Privacy Policy

LYFTME Sdn. Bhd. (“LYFTME,” “we,” “our,” or “us”) values your privacy and is committed to safeguarding your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy outlines how we collect, use, share, and protect your information when you use our app, website, or other services (collectively, “Services”). By using LYFTME’s Services, you consent to the practices outlined in this policy.

1. Scope and Applicability

This Privacy Policy applies to:

• All Users of the LYFTME Services, including riders, drivers, and any other users.
• All Personal Data is collected directly from users or indirectly through third-party services.
• LYFTME’s website, app, and related platforms where this policy is displayed.

It governs how LYFTME collects, processes, and protects personal information in compliance with PDPA and any other applicable laws or regulatory requirements in Malaysia. This Privacy Policy provides detailed information to ensure you are fully informed about your rights and choices.

2. Information We Collect

To provide, improve, and secure our Services, LYFTME collects the following categories of information:

2.1 Personal Data

Personal data refers to information that can directly or indirectly identify you. This includes:

• Contact Information: Such as your full name, email address, phone number, and address.
• Identification Information: Such as NRIC or passport number, driver’s license details (for drivers), and student ID or other academic verification details for certain users.
• Financial Information: Bank account details, credit card information, and other payment details collected during transactions.
• Location Data: Real-time GPS location data while using the app, required for location-based services like ride-matching.
• Device Information: IP address, device identifiers (such as IMEI and MAC address), operating system, browser type, and mobile network data.
• User Profile Information: Profile photo, preferences, and settings you choose to share within the app.

2.2 Data from Third-Party Services

LYFTME may collect data from trusted third parties for verification and service enhancement, including:

• Social Media Platforms: Information from social media accounts if you link or log in via platforms such as Facebook or Google.
• Payment Processors: Information required to complete and verify payments.
• Identity Verification Partners: Data for KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance, especially for driver verification and background checks.

2.3 Non-Personal Data

Non-personal data is collected automatically to help us improve our Services, including:

• Usage Data: Click patterns, page visits, in-app interactions, and general engagement metrics.
• Analytics Data: Information collected via cookies, pixels, and analytics tools to measure app and website performance.

3. How We Use Your Information

We process your data to provide a safe, efficient, and customized experience. Specific uses include:

• Account Setup and Identity Verification: To create, authenticate, and manage your account, ensuring secure and legitimate access to LYFTME Services.
• Service Provision: For e-hailing, in-app advertising, car rental, property listings, and item transactions, allowing us to tailor our Services to meet user needs.
• Location-Based Services: To match riders with drivers, track trips in real-time, and support safety features.
• Payment Processing and Financial Records: To manage payments, issue refunds, and generate transaction reports.
• Personalized User Experience: To suggest relevant content, advertising, and recommendations within the app based on your preferences and activity.
• Service Optimization and Improvement: To analyze usage trends, optimize app performance, troubleshoot issues, and improve features.
• Communication with Users: To send notifications, updates, and promotional materials based on consented preferences.
• Legal Compliance and Security: To meet regulatory requirements, protect users, and detect or prevent potential fraudulent activities.

4. Automated Decision-Making and Profiling

LYFTME may use automated systems to:

• Customize Content: Use algorithms to deliver personalized recommendations and content to users.
• Optimize Ads and Promotions: Provide targeted ads based on user preferences and engagement patterns.

5. Sharing and Disclosure of Information

Your information may be shared only under the following conditions:

• Service Providers: With vendors who assist us in providing essential services (e.g., payment processing, IT infrastructure, customer support).
• Business Partners: With select partners for promotions (e.g., other merchants). LYFTME ensures that data is shared securely and only when necessary, allowing users to opt out of promotional data sharing.
• Legal Compliance: When required by law, LYFTME will disclose information to authorities or regulatory bodies for purposes of compliance or legal proceedings.
• Other Users: In e-hailing services, we share essential details (e.g., name, location) between drivers and riders to facilitate and complete trips.

6. Location Data Usage and Permissions

LYFTME collects your GPS data in real-time solely for the purpose of ride-matching, navigation, and user safety.

• Permissions Control: You may adjust location permissions in your device settings, but this may limit app functionality.
• Emergency Situations: In urgent or emergency circumstances, LYFTME may share your location data with authorities to ensure safety or comply with legal obligations.

7. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies for:

• Service Personalization: Tailoring content to your preferences.
• Performance Tracking: Monitoring app and website performance.
• Advertising and Analytics: Allowing advertisers to reach users with relevant offers, and enabling LYFTME to optimize ad campaigns.

Users can control cookie and tracking settings within the app or browser, although certain features may be restricted as a result.

8. Security of Your Information

To protect your data, LYFTME employs a combination of advanced security protocols, including:

• Data Encryption: Encrypting sensitive data in transit and at rest.
• Access Restrictions: Limiting access to personal information to authorized employees or contractors only.
• Regular Security Audits: Conducting routine security checks and audits to identify and address potential vulnerabilities.

LYFTME ensures that only personnel with legitimate business needs can access sensitive data, with all access monitored and logged for compliance.

9. Retention and Data Minimization

We retain personal information as long as necessary to fulfill service-related purposes or as required by law. Key retention practices include

• Data Minimization: Collecting only the data needed to deliver Services effectively.
• Inactive Accounts: For dormant accounts (e.g., no activity for 12 months), LYFTME may delete or anonymize personal data following notice to the user.
• Deletion Upon Account Closure: Upon request, personal data will be deleted unless retention is required for compliance or legal purposes.

10. Your Rights and Choices

Users have rights under PDPA, including:

• Access: The right to access and obtain a copy of your personal data.
• Correction: Request correction of any inaccurate or incomplete information.
• Withdraw Consent: Withdraw consent for specific data uses, such as marketing.
• Data Portability: Request data in a portable format, if technically feasible.
• Right to Erasure: Request deletion of data, subject to any legal retention requirements.

To exercise these rights, please contact our Data Protection Officer at support@lyftme.com.my.

11. Data Storage and International Transfers

Your data may be stored in Malaysia or securely transferred to data centers located abroad. In cases of international transfers, LYFTME ensures that adequate security measures align with PDPA standards.

12. Complaint and Dispute Resolution Process

If you believe your privacy rights have been violated, you may contact our Data Protection Officer for prompt assistance. If the issue remains unresolved, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.

13. Data Breach Notification

In the event of a data breach that may impact your personal data, LYFTME will notify you promptly and provide guidance on protective steps. LYFTME will also notify relevant regulatory authorities as required.

14. Marketing and Promotional Communications

We may send marketing and promotional communications to users who have opted in. You may manage communication preferences within the app or by contacting support@lyftme.com.my.

15. Changes to this Privacy Policy

LYFTME reserves the right to amend this Privacy Policy to reflect changes in our Services or legal requirements. We will notify users of significant changes via the app or website, and all updates will be posted with a new Effective Date.

16. Contact Us

For questions, concerns, or to exercise your data protection rights, contact us at:
Email: support@lyftme.com.my