Privacy Policy.

1. Who we are

Omnitura Driving Academy Sdn Bhd (Co. Reg 202301047823 (1647823-T)) operates this website (omnitura.bond) and a JPJ-accredited driving institute at G-12 Setia Walk, Pusat Bandar Puchong, 47160 Puchong, Selangor.

2. Information we collect

When you fill in the booking form

• Full name (so we can address you correctly)
• Mobile number (for WhatsApp / phone follow-up)
• Email address (for written quotations and contracts)
• Program of interest and preferred schedule
• The message you type to us

When you become a learner

• Your NRIC / passport for JPJ submission
• Your address, emergency contact, and any medical conditions that may affect driving (e.g. epilepsy, severe visual impairment)
• Payment records for tax compliance

When you browse the website

• Standard server logs (IP, browser type, pages visited) retained for 30 days
• Only if you accept cookies: anonymised analytics on page popularity

3. Why we collect it

• To respond to your booking enquiry within four working hours
• To submit JPJ paperwork on your behalf (NRIC, photo)
• To send lesson reminders, progress reports and invoices
• To comply with Malaysian tax record-keeping requirements
• To improve the website based on which pages people actually use

4. How long we keep it

• Booking enquiries that didn’t convert: Deleted after 12 months.
• Active learner records: Retained while you’re a learner plus 7 years after (Malaysian tax law).
• JPJ-required documents: Retained per JPJ regulations (typically 5 years).
• Server logs: 30 days, then anonymised aggregates only.
• Analytics cookies (if accepted): 13 months maximum.

5. Who we share it with

We share personal data only with parties strictly necessary for delivering the lesson service:

• JPJ (Jabatan Pengangkutan Jalan): For licence applications, KPP test bookings and road test scheduling.
• PUSPAKOM: For vehicle compliance and conversion-related driver verification.
• Court-certified translators: For foreign licence conversion documents (with your written consent).
• Our accountant: For tax compliance only — identifying details redacted where not strictly required.

We do not sell, rent or trade your data to anyone for any purpose.

6. Your rights under PDPA 2010

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to fix anything inaccurate.
• Withdrawal of consent: Tell us to stop processing your data for marketing purposes at any time.
• Erasure: Request deletion (subject to legal retention requirements).
• Complaint: Escalate to the Personal Data Protection Commissioner of Malaysia (pdp.gov.my) if you believe we’ve mishandled your data.

7. Security measures

Our website runs on HTTPS with TLS 1.3. Form submissions are CSRF-protected. The learner database is restricted to authorised office staff and encrypted at rest. Physical records are kept in a locked cabinet at the Setia Walk studio. Office computers run up-to-date antivirus and require multi-factor authentication.

8. Cookies

We use cookies only with your explicit consent. The first time you visit this site, a banner asks whether you accept analytics and marketing cookies. You can change your choice anytime via the “Cookie preferences” link in the footer. See our cookie policy for the full list.

9. Children

Driving lessons are restricted to learners aged 16 or above (Malaysian L licence minimum). We do not knowingly collect personal data from children under 16. If you believe we have collected such data inadvertently, contact us and we will delete it immediately.

10. Contact us about privacy

11. Updates to this policy

We may update this policy from time to time. Material changes (e.g. expanded data collection) will be announced via email to active learners and a banner on this site for at least 14 days. The “Last updated” date at the top will always reflect the most recent revision.