Privacy policy
Privacy Policy
NagaDrive — nagadrive.com Effective date: [DATE]. Data controller: [OPERATING ENTITY NAME] ("NagaDrive", "we", "us").
NagaDrive is an enquiry and brokerage platform connecting customers with vetted rental and chauffeur partners in Malaysia, Thailand and Indonesia. This policy explains what personal data we collect, why, and how it is handled. We take a deliberately minimal approach: we collect what is needed to respond to your enquiry and arrange your booking, and no more.
1. Data we collect
When you submit an enquiry through this site or contact us on WhatsApp, we collect:
- Your name
- Your WhatsApp number (and email address, if you provide one)
- Enquiry details — the vehicle or service you are interested in, city, dates, and anything else you choose to tell us (for example, flight numbers for airport transfers, or licence and IDP details where a Partner requires them to confirm eligibility)
We also collect limited technical data automatically through cookies and analytics (see section 7).
2. How we use your data
We use your data to:
- Respond to your enquiry via WhatsApp — this is our primary channel and the reason we ask for your number
- Arrange and fulfil your booking, including confirming availability, pricing, handover and logistics
- Keep basic records of enquiries and bookings for administration, dispute resolution and legal compliance
- Improve our site and service using aggregated, non-identifying analytics
We do not use your data for automated decision-making, and we do not add you to marketing lists without your consent.
3. Who we share it with
We share your data only as needed to fulfil your enquiry:
- The relevant supplying Partner — the rental or chauffeur company providing your vehicle receives the details it needs to confirm and deliver the booking
- Our local agents in Kuala Lumpur, Bangkok and other operating cities, who coordinate bookings on the ground
- Service providers that run our infrastructure (hosting, messaging, analytics), under appropriate confidentiality obligations
- Authorities, where disclosure is required by law
We do not sell personal data, to anyone, for any purpose. We do not share your details with Partners other than the one fulfilling your booking.
4. WhatsApp
Communication over WhatsApp is subject to WhatsApp's own terms and privacy policy in addition to ours. By enquiring via WhatsApp you accept that the conversation is carried on that platform.
5. International transfers
Because we operate across Malaysia, Thailand and Indonesia, your data may be transferred between these countries to fulfil your booking — for example, an enquiry made from Malaysia for a rental in Bangkok will be shared with our Bangkok agent and the Thai Partner. We limit such transfers to what fulfilment requires.
6. Your rights
We handle personal data in line with the Personal Data Protection Act 2010 (Malaysia) and the Personal Data Protection Act B.E. 2562 (2019) (Thailand), and applicable Indonesian data protection law, as relevant to where you and your booking are located. Subject to those laws, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Withdraw consent to processing (which may mean we cannot progress your enquiry)
- Request deletion of your data, subject to our legal retention obligations
- Object to direct marketing at any time
To exercise any of these rights, contact us at the address in section 9.
7. Cookies and analytics
We use essential cookies to run the site, and analytics cookies to understand how visitors use it (pages viewed, approximate location, device type). Analytics data is aggregated and is not used to identify you personally. You can decline non-essential cookies via our cookie notice or your browser settings without affecting your ability to enquire.
8. Retention and security
We retain enquiry and booking records for as long as needed to service your booking, resolve any dispute, and meet legal and tax obligations — typically no longer than seven years for completed bookings, and twenty-four months for enquiries that do not proceed, after which they are deleted or anonymised. We apply reasonable technical and organisational measures to protect data in our care; no online service can guarantee absolute security.
9. Contact
Questions, requests or complaints regarding your personal data:
[OPERATING ENTITY NAME] Email: [PRIVACY CONTACT EMAIL]
If you are not satisfied with our response, you may complain to the data protection authority in your jurisdiction, including the Department of Personal Data Protection (Malaysia) or the Personal Data Protection Committee (Thailand).
10. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with its effective date shown above.