1. Who we are
NEXX Car Rental Company (003318517-P) rents cars in Kuala Lumpur and the Klang Valley. Our office is at 726, Off Jalan Ipoh Batu 4 1/2, 51200 Kuala Lumpur.
We are responsible for the personal data you give us through this website, our customer portal, WhatsApp, email and in person. If you want anything in this policy explained or acted on, email booking@nexxcarrental.com.
2. What we collect
Three groups, nothing else.
Details you give us
- ✓Full name
- ✓Phone number
- ✓Email address
- ✓Date of birth
- ✓Address
- ✓Nationality
Identity documents you upload
- ✓Selfie photo
- ✓IC or passport, front
- ✓IC or passport, back
- ✓Driving licence
Collected automatically
- ✓Pages you view
- ✓Device and browser type
- ✓Cookies and similar storage
We do not ask for bank card numbers on this website. Card details go straight to the payment provider.
3. Why we collect it
Each piece of data has one plain reason behind it.
Fulfilling a booking
Your name, phone, email and dates let us reserve the car, deliver it, contact you during the rental and issue the invoice.
Verifying identity and licence
We hand over a vehicle worth far more than the deposit, so we check that you are who you say you are and that your licence is valid.
Legal and tax records
Rental contracts, invoices and summons records must be kept so we can answer the tax authorities, the police or an insurer.
Marketing
Offers and news are sent only if you agreed to them. You can stop them at any time and it will not affect your booking.
4. Identity documents and your customer account
This is how we handle the identity documents you send us.
✓Documents are stored privately. Uploaded selfies, IC or passport images and licences are held in private storage that only our verification staff can open.
✓They are never displayed back in the browser. Once a document is uploaded the portal shows only its status, never the image itself.
✓They are never shared with third parties. Identity documents stay with us. They are not passed to car suppliers, partners or advertisers.
✓Verified details are locked. Once your account is verified, your name, phone number, date of birth and nationality can no longer be edited, because they must match the documents we checked. Your address stays editable. If a locked detail is wrong, message us and we will correct it.
✓You can close your account. Use Close account on the Personal Info page. After that you cannot log in and the portal stops showing your data.
Closing your account does not erase past rentals. Contracts, invoices and payment records are kept for legal and tax purposes for as long as the law requires.
5. Who we share with
We do not sell your data. These are the only parties who ever see it.
Payment processors
The bank or payment gateway that takes your payment receives your name, contact details and the amount, so the transaction can be completed and refunded.
Car suppliers
Where the car you book belongs to a supplier in our network, they receive your name and rental dates so the vehicle can be released to you. They do not receive your uploaded documents.
Authorities
The police, JPJ, insurers or the courts, where the law requires it, for example a summons, an accident claim or an investigation.
6. How long we keep it
Rental and payment records
Seven years, the period Malaysian tax and company law expects.
Identity documents
Kept while your account is active so you do not have to upload them for every booking, and removed once they are no longer needed for a rental or a legal claim.
Marketing contact details
Until you withdraw consent, then removed from our mailing list.
Website usage data
Up to 26 months in our analytics tools, in aggregate form.
7. How we protect it
✓The website and portal run over an encrypted connection (HTTPS).
✓Documents sit in private storage, not in a public folder, and are not linked from any page.
✓Only the staff who verify customers can open them, and each account is password protected.
✓If a breach ever affects your data, we will tell you and the relevant authority without delay.
No system is perfect, so please keep your own account password private and tell us straight away if you think someone else has used it.
8. Your rights under the PDPA 2010
The Malaysian Personal Data Protection Act 2010 gives you the following rights over the data we hold.
Access
Ask for a copy of the personal data we hold about you. Email us and we will reply within 21 days.
Correction
Ask us to fix anything wrong or out of date, including the locked fields on a verified account.
Withdraw consent
Tell us to stop using your data for marketing, or to limit how we process it. We will act on it and confirm.
Withdrawing consent does not undo processing that already happened, and we may still need to keep records the law obliges us to hold. If that stops us renting you a car, we will say so plainly.
9. Cookies
Cookies and similar browser storage keep you signed in to your account, remember your favourites and a booking you started, and tell us which pages people actually read.
You can block or clear cookies in your browser settings. If you do, the portal will sign you out and saved favourites will be lost, but the rest of the site still works.
10. Marketing and how to opt out
We only send offers to people who asked for them. Messages about a booking you have made, such as a delivery time or a deposit refund, are not marketing and will still be sent.
To stop marketing, reply STOP on WhatsApp, use the unsubscribe link in any email, or email us. It takes effect immediately and your rental is unaffected.