1. About this notice
This notice explains what personal data Dr Scooter collects about you, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies when you contact us, buy a scooter, have one serviced or repaired, rent from us, join a community ride, or visit this website.
We are the data controller for this data. This notice is published in English and Bahasa Malaysia, as section 7(3) of the Personal Data Protection Act 2010 requires; the Malay version is below. If the two differ, tell us and we will correct it.
2. How to contact us about your data
- Email: hello@drscooter.my
- WhatsApp or phone: 011-2982 8599
- In person: 59, Jalan SS 2/105, SS 2, 47300 Petaling Jaya, Selangor
Use any of these to ask a question, to make a request about your data, or to complain.
3. The personal data we process
Depending on how you deal with us, this includes:
- Identity and contact data: your name, phone number, WhatsApp profile name, and email address.
- Enquiry data: the messages you send us, your route, riding needs, rider weight where you tell us, and the photographs or videos of your scooter you share.
- Purchase and service data: the scooter model and serial number, invoices and receipts, warranty records, diagnosis notes, work carried out, and parts fitted.
- Rental data: the details you enter in our rental form, any identification or licence document you upload there, the rental period, the deposit, and payment confirmation.
- Location data: data from the GPS tracker fitted to a rental scooter, during the rental. See section 11.
- Website data: technical records kept by our hosting provider, such as your IP address, the pages requested, and the time of the request.
We do not ask you for health data, and we ask you not to send payment card numbers or passwords over chat.
4. Where the data comes from
Almost all of it comes from you: from your messages, from what you tell us at the counter, and from the rental form you complete. Some comes from the scooter itself, such as the GPS tracker on a rental unit and the serial number of the machine you bring in. Some is generated automatically when you visit the website, as described above. Occasionally someone else gives us your details, for example when a family member arranges a rental or a repair for you.
5. Why we use it
- To answer your enquiry and to recommend a scooter that suits your route and needs.
- To prepare quotations, take payment, issue receipts and keep accounts.
- To diagnose faults, carry out repairs and servicing, and handle warranty claims with suppliers and manufacturers.
- To process a rental: to check that the renter is 18 or older and is who they say they are, to hand over the scooter, to manage the deposit, and to handle the return.
- To protect our equipment, including locating a rental scooter in cases of theft, misuse or emergency.
- To keep records we are required to keep, and to establish or defend a legal claim.
- To send you service messages about work in progress, and marketing messages only where you have agreed to receive them.
- To keep this website available and secure.
We do not use your data for automated decision-making, and we do not sell personal data.
6. Is it obligatory to give us your data?
Giving us your personal data is voluntary. However, some of it is necessary for what you are asking us to do. If you do not give it to us:
- without contact details we cannot reply to an enquiry or tell you a scooter is ready;
- without the scooter model, symptoms and your contact details we cannot quote for or carry out a repair;
- without the identification and rental details we ask for, we cannot rent a scooter to you;
- without the details on an invoice we cannot complete a sale or support a warranty claim.
7. Who we share it with
We disclose personal data to these classes of third party, and only as far as needed:
- Technology providers who process data for us: Google, which hosts our rental form and stores the responses and uploaded documents; Meta, which carries WhatsApp messages; and Cloudflare, which hosts and protects this website.
- Suppliers, distributors and manufacturers: where a warranty claim or a part order needs the model, serial number and fault description.
- Banks and payment providers: to take payment and make refunds.
- Professional advisers and insurers: where we need advice or cover in relation to a claim.
- Authorities, including the police: where the law requires it, or in connection with theft, an accident, or an offence involving a scooter.
- A buyer of our business: if the business or part of it changes hands, in which case this notice continues to apply to the data transferred.
8. Transfers outside Malaysia
Google, Meta and Cloudflare operate globally, so some data is processed on servers outside Malaysia. Where that happens, we take reasonable steps and exercise due diligence so that the data continues to be protected to the standard the Personal Data Protection Act 2010 requires, and we rely on the grounds the Act allows for such transfers, including where the transfer is necessary to perform a contract with you or where you have consented.
