• Home
  • Privacy Policy

Privacy Policy

Effective Date: May 13, 2025
Version : HMY/LC-PP-001

Definitions:
i. “Us”, “our” and/or “we” means Hyundai Motor Malaysia and/or any company, organization, body corporate, and/or entity forming any part of Hyundai Motor Malaysia and shall include our agents, employees, contractors, and sub-contractors;
ii. “PDPA” means Personal Data Protection Act 2010 (Act 709) and any and all subsidiary legislation, regulations, and/or orders made thereunder and as may be supplemented from time to time and any guidelines and/or directives issued by any relevant authority;
iii. “Personal data” has the meaning assigned to it under the PDPA;
iv. “Processing” shall have the meaning assigned to it by the PDPA; and
v. “Products and/or services” means any products, goods, items, services, websites, applications, amenities and/or facilities provided by us

1. Introduction

Your privacy is important to Hyundai Motor Malaysia Sdn Bhd (HMY) and its subsidiaries and affiliates (collectively, “HMY” “we,” “us” or “our”), as is your trust in Hyundai’s products and services.
This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, including any amendments made under the PDPA 2024. We aim to maintain transparency regarding our data handling practices and ensure that your data is processed in a fair and lawful manner.

2. User Consent

By disclosing your personal information to us or using our Site, you understand and agree that Hyundai may collect, transfer, use, and disclose your personal information in accordance with this Privacy Policy. For example, you consent to HMY transfer to and retention of your information to South Korea, Hyundai Motor Company, which may have less protections for your personal information than the jurisdiction where you live. If required by applicable law, we will obtain your consent to our collection, use, transfer and disclosure of your personal information. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY OR OUR TERMS, THEN PLEASE DO NOT DISCLOSE PERSONAL INFORMATION TO US OR USE THE SITE.

3. Personal Data Collected

We collect personal data from you directly or indirectly through various means, including but not limited to:
• Personal information such as name, IC/passport number, address, contact details, email, and other identifying data, collected during vehicle purchases, registrations, or customer interactions.
• Vehicle-related information including registration details, VIN, service records, warranty information, maintenance history, and telematics data related to vehicle performance.
• Financial information for transactions, including payment details, bank account information, credit card details, and transaction history.
• Digital data such as IP addresses, cookies, browsing behavior, device information, location data, interaction logs from digital platforms, and data collected via online forms or apps.
• Communication details gathered through emails, phone calls, recorded customer service interactions, and online chat logs.
• Biometric data, including facial recognition, fingerprint data, CCTV recordings, voice data during interactions with our service centers or digital assistants.
• User account details, login credentials, subscription preferences, purchase history, and interaction records from our websites and mobile applications.
• Usage data collected via telematics systems embedded in vehicles or through connected services.

4. Purpose of Data Collection

HMY uses the information collected above in several different ways. And we may use your information individually or combine it with other information to generate aggregate statistical information. The primary uses of your information include:
• Running our business and providing our products and services: to provide, maintain and improve our products, services, and Site; to authenticate users; to perform technical operations; to communicate with you about our products and services, including vehicles and other products and services; to respond to your requests; to provide technical support; and for other customer service and support purposes.
• Analysing and improving our services and offerings: to better understand how users access and use our products, services, and Site; for research and analytical purposes, such as to evaluate and improve our products, services, Site, and business operations; to develop new features, products, or services; and to otherwise improve our Site and user experiences.
• Personalizing content and experiences: to tailor content we send or display on the Site in order to offer location customization and personalized help and instructions, and to otherwise personalize your experiences; to reach you with more relevant ads and to measure ad campaigns.
• Marketing and promotional purposes: to send you newsletters, offers or other information we think may interest you; to contact you about our products, services, or information we think may interest you; to administer promotions and contests; and to promote other products and services we offer.
• In support of our general business operations: where necessary to the administration of our general business, accounting, record keeping, and legal functions.
• Securing and protecting our rights: to protect our business operations, secure our network and information technology, assets, services, and legal rights; to prevent and detect fraud, unauthorized activities, access and other misconduct; where we believe necessary to investigate, prevent or take action regarding suspected violations of our agreements with you, as well as fraud, illegal activities, and other situations involving potential threats to the rights or safety of any person or third party
• Complying with legal requests and obligations: to comply with the law or legal proceedings. For example, we may use information in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements.
• Anonymous and De-identified Information: we also may de-identify information and create anonymous and aggregated data sets and reports to assess, improve, and develop our business, products, and services; prepare benchmarking reports; and for other research and analytics purposes.

5. Use of Cookies and Tracking Technologies

HMY uses cookies, web beacons, and similar tracking technologies to personalize your experience, analyze website performance, and deliver targeted advertising. Cookies help us remember your preferences and track your navigation on our platforms. You may manage cookie settings via your browser or opt-out through our website preferences page.

