Key Definitions
To ensure clarity, the following definitions apply to terms used throughout this policy.
- Personal data means any information relating to an identified or identifiable natural person, including names, contact details, vehicle identifiers, and transactional records processed in connection with Juvilume services.
- Processing refers to any operation performed on personal data, such as collection, storage, use, disclosure, deletion, and transfer, whether automated or manual.
- User refers to any individual who interacts with Juvilume services, including customers, prospective customers, website visitors, and persons who submit enquiries or bookings.
- Service means the car wash services, online booking, customer support, communications, and any related offerings provided by Juvilume via xbilume.pro or at our premises.
- Cookies are small text files stored on a device when visiting a website. They enable functions such as session management, analytics, and preference storage. We use cookies to improve site usability and measure performance.
What Data We Collect
We collect personal data necessary to provide and improve our services, process bookings and payments, and maintain effective communication with users. Collection includes data you provide directly and data collected automatically when you use our website or services.
Data You Provide
When you interact with Juvilume, you may provide the following categories of personal data:
- Contact details: full name, email address, postal address, and phone number used for bookings and communications.
- Vehicle details: make, model, registration plate number and any service preferences or vehicle condition notes relevant to the requested car wash.
- Booking and service information: appointment dates and times, package selections, service add-ons, and any special instructions.
- Payment and billing details: payment card information, billing address, transaction records and receipts processed through third-party payment providers.
- Customer communications: messages, feedback, complaints, and survey responses provided by email, phone or through the website.
- Identification and verification data: where required for fraud prevention or regulatory compliance, we may collect identity documents or verification information.
Data Collected Automatically
When you use our website or services, we automatically collect technical and usage information to operate, secure and improve our systems.
- Device and browser information: device type, operating system, browser version and basic device identifiers.
- Log and usage data: IP address, request timestamps, pages visited, referring pages and interaction details needed for diagnostics and analytics.
- Location data: approximate location derived from IP address for analytics and to present relevant service options.
- Cookies and similar technologies: persistent and session cookies used for preferences, authentication, and analytics.
- Performance and error reports: crash logs and telemetry used to identify and fix issues affecting the service.
- Security data: records related to access attempts, authentication events and suspicious activity monitoring.
Data From Third Parties
We may receive personal data about users from trusted third parties to support service delivery and operations.
- Payment processors and billing partners providing transaction confirmations and limited billing data.
- Analytics and hosting providers supplying aggregated usage statistics and performance metrics.
- Customer relationship and communications platforms used to manage support requests and appointment reminders.
Why We Use Personal Data
We process personal data for specific operational, legal and business purposes necessary to run Juvilume services professionally and responsibly.
- To provide and operate car wash services, including scheduling, on-site service delivery and invoicing.
- To process payments, issue receipts and manage billing queries via secure payment partners.
- To communicate with you about bookings, service updates, customer support enquiries and administrative matters.
- To perform analytics and site performance monitoring to improve service quality and user experience.
- To detect and prevent fraud, abuse or other suspicious activity that could harm customers or the business.
- To comply with legal obligations and respond to lawful requests from authorities when required by law.
- To maintain records necessary for accounting, tax and regulatory compliance.
- To send marketing communications where you have provided consent; recipients can opt out at any time.
Legal Bases for Processing
Where applicable, processing is based on one or more of the following legal grounds. This section is provided for transparency and applies when relevant laws require a basis to be identified.
- Performance of a contract: processing necessary to fulfill service agreements or booking commitments you request.
- Consent: for optional communications and marketing, where you have given clear consent to receive such messages.
- Legitimate interests: for business operations such as security, fraud prevention, and service improvement when those interests do not override your rights.
- Legal obligation: processing necessary to comply with statutory or regulatory requirements, including tax and accounting obligations.
Data Subject Rights (where applicable)
Depending on applicable law, individuals may have rights in relation to their personal data. We outline common rights and how to exercise them below.
- Right of access: request confirmation of whether we process your personal data and obtain a copy of that data.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to erasure: request deletion of personal data where legal conditions are met, subject to retention obligations.
- Right to restrict processing: request limitation of processing in certain circumstances.
- Right to data portability: request a machine-readable copy of data you provided in certain situations.
- Right to object: object to processing based on legitimate interests or direct marketing where applicable.
Cookies and Tracking
Juvilume uses cookies and similar technologies on xbilume.pro to support site functionality, analytics and user preferences. We provide clear controls and options for consent where required.
We use session cookies, persistent cookies and first- and third-party analytics cookies. Some cookies are essential for site operation; others are optional and used for performance or marketing.
Categories include essential cookies (session management), performance cookies (analytics and error reporting), functional cookies (preferences) and marketing cookies (advertising and remarketing).
You can manage cookie preferences through your browser settings and on-site consent controls. Disabling certain cookies may affect site functionality and features such as quick booking.
Full cookie details are available in our Cookie Policy on xbilume.pro
Data Sharing and Disclosure
We limit sharing of personal data to partners and providers that help deliver our services, where sharing is necessary and is governed by appropriate safeguards.
- Service providers: trusted vendors who support payments, booking platforms, hosting, analytics and communications.
- Business partners: companies performing functions on our behalf such as vehicle care suppliers or on-site contractors.
- Legal and regulatory authorities: when required to comply with a lawful order or to meet legal obligations.
- Advertising and marketing partners: only with consent for marketing activities and subject to your opt-out choices.
- Acquirers or successors: in the event of a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction under confidentiality terms.
- Security and fraud prevention services: entities engaged to detect, contribute and mitigate fraudulent or malicious activity.
International Transfers
Personal data may be processed in jurisdictions outside your country when our service providers or partners operate internationally. Transfers occur only where appropriate safeguards are implemented or where local law permits.
Safeguards include data processing agreements, standard contractual clauses, vendor security assessments and encryption. We evaluate recipients to ensure adequate protection of personal data.
Data Retention
We retain personal data only as long as necessary for the purposes described and to meet legal, tax and accounting obligations.
Account and customer records are retained for a period consistent with business needs and statutory requirements, typically for several years for accounting and warranty purposes.
Communications, enquiries and support records are kept for a period required to resolve issues and for operational improvement, then archived or deleted in line with retention schedules.
System logs, access records and security-related data are retained for a period necessary to contribute incidents and to comply with internal security practices.
When retention periods expire or upon valid deletion requests where applicable, we securely delete or anonymize personal data unless preservation is required by law.
Security Measures
Juvilume applies technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration and destruction. Security practices are regularly reviewed to align with industry standards and operational needs.
- Access control and role-based restrictions to limit data access to authorized personnel only.
- Encryption of data in transit using TLS and encryption at rest where appropriate for backups and databases.
- Regular security assessments, patch management, logging and incident response procedures to detect and remediate risks.
Your Rights
You have rights regarding your personal data. Where local law applies, these rights may include the following. To exercise rights, please contact us using the details below.
- Access: obtain a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of personal data where legal conditions are met.
- Restriction: request restriction of processing in certain circumstances.
- Objection: object to processing based on legitimate interests or for direct marketing.
- Portability: receive a structured, commonly used and machine-readable copy of data you provided.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time for future processing.
- Lodge a complaint: file a complaint with a supervisory authority if you consider your data protection rights have been violated.
How to Submit Rights Requests
To exercise any rights described above, contact our privacy team by email at [email protected] or send a written request to Juvilume, 1, Jalan Sanyan, 96000 Sibu, Sarawak, Malaysia. Please include your full name, contact details, a description of the request and, where relevant, proof of identity. For urgent matters, you may call our office at +60128117563 for initial guidance. We will assess each request and respond in accordance with applicable law and internal procedures.
[email protected]
We aim to acknowledge requests regarding personal data within 7 business days and to complete routine requests, such as access or correction, within 30 calendar days. Complex requests may require additional time; we will notify you of any extended timeframe and provide reasons for the delay in accordance with applicable Malaysian data protection practice.
Marketing Communications
Juvilume may use your contact details to send service updates, maintenance reminders, and promotional offers related to car care and wash services. Communications are targeted to be relevant to your preferences and service history. Marketing messages will clearly identify Juvilume and include an option to modify your preferences.
You can opt out of marketing messages at any time by following the unsubscribe link in any marketing email, updating preferences in your online account, or by contacting our privacy team at [email protected]. Opting out will not affect transactional communications necessary to provide services you requested.
Children's Privacy
Juvilume does not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn that we have collected such data without authorization, we will take steps to delete it promptly. Parents or guardians who believe their child’s personal information has been collected should contact our privacy team.
Third-Party Links
Our website may include links to third-party sites for payment, vehicle care products, or partner services. Those sites have their own privacy practices, which Juvilume does not control. Review third-party privacy policies before providing personal information. Clicking external links is at your own discretion.
Changes to this Privacy Policy
We review our privacy practices periodically. Material changes to this privacy policy will be posted on xbilume.pro with the effective date updated. For significant changes, we will attempt to notify registered users by email where feasible. Continued use of our services after the effective date constitutes acceptance of the updated policy.