so that there is no doubt about what we do with information about you.
1. Who we are
The data controller is Tivoly Auto Trading Sdn. Bhd., trading from Lot 12-3A, Wisma Mont Kiara, Jalan Kiara, 50480 Kuala Lumpur, Malaysia. You can reach us at [email protected] or on +60 3-2785 4196.
2. What we collect
When you submit a form or correspond with us, we collect:
- Your name, contact email and phone number;
- Optional details about a vehicle (make, model, year, mileage, registration);
- The content of your message and any attachments you choose to send;
- Basic technical information such as IP address, browser type and the pages you visited (collected through cookies — see our cookie policy).
3. Why we collect it
Personal data is used solely to respond to your enquiry, to provide the service you have asked for, and to keep records as required by Malaysian commercial and tax law. We do not sell or rent your data to third parties and we do not subscribe you to any mailing list without your active opt-in.
4. Who we share data with
The only parties we share data with are those strictly necessary to complete the service:
- Banks and licensed financiers, where you have asked us to forward an indicative loan enquiry;
- JPJ (Road Transport Department) and PUSPAKOM, where a vehicle ownership transfer or inspection is required;
- Insurers and their adjusters, where a written valuation is being supplied at your request;
- Our own technology suppliers (e-mail hosting, cloud storage), under written confidentiality terms.
5. How long we keep it
Enquiry records are kept for two years from the date of last contact. Trading records (sales, trade-ins, appraisals) are kept for seven years to comply with statutory requirements. Cookie analytics data is retained for thirteen months in aggregated form.
6. Your rights
Under the PDPA you have the right to access the personal data we hold about you, to correct it, and to withdraw consent for any further processing. To exercise these rights, write to us at the email address above. We will respond within twenty-one days.
7. Security
Personal data is stored on encrypted, password-controlled systems. Physical paperwork is kept in locked filing in our Mont Kiara office. Access is limited to staff who need it to perform their role. We have not, to date, suffered a notifiable data breach.
8. Children
We do not knowingly collect data from anyone under the age of eighteen. Our services are intended for adults transacting in vehicles on their own behalf or as authorised agents.
9. Changes to this policy
If we update this policy, the revised version will appear on this page with a new “last reviewed” date. Material changes will additionally be notified to clients with whom we are in active correspondence.
10. Complaints
If you believe we have mishandled your data, please contact us first. If you are not satisfied with our response, you may escalate to the Personal Data Protection Department of Malaysia (Jabatan Perlindungan Data Peribadi).