Privacy Policy

Capsule Drev ("we", "our", "us") is committed to handling your personal data with care, transparency, and respect. This Privacy Policy explains what information we collect when you use our website or engage our services, why we collect it, and how it is protected — in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By using our website or providing your details to us, you acknowledge that you have read and understood this policy.

1. Data Controller

The data controller responsible for your personal information is:

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Contact and identity information

• Full name
• Phone number
• Email address
• Residential or service address (for scheduling and service delivery)

Service-related information

• Details of your home's electrical installation, as discussed during a visit or enquiry
• Notes or written observations produced during a service visit
• Service history and prior communications with our team

Technical data (website use)

• IP address and approximate geographic location
• Browser type and device information
• Pages visited and time spent on our website
• Referring source (e.g., search engine, social media)
• Cookie identifiers (see Section 11)

We do not collect sensitive personal data as defined under the PDPA (such as health information, biometric data, or financial account details) unless strictly necessary for service delivery and only with your explicit consent.

3. How We Collect Your Data

We collect personal data through the following means:

• Contact forms on our website, when you submit an enquiry or request a service
• Direct communication — phone calls, WhatsApp, or email
• Service delivery — information noted or recorded during a technician visit
• Cookies and analytics tools on our website (see Section 11)
• Referrals — when an existing client refers you, we may receive limited contact information

4. Purposes of Processing

We use your personal data for the following purposes:

• To respond to your enquiries and provide quotations or service information
• To schedule, confirm, and carry out service visits at your property
• To maintain service records and communicate follow-up observations
• To process payments and issue receipts or invoices
• To comply with applicable Malaysian legal and regulatory requirements
• To improve our website, services, and customer experience based on aggregate analytics
• To contact you with relevant service reminders (only if you have opted in)

We do not use your personal data for automated decision-making or profiling, nor do we sell or rent your data to third parties.

5. Legal Basis for Processing

Under the PDPA 2010, we process your personal data on the following lawful bases:

• Contractual necessity — to provide the service you have requested
• Consent — for marketing communications and non-essential cookies, where you have agreed
• Legitimate interests — for improving our services and protecting against fraud, where these interests are not overridden by your rights
• Legal obligation — where processing is required by Malaysian law

6. Data Sharing and Disclosure

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers and subcontractors — trusted individuals who assist with service delivery, bound by confidentiality obligations
• Analytics and advertising platforms — including Google Analytics 4, Microsoft (Bing Ads), and Meta (Facebook Pixel), which receive technical and behavioural data for website measurement. These transfers are governed by their respective data processing agreements
• Legal requirements — where disclosure is required by Malaysian law, court order, or regulatory authority

Where data is shared with platforms outside Malaysia, we take reasonable steps to ensure appropriate safeguards are in place.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy or as required by law:

• Enquiry records — up to 12 months if no service engagement follows
• Service and transaction records — up to 7 years, consistent with Malaysian commercial and tax record-keeping requirements
• Marketing consent records — until you withdraw consent
• Website analytics data — in accordance with the retention settings of each analytics platform (typically 14 months for Google Analytics)

When retention periods expire, data is deleted or anonymised in a secure manner.

8. Your Rights

Under the PDPA 2010, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent for processing where consent is the basis, without affecting prior processing
• Right to limit processing — to request that we stop using your data for certain purposes

To exercise any of these rights, please contact us at privacy@capsule-drev or by phone at +60 3 7858 4623. We will respond within 21 days of receiving your request. We may need to verify your identity before fulfilling any request.

9. Data Security

We take reasonable and appropriate measures to protect your personal data from unauthorised access, loss, misuse, disclosure, alteration, or destruction. These measures include:

• HTTPS encryption for all website communications
• Restricted access to personal data within our organisation on a need-to-know basis
• Secure storage of physical records containing personal information
• Regular review of our data handling practices

No method of electronic transmission or storage is completely secure. While we apply careful practices, we cannot warrant absolute security.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information without appropriate consent, please contact us and we will take steps to remove the relevant data.

11. Cookies

Our website uses cookies and similar tracking technologies to support its functionality and understand how visitors engage with our content. A summary of our cookie use is provided below; full details are available in our Cookie Policy.

• Strictly necessary cookies — required for the website to function (e.g., session handling, cookie consent preference). These cannot be disabled.
• Analytics cookies — used to understand visitor behaviour in aggregate (Google Analytics 4, Microsoft Clarity). Set only with your consent.
• Marketing cookies — used to measure advertising effectiveness (Meta Pixel, Bing Ads). Set only with your consent.

You can manage your cookie preferences at any time using the consent banner on our website, or by adjusting your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Where changes are significant, we will take reasonable steps to bring them to your attention.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us:

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data has been handled in a manner inconsistent with the PDPA 2010. Further information is available at www.pdp.gov.my.