Privacy Policy

We collect personal data in two ways: data you provide directly, and data collected automatically when you visit our website.

Data you provide:

• Full name (required for booking confirmation)
• Email address (required for booking communication)
• Phone number (optional, used if you wish to be contacted by phone)
• Message content from enquiry forms
• Driving licence and identification details provided at vehicle handover

Data collected automatically:

• Browser type and device information
• Pages visited and time spent on site
• Referring website or search term
• Cookie-based session data (see Section 5)

Legal basis for processing: Your data is processed on the basis of consent (when you submit an enquiry form), contract performance (when confirming a rental booking), and our legitimate interest in operating and improving our service.

Retention: Booking-related data is held for a period of three years from the date of rental, in line with standard Malaysian commercial record-keeping practice. Website analytics data is typically held for up to thirteen months.

Personal data collected through our website and booking process is used for the following purposes:

• Processing and confirming rental enquiries and bookings
• Communicating about your booking, including pickup times and documentation requirements
• Providing the road briefing relevant to your rental plan
• Responding to questions or support requests during your rental period
• Maintaining records for accounting and compliance purposes
• Improving our website and service quality (via anonymised analytics)

We do not use your personal data for unsolicited marketing. If you would like to receive occasional updates from Lumenwheel about seasonal availability, you may opt in by stating this in your enquiry message. You may opt out at any time by emailing [email protected].

We do not sell personal data to third parties.

We share data with the following categories of third parties only where necessary:

• Analytics providers (e.g. Google Analytics): anonymised website usage data to help us understand traffic patterns
• Email service providers: to send booking confirmations and communications
• Hosting providers: website data is stored on servers in accordance with applicable security standards

We do not share personal data with advertising networks, data brokers, or other commercial third parties for their own use.

Our website uses cookies to support functionality and understand usage. These include:

• Essential cookies: required for the website to function, including session management
• Analytics cookies: collect anonymised data about page visits (optional)
• Preference cookies: remember your consent choices (optional)

You can manage your cookie preferences at any time via our Cookie Policy page.

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• HTTPS encryption for all data transmitted through our website
• Access controls limiting which staff members can view personal booking data
• Secure storage of physical documents collected at handover
• Periodic review of data handling practices

In the event of a data breach affecting your personal data, we will notify you and the relevant Malaysian supervisory authority (the Personal Data Protection Commissioner) within a reasonable period as required by law.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to correct: request correction of inaccurate or incomplete data
• Right to withdraw consent: withdraw consent for optional data processing at any time
• Right to limit processing: request that we limit how we use your data in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you have concerns about how we handle your data, you may also lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

For privacy-related enquiries, contact the data controller:

Lumenwheel
84 Persiaran Multimedia, 63000 Cyberjaya, Selangor, Malaysia
Email: [email protected]
Phone: +60 18-547 1683