Privacy Policy

This notice explains how GrandLab Detailing, a trading name of GrandPride Luxury Travel Sdn Bhd (Company No. 1297143-K), of 5, Jalan 13/2, Seksyen 13, 46200 Petaling Jaya, Selangor, Malaysia, collects, uses and protects your personal data. It is issued in accordance with the Personal Data Protection Act 2010 of Malaysia and its subsequent amendments.

What we collect

Depending on how you deal with us, we may collect:

• Contact details — your name, mobile number, email address and, where relevant, a billing address.
• Vehicle details — registration plate, make, model, colour and condition notes recorded at intake.
• Service records — the work carried out, dates, packages purchased, remaining balances, warranty registrations and photographs of your vehicle taken before, during and after work.
• Payment information — amounts, dates and payment method. Card and bank details are handled by our payment provider and are not stored on our systems.
• App and account data — if you use the GrandLab app: your login credentials, wallet balance, reward points, vouchers and booking history.
• Messages — correspondence with us by WhatsApp, phone, email or in person.

Why we use it

• To carry out the services you have asked for and to contact you about your vehicle.
• To take bookings, issue invoices and process payments.
• To maintain service history, package balances and warranty coverage.
• To send service reminders, such as when a coating is due for maintenance.
• To send offers and promotions, where you have not asked us to stop.
• To meet our legal, tax and accounting obligations.

Photographs of your vehicle

We photograph vehicles as a record of their condition and of the work carried out. We may also wish to use these images on our website or social media. Where a vehicle is identifiable — for example where the registration plate is visible — we will ask you first, and you may decline without it affecting your service.

Marketing messages

We may contact you by WhatsApp, SMS or email about promotions, reminders and offers. You can tell us to stop at any time by replying to any message, or by contacting us using the details below. We will act on that request and will continue to send only messages necessary for a service you have booked.

Who we share it with

We do not sell your personal data. We share it only where necessary:

• Payment providers who process transactions on our behalf.
• Technology providers who host our systems and store our records.
• Product suppliers where a manufacturer warranty must be registered in your name.
• Authorities, where we are required to disclose by law.

Where your data is stored

Our systems are hosted with service providers whose servers may be located outside Malaysia. Where personal data is transferred abroad, we take reasonable steps to ensure it remains protected to a standard comparable to that required under Malaysian law.

How long we keep it

We keep service and payment records for as long as needed to support your warranty and package entitlements, and to satisfy our legal and accounting obligations. Where data is no longer required for any of these purposes, we take steps to delete it or render it anonymous.

Keeping it secure

We apply reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Access to customer records is limited to staff who need it for their work. No system can be guaranteed completely secure, but in the event of a personal data breach we will act in accordance with our obligations under Malaysian law, including notifying the Personal Data Protection Commissioner and affected individuals where required.

Your rights

Under the Personal Data Protection Act 2010, you have the right to:

• Ask what personal data we hold about you and request a copy.
• Ask us to correct data that is inaccurate, incomplete or out of date.
• Withdraw your consent to our processing, subject to any legal obligation we have to retain records.
• Ask us to stop processing your data for direct marketing.
• Limit how we process your data in certain circumstances.

To exercise any of these, contact us using the details below. We may need to verify your identity before acting on a request.

Cookies and website data

Our website does not set advertising or tracking cookies. See our Cookie Policy for detail on what is and is not used.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised.

Contact us

For any question about this notice or about your personal data: