DriveSmart may collect personal data when you:

(a) register for or use the DriveSmart platform;

(b) submit enquiries or applications relating to vehicle purchases, financing, or insurance;

(c) provide documents or information required for verification or processing;

(d) communicate with DriveSmart through electronic or other means.

The personal data collected may include, without limitation, your name, identification details, contact information, vehicle information, financial details, insurance-related information, and any other information you voluntarily provide.

Personal data collected by DriveSmart may be used for purposes including:

(a) providing, administering, and improving DriveSmart's services;

(b) facilitating vehicle purchase, vehicle financing and insurance applications and/or renewals;

(c) communicating with you regarding transactions, enquiries, or updates;

(d) conducting internal analysis, research, and system improvements;

(e) complying with legal, regulatory, or reporting obligations; and

(f) any other purpose directly related to the original purpose for which the data was collected.

DriveSmart may disclose your personal data to:

(a) financial institutions, insurers, dealers, and service partners involved in DriveSmart's operations;

(b) third-party service providers engaged to support DriveSmart's operations;

(c) regulatory, governmental, or law enforcement authorities where required by law.

Any disclosure is made on a need-to-know basis and subject to appropriate confidentiality or data protection obligations where applicable.

Each authorised partner acts as an independent data controller and processes personal data in accordance with its own privacy policy. DriveSmart does not control and is not responsible for such processing.

By providing your personal data to DriveSmart, you consent to the collection, use, processing, and disclosure of such data in accordance with this Privacy Policy.

Where consent is required under applicable law, DriveSmart will obtain your consent before collecting or processing your personal data. You may withdraw your consent by notifying DriveSmart in writing, subject to legal or contractual limitations.

You are responsible for ensuring that all personal data provided to DriveSmart is accurate, complete, and up to date. DriveSmart shall not be responsible for any consequences arising from inaccurate, incomplete, or outdated information provided by you.

DriveSmart implements reasonable administrative, technical, and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

While DriveSmart endeavours to safeguard personal data, you acknowledge that no method of transmission or storage is completely secure and that absolute security cannot be guaranteed.

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal or regulatory requirements, or to protect DriveSmart's legitimate interests. Thereafter, such data will be securely deleted or anonymised where appropriate.

Subject to the PDPA, you may request access to, or correction of, your personal data held by DriveSmart by submitting a written request. DriveSmart may impose a reasonable fee and require verification of identity before processing such requests.

The DriveSmart platform may contain links to third-party websites or services. DriveSmart is not responsible for the privacy practices, content, or security of such third parties, and this Policy does not apply to any third-party platforms.

DriveSmart may update this Privacy Policy from time to time. Any amendments will be published on the platform and will take effect upon posting. Continued use of the platform after such updates constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

DriveSmart

Email: contact@drivesmart.my