1) Scope
This Privacy Policy / PDPA Notice applies to personal data processed when you use CarZora's website and services, including when you submit particulars and upload documents as a buyer or seller.
If there is any conflict between this notice and any specific notice shown at the point of collection, the specific notice shown at collection will apply for that particular collection.
2) Personal data we collect
We collect personal data that you provide to us directly through our forms, communications (e.g., phone/email/WhatsApp), and document uploads for the purposes described below.
Buyer (financing applicant)
We may collect:
- Personal details: full name, NRIC/IC or passport details, date of birth, nationality, address, email, phone number.
- Financial details: information you provide to support affordability/eligibility assessment and application submission (e.g., income/employment details where relevant).
- Uploaded documents (as applicable): IC front and back, driving licence, bank statement, EPF statement, and other related supporting documents you choose to provide that are relevant to your financing request.
Seller (vehicle owner / counterparty)
We may collect:
- Personal details: full name, NRIC/IC or passport details, contact details.
- Vehicle and transaction details: vehicle details and information related to the selling process.
- Uploaded documents (as applicable): IC front and back, car grant / vehicle registration documents, approved permit (where relevant), and other related supporting documents you choose to provide that are relevant to the transaction.
"Other related documents"
"Other related documents" means documents you voluntarily provide that are relevant to private auto financing facilitation or the vehicle transaction (for example, supporting letters, settlement-related documents, or other evidence requested by participating financiers).
Please do not upload documents unrelated to your financing request or vehicle transaction.
3) Purposes (why we process your data)
We process your personal data to:
- Create and manage your application profile and facilitate your request as buyer or seller.
- Verify identity, validate key details, and reduce fraud/misuse risk.
- Prepare, support, and submit financing applications to participating banks/financiers, and to respond to queries from them relating to your submission.
- Communicate with you regarding your application status, missing items, clarifications, and support matters.
- Comply with applicable legal requirements and respond to lawful requests by authorities where required.
4) Disclosure (who we share data with)
We may disclose your personal data (including uploaded documents) to the following classes of third parties where necessary for the purposes above:
- Participating banks/financiers and their authorised representatives, for evaluating and processing financing applications and related checks.
- Service providers that help us operate our platform and deliver communications (e.g., hosting, storage, document processing, messaging/email tools), acting under appropriate contractual/confidentiality controls.
- Authorities, regulators, or law enforcement where required by law or to respond to lawful requests.
We do not sell your personal data.
5) Overseas storage/processing
Your personal data (including documents you upload) may be stored or processed outside Malaysia for hosting and operational purposes.
Where applicable, we take reasonable steps to ensure appropriate safeguards are in place consistent with this notice and PDPA requirements.
6) Mandatory vs optional data (and consequences)
Some information and documents are mandatory to proceed with loan facilitation (for example, identity documents and key supporting documents needed for submission and verification).
If you do not provide mandatory data, we may be unable to continue the application or submit it to participating financiers.
Any "other related documents" are generally optional, but providing them may help financiers assess your application more accurately.
7) Consent and your choices
By submitting your particulars and/or uploading documents, you consent to the processing and disclosure described in this notice, except where processing is permitted or required by law without consent.
If we send marketing communications, you can opt out using the method provided in the message or by contacting us.
8) Retention
We retain personal data only as long as necessary for the purposes stated in this notice, including for audit, dispute handling, fraud prevention, and compliance needs, and then delete or anonymise it where appropriate.
9) Security
We take reasonable technical and organisational security measures to protect personal data, including controlling access to documents and limiting access to authorised personnel and service providers.
No method of transmission or storage is completely secure; however, we work to maintain safeguards appropriate to the sensitivity of the data we handle.
10) Access and correction rights
You may request access to, or correction of, your personal data by contacting us using the details below, subject to applicable legal exceptions.
We may request verification of identity before processing access/correction requests.
11) Contact (PDPA / Privacy)
If you have any questions, complaints, or requests to access or correct your personal data, contact:
- Phone: 018-464 3918
- Email: support@carzora.com
12) Updates to this notice
We may update this Privacy Policy / PDPA Notice from time to time by posting the updated version on our website and updating the "Last updated" date.