Privacy Policy

1. Who we are

Trivora Car Rental ("we", "us") is the trading name of TRIVORA VENTURES (SSM No. 202603175019 (JR0192861-X)), a car rental service in Johor Bahru. We are the data user for the personal data you give us when you use this website.

2. Personal data we collect

• Identity and contact details: full name, phone number and email address.
• Refund bank details (only if you are owed a refund): bank name, account number and account holder name, entered by you through a one-time link. We use them only to transfer your refund. We delete them after the refund is completed (automatically within 30 days), and keep only the bank name and last 4 digits of the account number as a payment record.
• IC or passport number: the number you type into the booking form. It is locked to your booking and used on our rental and handover records.
• Identity documents: photos of your identity card (IC) or passport, and your driving licence.
• Document check results: details read automatically from your document photos (name, IC or passport number, licence expiry date) and whether they match.
• Chat messages: what you type into the chat assistant on our website.
• Rental details: rental dates, the car you choose, pick-up and return location or address, destination state and selected add-ons.
• Payment information: payment status and amount. Card or bank details are entered on the payment provider's page and are not stored by us.
• Device storage: your language preference is saved on your device.

3. Why we collect your data

• To process and confirm your booking.
• To verify your identity and your eligibility to drive.
• To make sure first-booking promotions are used only once per customer, by matching your IC or passport number, phone number and email address with earlier bookings.
• To answer the questions you send through the chat assistant on our website.
• To deliver, collect and manage the rental car.
• To manage payments, deposits and refunds.
• To contact you about your booking by WhatsApp, phone or email.
• To prevent fraud, protect our vehicles and resolve disputes.
• To comply with legal requirements.

Automated document check. When you upload photos of your IC or passport and your driving licence, our system uses an artificial intelligence (AI) service to read the name, the IC or passport number and the licence expiry date, and to check that the details on both documents match. The result is only used by our staff to help verify your identity and prevent fraud. It does not decide on its own whether you can rent a car: you can still complete your booking, and our staff confirm your original documents in person when you collect the car.

4. Who we disclose your data to

We only share data with parties who help us run the service, and only as much as needed:

• Payment provider (CHIP) to process your payment.
• Database and file storage provider (Supabase) to store your booking and the photos of your documents privately.
• Website hosting provider (Netlify).
• AI service provider (DeepSeek) to read your document photos for the automated document check, and to write replies in the website chat assistant.
• Google: Google Maps to calculate delivery distance, Google Calendar for our internal schedule, and Google Fonts to display text on this site.
• Authorities where required by law.

We do not sell your personal data.

5. Processing outside Malaysia

Our service providers may process data outside Malaysia, for example in Singapore. Our AI service provider may process your document photos and chat messages in the People's Republic of China. We take reasonable steps so that your data remains protected.

6. Security and retention

This website uses HTTPS. Photos of your IC and licence are kept in private storage that the public cannot access, and only authorised staff can view them. No system is completely secure, but we work to protect your data.

Please do not type sensitive details such as your IC number or bank details into the website chat assistant. To book, use the booking form.

We keep your data for as long as needed for the purposes above, and as required for legal, accounting, insurance or dispute purposes. After that the data is deleted or anonymised.

7. Your rights

You have the right to request access to your personal data, ask for corrections, withdraw your consent, and ask us to limit or stop processing. To do so, contact us on WhatsApp 013-466 6430. We may need to verify your identity first.

8. Cookies and device storage

We do not use advertising or tracking cookies. This site stores your language preference on your device only.

9. Minors and changes to this notice

This service is for adults who hold a valid driving licence. We may update this notice from time to time. The latest update date is shown at the top of this page.

10. Contact us

For any question about this Privacy Policy or your personal data: WhatsApp 013-466 6430. You can also read our PDPA Consent.