9. How long we keep it
We keep personal data only for as long as it is needed for the purposes above, and then delete or destroy it. In practice that means:
- enquiry messages: while we are helping you and for a reasonable period afterwards, since a scooter you asked about often comes back for service;
- purchase, service and warranty records: for the length of the warranty and any period we are required to keep business and tax records;
- rental records, including documents you upload: while the rental is running and afterwards for as long as a deposit, damage, penalty or dispute remains open, and for any period the law requires;
- location data from a rental scooter: only for the rental period and a short time afterwards, unless it is needed for an investigation or a claim;
- website technical records: for the short period our hosting provider keeps them for security.
10. How we protect it
We take practical steps to protect personal data from loss, misuse, and unauthorised access, alteration or disclosure. Access is limited to the people who need it for their work. The administration area of this website is password protected and its sign-in is rate limited. Documents you upload to the rental form are held in the account of the form's owner.
If a personal data breach happens that must be reported, we will notify the Personal Data Protection Commissioner, and you where the law requires it, within the time the law allows.
11. GPS tracking on rental scooters
Every rental scooter carries a GPS tracker, as stated in the rental terms. While a scooter is rented to you, its location can be seen by us. We use this only to protect the scooter and the people involved, specifically in cases of suspected theft, serious misuse, an emergency, or a scooter that is not returned. We do not use it to monitor where you go day to day, and tampering with or removing the tracker is not allowed under the rental agreement.
12. Cookies and this website
This website sets no cookies for visitors, uses no analytics, and carries no advertising or tracking pixels. The only cookie we set is a sign-in cookie in the staff administration area, which visitors never see. Our hosting provider keeps technical records for delivery and security, as described above. Pages link to WhatsApp, Google Forms, Google Maps and social media; those services have their own privacy policies and set their own cookies once you go to them.
13. Marketing and your choices
We only send marketing where you have agreed to receive it, and you can stop it at any time by telling us on WhatsApp or by email; we will act on that request within a reasonable period. Community ride announcements go to the WhatsApp community you choose to join, and you can leave that group at any time. Photographs and video you send us are used for diagnosis; we only use them publicly, including for marketing, with your separate permission, and photographs taken at community rides are only published if you have not asked us not to.
14. Your rights
Under the Personal Data Protection Act 2010 you may:
- Ask for access to the personal data we hold about you, and to be told whether we are processing it. The Act allows a data user to charge a prescribed fee for a data access request.
- Ask us to correct data that is inaccurate, incomplete, misleading or out of date.
- Withdraw your consent to our processing, by notice to us; we will then stop processing that data, so far as we are able.
- Require us to stop processing for direct marketing, at any time.
- Ask us to limit processing that is likely to cause you damage or distress.
- Ask for data portability, the right introduced by the 2024 amendment to the Act, so that data you gave us is transmitted to another data controller where that is technically feasible.
To exercise any of these, email hello@drscooter.my or write to us at the address above. Please make the request in writing and tell us enough to identify you and to find the data. We may ask you to confirm your identity first, and we will respond within the period the Act allows. In limited cases the Act allows us to refuse a request, for example where it would disclose another person's data; if we refuse, we will tell you why.
Withdrawing consent or limiting processing may mean we can no longer provide a service, for example an active rental or an open repair.
15. Children
This website is not directed at children, and rental is for people aged 18 and over. Where a young rider is involved in a repair or a community ride, we deal with the parent or guardian.
16. Complaints
Please raise any concern with us first at hello@drscooter.my, and we will look into it. You also have the right to complain to the Personal Data Protection Commissioner at the Jabatan Perlindungan Data Peribadi (JPDP), the department responsible for the Act in Malaysia.
17. Changes to this notice
We may update this notice as our services or the law change. The date at the top shows when it last changed, and the version on this page is the one that applies. Where a change is significant, we will say so when we next contact you.
WhatsApp