Privacy Policy

VACC SDN. BHD., operating under the VACC AUTO brand, is responsible for the personal data collected through this website and our related services.

In this Privacy Policy, “VACC AUTO”, “we”, “us” and “our” refer to VACC SDN. BHD. “Customer”, “you” and “your” refer to a website visitor, account holder, purchaser or person who communicates with us.

This Privacy Policy explains:

• What personal data we may collect;
• How we collect and use personal data;
• When personal data may be disclosed;
• How personal data is protected and retained; and
• The choices and rights available to customers.

This Privacy Policy should be read together with our Terms & Conditions and Returns & Refunds Policy.

Depending on how customers interact with VACC AUTO, we may collect the following categories of personal data:

Identity and contact information:

• Full name;
• Email address;
• Phone number;
• Billing and delivery address; and
• Account login or profile information.

Order and transaction information:

• Products purchased or viewed;
• Order number;
• Purchase history;
• Payment status;
• Refund or return information;
• Delivery and tracking information; and
• Voucher, rewards or promotional activity.

Vehicle information:

• Vehicle brand;
• Vehicle model;
• Manufacturing year;
• Model generation or chassis information;
• Selected vehicle variations; and
• Vehicle photographs supplied for compatibility checking.

Customer service information:

• Messages, enquiries and feedback;
• Return or warranty requests;
• Product reviews;
• Photographs or videos submitted to us; and
• Records of customer service communications.

Technical and usage information:

• IP address;
• Browser and device information;
• Operating system;
• Website activity;
• Pages and products viewed;
• Referring website;
• Approximate location derived from technical information; and
• Cookies, pixels and similar technology data.

Customers should avoid submitting sensitive personal data unless it is specifically requested and necessary for a legitimate purpose.

We may collect personal data directly from customers when they:

• Browse the VACC AUTO website;
• Create or update an account;
• Save a vehicle in My Garage;
• Join or use a rewards programme;
• Place, pay for or cancel an order;
• Request delivery, return, exchange or refund services;
• Contact customer support;
• Subscribe to marketing communications;
• Participate in a promotion, survey or campaign;
• Submit a review, photograph or video; or
• Communicate with us through email, phone, messaging platforms or social media.

We may also receive personal data from third parties involved in providing our services, including:

• Shopify;
• Payment providers;
• Delivery and logistics providers;
• Customer account or loyalty service providers;
• Marketing and analytics providers;
• Social media platforms; and
• Fraud prevention or security service providers.

Where another person places an order or provides information on behalf of a customer, that person is responsible for ensuring that they are authorised to provide the information.

We may use personal data for the following purposes:

• To create and manage customer accounts;
• To operate My Garage and vehicle compatibility features;
• To process and fulfil orders;
• To verify and receive payments;
• To arrange shipping, delivery and order tracking;
• To process cancellations, returns, exchanges and refunds;
• To provide product compatibility support;
• To respond to enquiries and customer service requests;
• To manage rewards, vouchers, promotions and membership benefits;
• To send transactional messages regarding accounts and orders;
• To improve our products, website and customer experience;
• To measure website performance and customer engagement;
• To detect fraud, misuse, security incidents or unauthorised activity;
• To maintain business, accounting and transaction records;
• To enforce our Terms & Conditions;
• To comply with legal and regulatory obligations; and
• To protect the rights, safety and property of customers, VACC AUTO and others.

Where required, we will obtain consent before using personal data for a new or unrelated purpose.

Our website may use cookies, pixels, local storage and similar technologies.

These technologies may be used to:

• Keep the website and shopping cart functioning;
• Remember account or language preferences;
• Maintain website security;
• Understand website traffic and customer behaviour;
• Measure the performance of products and campaigns;
• Personalise website content; and
• Deliver or measure advertising, where permitted.

Some cookies are necessary for the website to function. Other cookies may be used for analytics, personalisation or advertising.

Where a cookie preference tool is available, customers may use it to accept, reject or manage non-essential cookies.

Customers may also control cookies through their browser settings. Blocking certain cookies may affect account login, shopping cart functions, checkout or other website features.

Third-party services integrated with our website may place or access their own cookies in accordance with their respective privacy policies.

Where customers have provided consent or where otherwise permitted by law, VACC AUTO may send marketing communications regarding:

• New products;
• Promotions and vouchers;
• Rewards or membership benefits;
• Vehicle-related product recommendations;
• Campaigns and events; and
• Other VACC AUTO news.

Marketing communications may be sent by email, SMS, messaging platform, telephone or other selected channels.

Customers may stop receiving marketing communications at any time by:

• Using the unsubscribe link in an email;
• Following the opt-out instructions in the message; or
• Contacting VACC AUTO.

