Privacy Policy

Lyranova ("we", "our", "us") operates a city-focused car rental service from 51 Jalan Sultan Yahya Petra, 15200 Kota Bharu, Kelantan, Malaysia. This Privacy Policy covers personal data collected through our website at lyranoov.info and through any enquiry or booking process associated with our services.

By submitting an enquiry through our website, you indicate that you have read and understood this policy. If you have questions about how we handle your information, you are welcome to contact us before submitting any details.

This policy is written in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects our commitment to responsible data handling across all service interactions.

We collect only the personal data necessary to respond to your enquiry and, where applicable, to arrange a rental. This includes:

• Contact details — your name, phone number, and email address, as submitted through our enquiry form.
• Enquiry content — the service you are interested in and any message you choose to include.
• Technical data — browser type, IP address, referring page, and general geographic region, collected automatically when you visit our website.
• Cookie data — preferences and session identifiers stored locally in your browser. See Section 5 for details.

We do not collect payment card details through this website. Any payment arrangements are handled directly and separately.

Legal Basis for Processing

We process your personal data on the following grounds:

• Consent — for marketing communications, where you have opted in.
• Legitimate interest — for responding to enquiries and improving our services.
• Contractual necessity — when processing is required to fulfil a rental arrangement you have requested.

Retention Periods

Enquiry records are kept for up to 24 months from the date of submission. Rental arrangement records may be held for up to 7 years as required for business and tax purposes. You may request deletion at any time, subject to applicable legal obligations.

Personal data submitted through our website is used for the following purposes:

• Responding to enquiries — to contact you about the rental service you expressed interest in.
• Service delivery — to manage the booking, handover, and return process when a rental is arranged.
• Website analytics — to understand how visitors use our site and to improve its content and usability.
• Legal compliance — where we are required to retain or disclose information under Malaysian law.

Marketing Communications

We do not send unsolicited marketing emails. If we introduce a mailing list or update notifications in the future, participation will always be optional and you will be able to withdraw at any time by contacting us directly.

Data Sharing

We do not sell or trade personal data. We may share data with third-party service providers who assist in running this website (such as hosting providers or analytics platforms), under strict conditions that limit their use to the purposes we specify. We require all such providers to handle data in a manner consistent with this policy.

We may disclose personal information where required by law or in response to a lawful request from a public authority.

We take reasonable technical and organisational steps to protect personal data from unauthorised access, loss, or disclosure. These measures include:

• HTTPS encryption for all data transmitted through our website.
• Access controls limiting who within our operation can view submitted enquiry data.
• Periodic review of how data is stored and accessed.
• Use of hosting services that maintain physical and network security standards.

While we take appropriate precautions, no method of internet transmission is entirely without risk. If you have concerns about submitting sensitive information online, you are welcome to contact us by phone instead.

Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify affected individuals and, where required, the relevant supervisory authority, in accordance with the Personal Data Protection Act 2010 and any subsequent amendments.

Our website uses cookies to support basic functionality and, where you have given consent, to assist with analytics and service improvement. Cookies are small text files stored by your browser.

We use the following categories of cookies:

• Essential cookies — required for the site to operate. These cannot be disabled without affecting core functionality.
• Analytics cookies — help us understand how visitors navigate our pages so we can make improvements. Only placed with your consent.
• Marketing cookies — used to support advertising measurement. Only placed with your consent.
• Preference cookies — remember choices you have made, such as cookie consent status. Only placed with your consent.

For full details and to manage your preferences, please visit our Cookie Policy.

Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to correction — if your data is inaccurate or incomplete, you may ask us to update it.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time. This does not affect processing that took place before withdrawal.
• Right to limit processing — in certain circumstances, you may ask us to restrict how we use your data.
• Right to erasure — subject to legal retention obligations, you may ask us to delete personal data we hold about you.
• Right to lodge a complaint — if you believe your data has been handled improperly, you may contact the Department of Personal Data Protection Malaysia (JPDP).

To exercise any of the above rights, please contact us using the details in Section 10. We will respond to verified requests within 21 days.

Our website may contain links to third-party services, such as mapping tools or external reference pages. Once you leave our site, this Privacy Policy no longer applies. We are not responsible for the privacy practices of any external website and encourage you to review their policies before providing any personal information.

Our rental services are intended for adults aged 18 and above with a valid driving licence. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted information through our website, please contact us and we will remove the data promptly.

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website after any changes constitutes acceptance of the revised policy. We encourage you to check this page periodically.

For significant changes, we will make reasonable efforts to notify users who have previously contacted us.

If you have questions about this policy, wish to exercise any of your rights, or have concerns about how your data has been handled, please reach out:

For complaints relating to data protection under Malaysian law, you may also contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.