PRIVACY POLICY – Reliance

1. introduction

This Privacy Policy explains how Bengkel Kereta Reliance Sdn Bhd [Registration No:200301001089 (603509-D)] (“Reliance Workshop,” “we,” “us,” or “our”) collects, uses, and protects your personal data, in accordance with Malaysia’s Personal Data Protection Act 2010, as amended (“PDPA”).

This Policy applies to customers, insurance claimants, job applicants, website visitors, and any other individual whose personal data we collect in the course of our business.

2. What Personal Data We Collect

Depending on how you interact with us, we may collect:

Name, phone number, email address, and IC/vehicle registration details (for service, claims, and contact form submissions)
Vehicle and insurance information (for repair and claims processing)
Resume/CV and application details (for job applicants via the Careers page)
Basic website usage data (via cookies, if applicable)
Where relevant to an insurance claim or accident report, limited details of other parties involved (e.g. another driver’s name and vehicle registration number); see Section 8 below

Some of the data above is sensitive personal data under the PDPA, for example medical reports (for bodily injury claims) and bank account details (for claim disbursements). We handle this data with additional care and only for the specific purpose it was collected for.

3. Basis for Processing

Under the PDPA, our general rule is that we only process your personal data with your consent (for example, when you submit a form or apply for a job). In limited circumstances permitted by the PDPA, we may also process your data without separately seeking consent where this is necessary to:

Perform a contract to which you are a party, or take steps you have requested before entering into one (e.g. carrying out the repair you’ve booked)
Comply with a legal obligation we are subject to
Protect someone’s vital interests (e.g. in a medical emergency)
Support the administration of justice, or the exercise of a function conferred on us by law

4. How We Collect Your Data

Through our contact and enquiry forms, phone calls, in-person visits, job applications, and website cookies (if used).

5. How We Use Your Data

To provide repair, towing, and insurance claims facilitation services
To respond to enquiries and service requests
To process job applications
To communicate updates about your vehicle or claim

6. Disclosure of Your Data

We may share your data with:

Insurance companies, for the purpose of processing your claim
Relevant authorities, where required by law
Service providers who support our operations (e.g. towing operators, parts suppliers, payment processors), under confidentiality obligations

Where we engage an external service provider to process personal data on our behalf, we require them by contract to protect that data, use it only for the agreed purpose, and notify us promptly if a data breach occurs on their end, so we can meet our own notification obligations under the PDPA.

We do not sell your personal data to third parties.

Transfers outside Malaysia: We do not transfer personal data outside Malaysia. If this changes in future (e.g. through a cloud service provider with servers abroad), we will carry out the assessment required under the PDPA and take steps to ensure your data remains adequately protected before any such transfer takes place, and we will update this Policy accordingly.

7. Data of Third Parties You Provide to Us

If, in connection with an insurance claim or accident report, you provide us with personal data belonging to someone else (e.g. another driver’s name, IC number, or vehicle registration), you confirm that you are authorised to share that information with us and that we may pass it on to the relevant insurer or authority for the purpose of processing the
claim.

8. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

9. Data Protection Officer

Under the Amendment Act, appointing a Data Protection Officer (DPO) is mandatory if an organisation meets any of the following thresholds: it processes the personal data of 20,000 or more individuals; it processes the sensitive personal data of 10,000 or more individuals; or its processing involves regular and systematic monitoring of personal data. Please assess whether Reliance Workshop’s operations meet any of these thresholds; if so, a DPO should
be named here and registered with the Personal Data Protection Commissioner within 21 days of appointment. In the meantime, questions or requests relating to your personal data can be directed to the contact in Section 15.

10. Data Breach Notification

If a personal data breach involving your data is likely to cause significant harm (for example, financial loss, identity fraud, or exposure of sensitive personal data such as medical or bank details), we are required to notify the Personal Data Protection Commissioner as soon as practicable, and in any case within 72 hours of becoming aware of
the breach. Where the breach is likely to cause you significant harm, we will also notify you (by phone, email, or the contact details you have provided) without unnecessary delay, and no later than 7 days after our initial notification to the Commissioner. If contacting you directly would involve disproportionate effort, we may instead issue a public notice on our website or social media channels.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law, including the following:

Completed service and repair records: up to 7 years
Insurance claim records: up to 7 years
Unsuccessful job applications: up to 7 years

12. Your Rights

Under the PDPA, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Withdraw consent for us to process your data (where applicable)
Request that we stop processing your data for direct marketing purposes
Request that your data be transferred to another data controller, in a commonly used format, where this is technically feasible (right to data portability, introduced by the Amendment Act)

Exercising these rights may be subject to exceptions permitted under the PDPA (for example, where we are legally required to retain certain records). To exercise these rights, contact us using the details below.

13. Cookies

Our website does not currently use cookies beyond those strictly necessary for it to function. We may consider using analytics or marketing cookies in the future; if we do, we will update this section to describe what they do and how you can manage your preferences.

14. Children's Data

Our services and website are not directed at children, and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

16. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at relianceworkshopmy@gmail.com or 29, Wisma Bantu, Jalan Dua, Jalan Chan Sow Lin, 55200 Kuala Lumpur, Malaysia.

As a growing global business, Reliance believes performance and success begins with fixing every vehicle to a high quality, and high safety standard.

These quality standards are backed by our day to day commitment to provide excellent customer care and service.

As a growing global business, Reliance believes performance and success begins with fixing every vehicle to a high quality, and high safety standard.

These quality standards are backed by our day to day commitment to provide excellent customer care and service.