Privacy Policy

1. Introduction

Nomatrek ("we", "us", "our") is a tourist car rental service based in Kota Kinabalu, Sabah, Malaysia. We operate under Malaysian law and handle personal data in line with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what data we collect, how we use it, and your rights in relation to it.

This policy applies to data collected through our website at nomatrek.pro and through direct enquiry processes (email, phone). If you have questions about this policy, contact us at [email protected].

2. Data We Collect

When you submit an enquiry through our contact form or reach out by email or phone, we may collect the following:

• Your name
• Your email address
• Your phone number (if provided)
• Your message content, including travel dates and package enquiries
• Technical data such as IP address, browser type, and pages visited (via cookies and analytics tools)

We collect this data either directly from you or automatically through your use of our website. The legal basis for processing is your consent (where given), the performance of a rental service agreement, and our legitimate interest in responding to enquiries and improving our service.

Personal data submitted via the enquiry form is retained for up to 24 months from the date of last contact, or until the conclusion of any rental agreement and associated documentation requirements.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Responding to rental enquiries and coordinating bookings
• Preparing rental documentation, route materials, and vehicle condition reports
• Communicating with you about your rental before, during, and after the rental period
• Improving our website and understanding how visitors use it
• Complying with applicable legal obligations

We do not use your personal data for marketing communications without your explicit consent. We do not sell or rent your personal data to third parties.

We may share your data with third-party service providers who assist us in operating our website (such as analytics providers). These providers are contractually obliged to handle your data only for the purposes we specify.

4. Data Protection Measures

We take reasonable technical and organisational steps to protect your personal data. This includes:

• Using secure HTTPS connections for our website
• Restricting access to personal data to authorised team members only
• Storing data on secure servers with access controls
• Conducting periodic reviews of our data handling practices

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate action and notify relevant parties in accordance with applicable law.

5. Cookies

Our website uses cookies to understand how visitors interact with our pages and to remember consent preferences. We use the following categories:

• Essential cookies – required for basic site functionality
• Analytics cookies – help us understand page visits and navigation patterns
• Preference cookies – store your cookie consent settings

You can manage your cookie preferences at any time through our Cookie Policy page.

6. Your Rights Under Malaysian PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing at any time (where processing is based on consent)
• Request deletion of your personal data, subject to any legal retention requirements
• Object to the processing of your data for certain purposes

To exercise any of these rights, write to us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law. If you are not satisfied with our response, you may contact the Personal Data Protection Commissioner of Malaysia.

7. Third-Party Links

Our website may contain links to external websites, including maps, travel resources, or related services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external site you visit.

8. Children's Privacy

Our services are intended for adults aged 18 and over, as vehicle rental in Malaysia requires a valid driving licence. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will take appropriate steps.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will update the "Last Updated" date at the top of this page. Continued use of our website after updates constitutes acceptance of the revised policy.

10. Contact for Data Enquiries

For all data-related questions, requests, or concerns:

• Email: [email protected]
• Address: Nomatrek, 47 Jalan Kampung Air, 88000 Kota Kinabalu, Sabah, Malaysia
• Phone: +60 12-518 9437