Privacy Policy

Last Updated: August 2026

CARPRO Malaysia respects your privacy and is committed to handling your personal data responsibly.

This Privacy Policy explains how CarPro Trading Sdn Bhd, trading as CARPRO Malaysia (“CARPRO Malaysia”, “we”, “us” or “our”), collects, uses, discloses, stores and protects personal data when you use CARPRO.my, purchase our products, communicate with us or participate in our programmes and services.

We process personal data in accordance with applicable Malaysian law, including the Personal Data Protection Act 2010 (Act 709), as amended from time to time (“PDPA”).

  1. Personal Data We May Collect

Depending on how you interact with CARPRO Malaysia, we may collect information including:

  • name;
  • email address;
  • telephone number;
  • billing and delivery address;
  • account information;
  • order and transaction information;
  • products purchased;
  • membership information;
  • enquiries and communications with us;
  • workshop or training registration information;
  • promotional or affiliate referral information;
  • IP address, browser, device and website usage information; and
  • other information you voluntarily provide to us.

Where you create an account using a supported third-party login service, we may receive basic account information permitted by that service, such as your name and email address.

We only seek to collect personal data reasonably relevant to our business and the purposes described in this Privacy Policy.

  1. Payment Information

Payments made through CARPRO.my may be processed by third-party payment gateways, banks or payment service providers.

Depending on the payment method used, payment information may be provided directly to the relevant payment provider.

CARPRO Malaysia does not necessarily receive or store complete payment-card information where payment is processed securely by a third-party payment provider.

The payment provider’s own privacy and security terms may also apply to the processing carried out by that provider.

  1. How We Use Personal Data

We may process personal data for purposes including:

  • creating and managing customer accounts;
  • processing and fulfilling orders;
  • arranging payment and delivery;
  • providing invoices and transaction records;
  • responding to enquiries;
  • providing customer and technical support;
  • processing returns, refunds and warranty claims;
  • managing membership programmes and benefits;
  • administering promotions, vouchers and discounts;
  • managing training or workshop registrations;
  • operating referral or affiliate programmes;
  • improving our products, services and website;
  • maintaining website security and preventing fraud;
  • maintaining appropriate business and transaction records;
  • complying with legal and regulatory requirements; and
  • other purposes reasonably connected with our business and communicated to you where required.

We will not knowingly use personal data for purposes materially unrelated to those for which it was collected without an appropriate basis or notice where required by law.

  1. Customer Service and Communications

When you contact CARPRO Malaysia through our website, email, telephone, WhatsApp, live chat, social media or other communication channels, we may collect and retain information relating to your enquiry.

This may include your contact information, message history, photographs, videos, order information and product information where necessary to assist you.

Such information may be used to provide customer service, technical support, process a return or warranty request, investigate an issue or maintain an appropriate record of our communication with you.

  1. Membership, Promotions and Marketing

If you register for membership, participate in a promotion or subscribe to marketing communications, we may use relevant personal data to administer those programmes and communicate applicable benefits or offers.

Where permitted by applicable law and your communication preferences, we may send information concerning:

  • new products;
  • promotions;
  • member benefits;
  • special offers;
  • events;
  • training; and
  • other CARPRO Malaysia news.

You may request to stop receiving direct marketing communications at any time by using an available unsubscribe method or contacting CARPRO Malaysia at [email protected].

Stopping marketing communications will not prevent us from sending necessary transactional or service communications relating to your account, order, payment, delivery, return or warranty matter.

  1. Cookies and Website Technologies

CARPRO.my may use cookies and similar technologies to operate and improve the website.

These technologies may be used for purposes such as:

  • maintaining website and shopping-cart functionality;
  • remembering account or website preferences;
  • website security;
  • understanding website traffic and usage;
  • measuring website performance;
  • analytics;
  • referral and affiliate tracking; and
  • advertising or marketing measurement where applicable.

Some cookies are necessary for the website to function properly, while others may support analytics, marketing or other optional functions.

Where required, users may be provided with choices concerning non-essential cookies through the website’s cookie or privacy controls.

Browser settings may also allow users to block or delete certain cookies, although disabling necessary cookies may affect website functionality.

  1. Affiliate and Referral Tracking

CARPRO Malaysia may operate affiliate, referral or promotional programmes.

Where you visit CARPRO.my through an affiliate or referral link, cookies or similar technologies may be used to identify the referring affiliate and determine whether a qualifying transaction should be attributed to that referral.

Information used for referral tracking may include referral identifiers, website activity, transaction information and other technical information reasonably necessary to operate the programme.

Detailed rules governing participation by affiliates are contained in our separate Affiliate Program Terms & Conditions.

  1. Disclosure of Personal Data

CARPRO Malaysia does not sell your personal data as a business practice.

We may disclose personal data where reasonably necessary to parties such as:

  • payment gateways and payment service providers;
  • banks and financial institutions;
  • courier, delivery and logistics providers;
  • website hosting and technology service providers;
  • IT and security service providers;
  • customer communication and support providers;
  • analytics or marketing service providers;
  • professional advisers such as accountants, auditors or lawyers;
  • manufacturers, authorised distributors or service centres where necessary for a product or warranty matter; and
  • government, regulatory, enforcement or judicial authorities where required or permitted by law.

