Privacy Policy

1. Introduction

Drovane ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains how we collect, use, store, and protect personal information provided to us through our website and service engagements.

This policy applies to all individuals who contact us, use our website, or engage our route planning and fleet coordination services. Questions about this policy can be directed to [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: Name, email address, phone number, and any information you include in your message
• Service engagements: Delivery stop data, operational details, and contact information relevant to the scope of work
• Website usage: Anonymised analytics data such as pages visited and time on site (via cookies, where consent is given)
• Email correspondence: Any personal data shared directly in communications with us

Legal basis for processing: consent (for contact form submissions and cookies), contractual necessity (for service engagements), and legitimate interest (for responding to enquiries).

We retain personal contact data for up to 24 months from the last interaction. Engagement-related data is retained for up to 36 months for reference purposes, after which it is securely deleted.

3. How We Use Your Data

Personal data collected is used for the following purposes:

• Responding to enquiries and communicating about your routing situation
• Delivering the specific service you have engaged us for
• Sending relevant follow-up information related to your engagement (not unsolicited marketing)
• Improving our website and understanding how visitors use it (analytics only, with consent)
• Complying with legal obligations applicable in Malaysia

We do not sell personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. Data Sharing

We may share limited personal data with trusted service providers who assist in operating our business — for example, email infrastructure providers or analytics platforms. These providers are contractually required to handle data in a manner consistent with this policy.

Delivery stop data shared with us during service engagements is not shared with any third party and is used only for the purposes of the relevant engagement.

We may disclose information if required by law or a competent regulatory authority in Malaysia.

5. Data Protection Measures

We apply the following measures to protect personal data:

• Data in transit is protected via TLS/SSL encryption
• Access to personal data is limited to team members who require it for their role
• Third-party services we use are assessed for security standards before engagement
• In the event of a data breach affecting your personal data, we will notify you within a reasonable timeframe and take steps to contain the incident

6. Cookies

Our website uses cookies to support basic functionality and, where consent is given, to understand how visitors use the site. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies are necessary for the site to function and cannot be disabled.

7. Your Rights Under Malaysian PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding personal data we hold about you:

• Right of access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw consent for processing at any time, where consent is the basis
• Right to cease processing: Request that we stop using your data for direct marketing purposes
• Right to complain: Lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) at pdp.gov.my if you believe your data has been mishandled

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently before submitting personal data.

9. Children's Privacy

Our services are intended for business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe such data has been submitted to us, please contact [email protected] and we will remove it promptly.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in how we operate or in applicable law. When changes are made, the "Last Updated" date at the top of this page will be revised. Continued use of our website or services after an update constitutes acceptance of the revised policy.

11. Contact

Data Controller: Drovane
Address: Level 18, Menara Southpoint, Medan Syed Putra, 59200 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-2202 6815