Privacy Policy

1. Who we are

AutoDirectMy (“we”, “us”) runs the AutoDirectMy website and app, selling automotive parts and arranging installation, servicing and battery replacement through our partner workshops in Malaysia. We handle your personal data in line with the Personal Data Protection Act 2010 (PDPA).

2. What we collect

• Account details — name, username, email, phone number, password (stored encrypted, never readable by us) and an optional profile photo.
• Orders and payments — what you buy, delivery and billing addresses, and payment status. Card and banking details are handled by our payment provider; we never see or store them.
• Your vehicles and services — plate number, make and model, bookings, workshop job cards, quotations and service history.
• Photos you send — for Snap & Fix, battery requests, or your profile.
• Location — only when you allow it, to show workshops near you. It isn't stored against your account.
• Device and sign-in information — device type, sign-in times and approximate IP address, to keep your account secure.

3. How we use it

• To process orders, deliveries, payments, refunds and warranty claims.
• To book and carry out workshop and battery services, and to ask for your approval of quotations.
• To send you order, service and account notifications.
• To protect your account — for example, alerting you to a new sign-in.
• To improve our products, prices and service.

4. AI features

Snap & Fix, Car Health, Ask for Parts and Explain My Quotation use an artificial-intelligence service to analyse the photo or question you give it, together with relevant details such as your car model and service history. That content is sent to our AI provider (Google or Anthropic) only to produce your answer. Our agreements with these providers do not allow them to use it to train their models. AI answers are suggestions — a workshop confirms the actual fault and price.

5. Who we share it with

• Partner workshops and our battery team — the details needed to carry out the service you booked.
• Delivery companies — your name, phone and address, to deliver your order.
• Payment provider — to take and confirm payment.
• Service providers who host our systems, send email and notifications, or run the AI features — only for those purposes.
• Your employer, if you joined through a company membership — your membership status and use of company credit.
• Authorities, where the law requires it.

We do not sell your personal data.

6. How long we keep it

We keep your account data while your account is open. Orders, invoices, payments and workshop job records are kept for as long as Malaysian tax and accounting law requires, even after an account is deleted — but without your name or contact details.

7. Your choices and rights

• See and correct your details any time in your Profile (website) or Account tab (app).
• Delete your account yourself: Profile → Delete Account on the website, or Account → Delete Account in the app. This removes your personal details, addresses, cart, wishlist and notifications and signs you out everywhere.
• Turn off notifications or location in your phone's settings.
• Ask us for a copy of your data or raise any concern using the contact details below.

8. Cookies and similar storage

The website uses as little as it needs to work. We don't use advertising or tracking cookies, and we don't run analytics that follow you across other sites.

What	Why	How long
Sign-in cookie (PHPSESSID)	Keeps you signed in and your cart and checkout working. Essential — the site can't work without it.	Until you close your browser or sign out
Preferences in your browser's storage	Remembers light or dark mode, the sidebar, a location you pinned to find workshops, and that you've seen the cookie notice. Never sent to us.	Until you clear your browser data
Google Maps	Shows maps on the workshop, contact and home pages. Google may set its own cookies when a map loads — see Google's privacy policy.	Set by Google

You can block or delete cookies in your browser settings, but you won't be able to sign in without the sign-in cookie. The app doesn't use cookies; it keeps your sign-in in your phone's secure storage.

9. Security

Data is sent over encrypted connections, passwords are stored hashed, and access to customer data is limited to staff and partners who need it. No system is perfectly secure; if we learn of a breach affecting you we will tell you.

10. Children

Our services are meant for adults who own or drive a vehicle. We don't knowingly collect data from children under 18.

11. Changes

We may update this policy. The date at the top shows the latest version; important changes will be announced on the site or in the app.

12. Contact us

Questions or requests about your personal data: autodirectmy@gmail.com, our contact page, or write to us at No. 68, Jalan Pelabur A 23/A, 40200, Shah Alam, Selangor.