Privacy Policy
This document explains how Velora handles personal information collected through our website and rental enquiry process.
Last Updated: 5 May 2025 · Effective: 5 May 2025
1. Introduction
Velora ("we", "our", "us") operates a long-term car rental service based at 27 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia. We are committed to handling any personal information you provide through our website with care and in accordance with applicable Malaysian data protection legislation, including the Personal Data Protection Act 2010 (PDPA).
This policy applies to data gathered via veloraaa.cyou and through enquiry or contact processes initiated through this website. It does not apply to information collected offline or through other channels.
Questions about this policy can be directed to [email protected].
2. Data We Collect
We collect only the information needed to respond to enquiries and, where applicable, to administer a rental arrangement:
Retention: Enquiry data is kept for up to 12 months unless a rental agreement is formed, in which case records are retained for 7 years to meet statutory requirements.
3. How We Use Your Data
Personal data is used for the following purposes:
- Responding to enquiries — to answer questions about our rental plans and arrange follow-up calls or meetings.
- Service delivery — to prepare, administer, and manage rental agreements where you proceed with an arrangement.
- Business communications — to send relevant operational information such as servicing reminders or plan renewal notices.
- Website improvement — to analyse visitor behaviour and improve the usability of our website using aggregated analytics data.
- Legal compliance — to meet obligations under Malaysian law, including financial record-keeping and identity verification where required.
We do not sell or share personal data with third parties for marketing purposes. Data may be shared with service providers (such as analytics platforms) strictly for the purposes above and under appropriate data processing agreements.
4. Data Protection Measures
We take reasonable technical and organisational steps to protect personal information from unauthorised access, loss, or disclosure:
Encrypted Transmission
Website communications use HTTPS/TLS to protect data in transit.
Controlled Access
Access to personal data is restricted to authorised staff with a business need.
Breach Notification
In the event of a data breach affecting your rights, we will notify you without undue delay where required by law.
Data Minimisation
We collect only what is necessary for the purpose stated and remove data when it is no longer needed.
5. Cookies
Our website uses cookies — small text files stored in your browser — to support basic functionality, remember consent preferences, and gather aggregated usage data. Cookies we may place include:
| Category | Purpose | Optional |
|---|---|---|
| Essential | Session management, security, consent storage | No |
| Analytics | Visitor counts, page performance (e.g. Google Analytics) | Yes |
| Marketing | Ad performance tracking if advertising platforms are active | Yes |
| Preference | Remembering your cookie choices and display preferences | Yes |
You can manage cookie preferences at any time via our Cookie Policy page. Withdrawing consent for optional cookies does not affect the use of essential cookies.
6. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Withdrawal of consent — withdraw consent for data processing at any time where consent is the legal basis.
- Limitation of processing — request that we restrict the way we process your data in certain circumstances.
- Complaint — lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights have been affected.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving a valid request.
7. Third-Party Links
Our website may contain links to third-party websites such as map services or external references. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal data.
8. Minors
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our website, please contact us and we will take steps to remove it promptly.
9. Policy Updates
We may update this policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of our website after a policy change indicates acceptance of the updated terms. Where changes are material, we will take reasonable steps to draw your attention to them.
10. Contact
If you have questions about this policy or wish to exercise your data rights, please contact us:
Velora — Data Privacy Enquiries
- [email protected]
- +60 12-486 7329
- 27 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia