Privacy Policy

This Privacy Policy explains how UR Genesis Empire (Registration No. 003163357-T), operator of the URTech platform ("URTech", "we", "us"), handles personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA). Our registered address is No. 3, Jalan Autoville 1, Persiaran Multimedia, 63000 Cyberjaya, Selangor, Malaysia.

1. Our Role: Controller vs Processor

URTech serves two kinds of data, with two different roles:

• As a data user (controller) — for the personal data of our Subscribers and their staff (account, contact, billing, and usage data), which we collect to provide and administer the Service.
• As a data processor — for the personal data that a Subscriber (workshop) records about its own end-customers (for example vehicle owners). In that case the Subscriber is the data controller/user and URTech processes that data only on the Subscriber's instructions to operate the Service. Questions about a workshop's handling of its customers' data should be directed to that workshop.

2. Information We Collect

• Subscriber & staff data: name, business name, email, phone, role, and login credentials.
• Billing data: subscription plan, payment method metadata, and transaction records (processed via our payment gateways; we do not store full card numbers).
• Usage data: features used, pages visited, device and app diagnostics, and push-notification tokens.
• Subscriber-entered data (processed on the Subscriber's behalf): end-customer names and contact details, vehicle information, service and work-order records, invoices, and payments.

3. How We Use Information

We use personal data to: provide, maintain, and secure the Service; authenticate users; process subscription payments; send service and account communications; deliver notifications you enable (WhatsApp, email, push); provide support; and improve the platform. We process end-customer data only as needed to deliver the features the Subscriber uses.

4. Data Sharing

We do not sell personal data. We share it only with:

• Payment processors (e.g. Billplz, Stripe) — to process subscription and, where enabled, customer payments;
• Messaging/notification providers (e.g. WhatsApp/Fonnte, push notification services) — to deliver messages you enable;
• Infrastructure and hosting providers — to operate the Service;
• Authorities — where required by Malaysian law or valid legal process.

These providers are permitted to use the data only to perform services for us.

5. Data Storage & Security

Data is transmitted over encrypted connections (TLS) and stored on secured infrastructure. The platform is multi-tenant with logical isolation so that one Subscriber cannot access another Subscriber's data. Access is controlled by role- and branch-based permissions. No method of transmission or storage is completely secure, but we apply industry-standard measures and review them regularly.

6. Cross-Border Transfers

Where a service provider processes data outside Malaysia, we take reasonable steps to ensure it is afforded a comparable level of protection, consistent with the PDPA. [Lawyer review: confirm processor locations and PDPA cross-border basis.]

7. Data Retention

Subscriber account data is retained while the subscription is active. After cancellation, personal data is retained for a limited wind-down period to allow export and to meet legal, tax, and accounting obligations, then deleted or anonymised. Backup copies are purged on a rolling cycle. Where URTech acts as processor, retention of end-customer data follows the Subscriber's instructions and applicable law.

8. Your Rights under the PDPA

Subject to the PDPA, you may request to access or correct your personal data, withdraw consent to non-essential processing, or limit its processing. Subscribers can access and export data through the platform. For end-customer data held by a workshop, please contact that workshop (the controller); we will assist the workshop in responding to such requests.

9. Cookies

Our websites use essential cookies for authentication and sessions, and may use privacy-respecting analytics to understand usage. The mobile application does not use advertising cookies.

10. Children

The Service is intended for businesses and adults. We do not knowingly collect personal data directly from children.

11. Changes

We may update this Policy from time to time. Material changes will be notified through the platform or by email.

12. Contact

UR Genesis Empire (003163357-T)
No. 3, Jalan Autoville 1, Persiaran Multimedia, 63000 Cyberjaya, Selangor, Malaysia
Email: privacy@urtech.my  |  Contact form