We seek to disclose only information reasonably necessary for the relevant purpose.

  1. Third-Party Services and Websites

CARPRO.my may use or link to third-party services, platforms or websites.

Where you interact directly with a third-party provider, that provider may process personal data under its own privacy policy and terms.

CARPRO Malaysia is not responsible for the independent privacy practices of third-party websites or services that we do not control.

Customers are encouraged to review the relevant provider’s privacy information where appropriate.

  1. International Data Transfers

Some service providers, technology platforms, manufacturers or other parties supporting CARPRO Malaysia may process or store information outside Malaysia.

Where personal data is transferred outside Malaysia, CARPRO Malaysia will take reasonable steps to handle such transfers in accordance with applicable requirements under Malaysian personal data protection law.

  1. Protection of Personal Data

CARPRO Malaysia takes reasonable practical measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

These measures may include appropriate administrative, technical and organisational safeguards.

However, no internet transmission, electronic storage system or online service can be guaranteed to be completely secure.

Customers are responsible for maintaining the confidentiality of their account password and should contact us if they believe their CARPRO.my account has been accessed without authorisation.

  1. Retention of Personal Data

CARPRO Malaysia retains personal data for as long as reasonably necessary for the purpose for which it was collected and for legitimate business, accounting, warranty, dispute-resolution, security and legal requirements.

Different types of information may therefore be retained for different periods.

When personal data is no longer reasonably required, we will take appropriate steps regarding its deletion, destruction or anonymisation in accordance with applicable requirements.

  1. Your Personal Data Rights

Subject to the PDPA and any applicable exceptions, you may have rights relating to your personal data, including the right to:

  • request access to personal data held about you;
  • request correction of inaccurate, incomplete, misleading or outdated personal data;
  • withdraw consent to certain processing where applicable;
  • request that direct marketing communications cease; and
  • exercise other rights available under applicable Malaysian personal data protection law.

Certain requests may be subject to legal requirements, permitted exceptions or reasonable verification of identity.

To make a request, please contact CARPRO Malaysia at [email protected].

  1. Accuracy of Information

Customers are encouraged to provide accurate and up-to-date personal information.

If your contact, delivery or account information changes, please update your account where possible or contact CARPRO Malaysia.

CARPRO Malaysia may not be responsible for problems caused by materially inaccurate or incomplete information supplied by a customer, subject to applicable law.

  1. Children’s Personal Data

CARPRO.my is not intended for use by individuals under the age of 18 without the involvement or consent of a parent or legal guardian where required.

We do not knowingly collect personal data from children for marketing purposes without appropriate consent.

If a parent or guardian believes that a child’s personal data has been provided to CARPRO Malaysia without appropriate consent, please contact us at [email protected] so that we can review the matter and take appropriate action.

  1. Changes to This Privacy Policy

CARPRO Malaysia may update this Privacy Policy from time to time to reflect changes in our business operations, website technologies, service providers or applicable law.

The latest version will be published on CARPRO.my together with the updated revision date.

Where required by applicable law, we will provide appropriate notice of material changes.

  1. Contact Us

If you have questions about this Privacy Policy, wish to exercise an applicable personal data right, or have a privacy-related concern, please contact:

CARPRO Malaysia
CarPro Trading Sdn Bhd
(Company No. 1148153-V)

No. 20-1, Setia Avenue
Jalan Setia Prima S U13/S
Setia Alam
40170 Shah Alam
Selangor, Malaysia

Customer Service: 012-980 1196
Email: [email protected]

Our current contact details are also available on the CARPRO Malaysia Contact Us page.

Related Policies

This Privacy Policy should be read together with, where applicable:

  • Terms & Conditions
  • Refund & Return Policy
  • Warranty Policy
  • Affiliate Program Terms & Conditions

CARPRO Malaysia
CarPro Trading Sdn Bhd

Last updated: August 2026

A few important points about Page 4

This is deliberately moderate, rather than a giant privacy document. Malaysia’s Personal Data Protection Commissioner itself advises businesses not to simply create a long list of hypothetical future uses; the notice should reflect what the organisation actually does and communicate it clearly.

I included affiliate/referral tracking because you are using an affiliate programme, but kept the actual commission and affiliate rules out of the Privacy Policy.

I also used the term “data controller” conceptually rather than “data user” in the legal framing because the 2024 amendment replaced “data user” with “data controller” across much of the PDPA, and those amendments are now in operation.

One thing I would check before publishing is whether CARPRO.my’s cookie setup currently provides appropriate consent/control for non-essential analytics/marketing cookies. Having good wording in the Privacy Policy does not by itself configure the website’s cookie behaviour.

Also, the Malaysian regulator states that a PDP notice is a mandatory element for businesses processing personal data in commercial transactions. The PDPA applies to processing of personal data in connection with commercial transactions by persons established in Malaysia.

Malaysia Personal Data Protection Commissioner — Privacy Notice Guidance

Page 4 is therefore ready at the moderate-information level. Next is Page 5 — Affiliate Program Terms & Conditions. For that one, I recommend we base the wording on your actual Solid Affiliate configuration rather than guessing your commission %, cookie duration and payout rules.