1. Introduction

This Privacy Policy explains how SP Mobility Data Sdn. Bhd. ("PartsIDHub", "we", "our" or "us") collects, uses, discloses, stores and otherwise processes personal data when you access our website, platform, applications, APIs and related services.

This Privacy Policy applies to personal data processed in accordance with applicable data protection laws, including the Malaysian Personal Data Protection Act 2010 ("PDPA") and, where applicable, the European Union General Data Protection Regulation ("GDPR").

2. Data Controller

Email: contact@partsidhub.com

3. Personal Data We Collect

Depending on your interaction with PartsIDHub, we may collect:

• Name
• Business email address
• Telephone number
• Company name
• Job title
• Business address
• User account information
• Authentication and login records
• IP address
• Browser, device and operating system information
• API usage logs
• Customer support communications
• Billing and subscription information
• Any information voluntarily provided to us

We do not intentionally collect sensitive personal data unless required for a legitimate business purpose, required by law or voluntarily provided by you.

4. How We Use Personal Data

We may process personal data to:

• Provide, operate and maintain the Services
• Authenticate users and manage accounts
• Deliver subscriptions and enterprise services
• Process payments and invoices
• Provide customer support
• Improve, secure and monitor the Platform
• Detect, investigate and prevent fraud or security incidents
• Communicate service announcements, product updates and administrative notices
• Comply with legal and regulatory obligations
• Enforce our contractual and legal rights

5. Legal Basis

Where the GDPR applies, personal data is processed on one or more of the following legal bases:

• Performance of a contract
• Compliance with legal obligations
• Legitimate interests
• Consent, where required

Where the PDPA applies, personal data is processed in accordance with the requirements of the PDPA and any applicable regulations.

6. Disclosure of Personal Data

We may disclose personal data to:

• Cloud hosting and infrastructure providers
• Technology and IT service providers
• Payment providers
• Professional advisers
• Auditors
• Regulatory authorities or government agencies where required by law
• Other parties where disclosure is authorised or legally permitted

We do not sell personal data.

7. International Transfers

Personal data may be processed or stored in Malaysia, Singapore, the European Union or other jurisdictions where our infrastructure, affiliates or authorised service providers operate.

Where required by applicable law, appropriate contractual, technical or organisational safeguards will be implemented.

8. Data Retention

Personal data is retained only for as long as reasonably necessary to:

• Provide the Services
• Fulfil contractual obligations
• Comply with legal or regulatory requirements
• Resolve disputes
• Enforce our agreements
• Protect our legitimate business interests

9. Security

Reasonable administrative, technical and organisational measures are implemented to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

No method of electronic transmission or storage can be guaranteed to be completely secure.

10. Cookies

PartsIDHub may use cookies and similar technologies for:

• Authentication
• Security
• Website functionality
• Analytics
• User preferences

Browser settings may be configured to restrict or disable cookies. Certain functionality may be affected.

11. Your Privacy Rights

Depending on the applicable law governing the processing of your personal data, including the PDPA and, where applicable, the GDPR, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete personal data
• Withdraw consent where processing is based on consent
• Request deletion where permitted by law
• Request restriction of processing where applicable
• Object to certain processing activities where permitted by law

12. Malaysian Personal Data Protection Act 2010 (PDPA)

The processing of personal data by SP Mobility Data Sdn. Bhd. is subject to the Malaysian Personal Data Protection Act 2010 ("PDPA"), where applicable.

Subject to the PDPA and any applicable legal restrictions, individuals may request to:

• Access personal data held by PartsIDHub
• Correct inaccurate, incomplete or outdated personal data
• Withdraw consent where processing is based on consent
• Limit or object to the processing of personal data where permitted by law
• Request further information regarding the processing of their personal data

PartsIDHub may require reasonable verification of identity before processing a request and may refuse or limit a request where permitted by the PDPA or other applicable laws.

13. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time.

The latest version will always be published on the PartsIDHub website together with the effective date.

14. Contact

Email: contact@partsidhub.com

© 2026 SP Mobility Data Sdn. Bhd. All Rights Reserved.