Opting out of marketing does not prevent VACC AUTO from sending necessary service communications, such as order confirmations, payment updates, delivery notifications, account security messages or replies to customer enquiries.

Marketing preferences may take a reasonable period to update across all systems.

We may disclose personal data only where reasonably necessary for the purposes described in this Privacy Policy.

Personal data may be shared with:

• Shopify and ecommerce platform providers;
• Payment gateways, banks and payment service providers;
• Delivery, courier, warehouse and logistics providers;
• Website hosting, technical support and security providers;
• Customer account, My Garage and rewards service providers;
• Email, SMS and customer communication providers;
• Analytics, advertising and marketing service providers;
• Accountants, auditors, insurers, lawyers and professional advisers;
• Government authorities, regulators, courts or law enforcement agencies where required by law; and
• A buyer, investor or successor in connection with a proposed or completed business transfer, restructuring or sale.

Service providers are permitted to process personal data only for the services they provide or as otherwise permitted by applicable law.

We may also disclose information where necessary to investigate fraud, protect website security, enforce agreements or protect legal rights.

Our website may contain links to third-party websites or services. VACC AUTO is not responsible for the privacy practices of external websites, and customers should review their privacy policies separately.

VACC AUTO uses Shopify and may use other technology, payment, analytics, marketing and service providers that operate or store information in different countries.

As a result, personal data may be processed or stored outside Malaysia.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer is permitted under applicable law and that appropriate safeguards are used.

Depending on the service provider, safeguards may include:

• Contractual data protection obligations;
• Security and confidentiality requirements;
• Access controls;
• Encryption or other technical measures; and
• Processing restrictions.

Personal data processed in another country may be subject to the laws and lawful requests of authorities in that country.

VACC AUTO takes reasonable administrative, technical and organisational measures to protect personal data against:

• Loss;
• Misuse;
• Unauthorised access;
• Unauthorised disclosure;
• Alteration; and
• Destruction.

These measures may include:

• Access restrictions;
• Account authentication;
• Secure system configurations;
• Service provider assessments;
• Staff confidentiality obligations;
• Backup and recovery controls; and
• Monitoring for suspicious activity.

No website, transmission or storage system can be guaranteed to be completely secure.

Customers are responsible for keeping account passwords confidential and should notify VACC AUTO promptly if unauthorised access or suspicious account activity is identified.

Where a personal data breach occurs, VACC AUTO will investigate the incident and provide notifications to the relevant authorities or affected individuals where required by applicable law.

VACC AUTO retains personal data only for as long as reasonably necessary for the purposes for which it was collected.

The retention period may depend on:

• Whether a customer account remains active;
• Order, delivery, return or refund requirements;
• Warranty and customer service matters;
• Rewards and membership administration;
• Accounting, tax and legal record requirements;
• Fraud prevention and security needs;
• Dispute or complaint resolution; and
• Applicable limitation periods and legal obligations.

When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it.

Some information may remain in secured backups for a limited period before being permanently removed through normal backup processes.

Subject to applicable law, customers may request to:

• Confirm whether VACC AUTO processes their personal data;
• Access personal data held by VACC AUTO;
• Correct inaccurate, incomplete or outdated personal data;
• Withdraw consent where processing is based on consent;
• Object to or restrict certain processing that may cause damage or distress;
• Stop the use of personal data for direct marketing;
• Request deletion where the data is no longer required and deletion is legally permitted;
• Request data portability where applicable; and
• Submit a privacy complaint.

Customers may update certain account details directly through their VACC AUTO account.

For other requests, please contact VACC AUTO using the details shown below.

We may request information to verify the identity and authority of the person making the request.

A request may be limited or refused where permitted or required by law, including where information must be retained for legal, fraud prevention, transaction or dispute purposes.

Customers may also submit a complaint to the relevant Malaysian personal data protection authority.

Our website and products are intended for general automotive accessory customers and are not specifically directed at young children.

A person who is not legally able to provide valid consent or enter into a purchase should use the website only with the involvement of a parent or legal guardian.

If VACC AUTO becomes aware that personal data has been provided without appropriate permission, we may delete or restrict the information where reasonably possible.

We may update this Privacy Policy from time to time to reflect changes in:

• Our website or services;
• Shopify or third-party integrations;
• Business practices;
• Privacy and security requirements; or
• Applicable laws and regulations.

The updated Privacy Policy will be published on this page with a revised “Last updated” date.

Questions, requests or complaints regarding personal data may be directed to:

VACC SDN. BHD.

No. 97 & 99, Jalan Kristal 1
Taman Limbongan Indah
75200 Melaka
Malaysia

Email: helo@vacc.my
Phone: (+60)11-11125256

Please include “Privacy Request” in the email subject and provide sufficient information for us to identify and respond to the request.