Identity details
Your name and other identifying details needed to create bookings and verify handovers.
Personal Data Protection Notice
(PDPA 2010 – Malaysia) This Notice is issued pursuant to the Personal Data Protection Act 2010 (PDPA) and explains how BagBuddy collects, uses, stores and discloses personal data when you use our services.
Personal Data Collected
BagBuddy may collect and process personal data necessary to operate bookings, deliver services safely and comply with applicable legal obligations.
Contact information
Phone numbers, email addresses and related contact details used for updates and support.
Booking and transaction history
Trip details, receipts, service choices and booking history linked to your account.
Communication records
Messages, support notes and service-related conversations with BagBuddy or its partners.
IP address & device identifiers
Technical identifiers used for security, fraud prevention and service analytics.
Purpose of Collection
We collect personal data only for purposes connected to service performance, customer safety and lawful operations.
- Service delivery
- Identity verification
- Customer support
- Marketing (with consent)
- Legal compliance
Disclosure
Your data may be shared only where necessary to complete your booking, process payments, comply with law or coordinate operational delivery.
- Verified partners
- Transport providers
- Payment platforms
- Authorities as required by law
Controlled operational disclosure
BagBuddy shares only the information required for the next operational step, such as pickup coordination, identity verification or payment settlement.
Data Retention & Your Rights
Data is retained only as long as necessary for service delivery, legal compliance, dispute handling and legitimate business operations.
Retention limits
Data is retained only for as long as reasonably required and then deleted or anonymised where appropriate.
Access your data
You may request access to personal data that BagBuddy holds about you, subject to applicable legal requirements.
Correct inaccuracies
You may request correction of inaccurate or incomplete personal data maintained in our records.