6. Disclosure of Personal Data

We disclose personal information to third parties to provide and improve our Site, products, and services; to reach you with more relevant information and offers; to provide you with information about the third party offers you may be interested in; and to honor your consent or authorization. We also disclose personal information to the entities listed and for the purposes set out below:
• Affiliates and Subsidiaries: HMY may share your personal information with HMY subsidiaries and affiliates located in your country or region for operational, analytic, and compliance purposes. For example, if you contact us via the “Contact Us” webform with an inquiry, complaint, suggestion, or compliment, we may communicate the content of your message and your personal information to a HMY subsidiary in the region in order to take action on or respond to your communication.
• Service providers and suppliers: We may disclose personal information to our vendors, service providers, suppliers, contractors, or agents who use such data in order to perform functions on our behalf. These entities are contractually required to use the personal information we disclose exclusively to provide their respective services, and not for their own independent purposes.
• Business transfers: We may disclose and transfer personal information as part of any merger, acquisition, financing, sale of company assets or interests in the company, or in the case of insolvency, bankruptcy, or receivership, including during negotiations related to such business transfers.
• Protecting rights and interests: We may disclose your information to protect or defend the safety, rights, property, or security of HMY, third parties, or the general public, including to protect the Services, to detect, prevent, or otherwise address fraud, security, technical issues, or other activity which we, in our sole discretion, consider to be, or to pose a risk of being, illegal, unethical, or legally actionable activity. We may also use personal information as evidence in litigation in which we are involved, and as necessary to enforce this Privacy Policy, our Terms of Use, and other applicable agreements with you.
• Legal compliance and lawful requests: We may disclose your information in accordance with applicable law to comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, in response to a subpoena, warrant, court order, or other legal process, or to cooperate with investigations or lawful requests, whether formal or informal, from law enforcement or government entities.
• De-identified and Aggregated Data: We may share aggregate or de-identified information with third parties for research, analytics, and other purposes, provided such information does not reasonably identify you.

7. International Data Transfer

As a global organization, the personal information we collect may be transferred internationally throughout Hyundai’s worldwide organization to our headquarters in South Korea. Some of these foreign jurisdictions may not provide the same level of privacy protection as your local jurisdiction. We will take proper measures to protect your personal information at adequate or comparable levels of protection as your local jurisdiction. By providing personal information through your use of the Site or consenting to this Privacy Policy, you consent to such transfers or disclosures of your personal information. We ensure that all international data transfers comply with relevant legal requirements and contractual safeguards to protect your data, particularly in light of new guidelines introduced by the PDPA 2024.

8. Data Protection and Security

HMY employs robust security measures, including data encryption, secure servers, multi-factor authentication, and regular security audits. Our systems are designed to detect and mitigate potential vulnerabilities. Access to personal data is restricted to authorized personnel who have undergone data protection training. We regularly update our data security practices in line with the latest requirements under the PDPA 2024.

9. Data Retention and Deletion

We retain your personal data for as long as necessary to fulfill the purposes outlined or as required by law. Data will be securely archived or anonymized after the retention period. In case of data breaches, HMY will follow prescribed reporting protocols and inform affected individuals where applicable, following the enhanced data breach response standards under the PDPA 2024.

10. Your Rights

You have the right to:
• Access your personal data, receive copies, and verify its accuracy.
• Request corrections or updates to inaccurate or outdated data.
• Withdraw your consent to data processing or marketing communications.
• Request the deletion or restriction of your data where permissible.
• Lodge complaints with the Personal Data Protection Commissioner if your rights are violated.
• Control your data preferences through our online portal.
• Exercise enhanced rights as stipulated under the PDPA 2024.

11. Contact Information

For data access requests, corrections, or complaints, please contact our Data Protection Officer at Z503377@hyundai.com

12. Updates to This Policy

HMY reserves the right to update this Privacy Policy periodically to reflect changes in legal requirements or our data processing practices. Notifications of significant updates will be posted on our official website, and your continued use of our services indicates acceptance of the updated policy.

13. Social Media and Digital Platforms

HMY may engage with you through social media platforms, which may collect personal data through social plugins or shared content. We recommend reviewing your social media privacy settings to understand how your data is shared and used.

14. Notice of Personal Information Security Incident

In the case of an unfortunate personal information security incident, we will, in a timely manner, and in accordance with laws and regulations, inform you of the basic conditions and possible impact of the security incident, the response measures taken or to be taken by us, suggestions for you regarding prevention and risk mitigation, and our remedial measures for you. We will inform you of such information by email, fax, telephone, push notification, etc., and when it is difficult to notify you individually, we will properly and effectively issue a public notice. At the same time, we will also take the initiative to report the handling of personal information security incidents in accordance with regulatory requirements.