Privacy Policy

Last updated: [[DATE]]

FSR Technology Sdn Bhd (Company No. [[SSM_NO]]) ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, how we use it, who we share it with and what rights you have. It is issued in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA").

By using this website or placing an order, you consent to the processing of your personal data as described in this policy.

1. Data We Collect

Information you give us:

  • Name, email address, phone number
  • Billing and delivery address
  • Order and transaction history
  • Account login credentials
  • Product registration details, including vehicle make, model, year and product serial number
  • Correspondence with our support team
  • Marketing preferences

Information collected automatically:

  • IP address, browser type, device type and operating system
  • Pages viewed, referring URLs and time spent on the site
  • Cookies and similar technologies (see Section 7)

Information from our products and software:

  • Product serial numbers, firmware versions and activation records
  • Tuning credit balances and transaction records
  • Where you choose to submit them, diagnostic logs, datalogs and calibration files for support purposes

Payment information:

We do not collect or store your full payment card details. Payments are processed by third-party payment gateways, which handle your card data under their own privacy and security standards. We receive only a transaction reference, the outcome, and limited identifying information such as the last four digits of the card.

2. How We Use Your Data

We process your personal data to:

  1. process and fulfil your orders, including delivery and returns;
  2. verify payment and prevent fraud;
  3. create and manage your account;
  4. register products, activate warranties and validate software licences and credits;
  5. provide technical support and respond to enquiries;
  6. issue invoices, receipts and tax documentation;
  7. send transactional notifications such as order and shipping confirmations;
  8. send marketing communications, where you have consented;
  9. improve our products, website and services, including analysing usage and diagnostic data;
  10. comply with legal, tax and accounting obligations under Malaysian law.

Supplying your personal data for purposes 1 to 7 and 10 is obligatory — we cannot process your order without it. Marketing communications are optional and you may opt out at any time.

3. Legal Basis

We process your data on the basis of your consent, the performance of our contract with you, our legitimate interests in operating and improving our business, and compliance with legal obligations.

4. Disclosure of Your Data

We may disclose your personal data to:

  • Payment gateways and financial institutions — to process payments and refunds;
  • Courier and logistics providers — to deliver your order;
  • E-commerce and hosting providers, including Shopify, which hosts this store;
  • IT, email, analytics and customer support service providers acting on our instructions;
  • Authorised TuneBoss dealers and service centres, where necessary to fulfil a warranty claim or provide local support;
  • Professional advisers, including accountants, auditors and lawyers;
  • Government authorities, regulators or courts, where required by law; and
  • A purchaser or successor in the event of a merger, acquisition or restructuring of our business.

We do not sell or rent your personal data to third parties.

5. International Transfers

Our service providers, including Shopify and certain cloud hosting and email providers, may store or process data on servers outside Malaysia. Where we transfer personal data outside Malaysia, we take reasonable steps to ensure it receives a level of protection consistent with the PDPA.

6. Data Retention

We retain your personal data for as long as necessary for the purposes set out above, including:

  • transaction and accounting records, for the period required by Malaysian tax and company law (currently seven years);
  • product registration and warranty records, for the duration of the warranty and a reasonable period afterwards; and
  • account data, until you ask us to close your account.

We delete or anonymise data that is no longer required.

7. Cookies

We use cookies and similar technologies to operate the store, keep your cart and session working, remember your preferences, measure site performance and, where enabled, support advertising and analytics.

You can control cookies through your browser settings. Disabling cookies may prevent parts of the store, including checkout, from functioning correctly.

8. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including encrypted connections (HTTPS) and restricted internal access. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under the PDPA you have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate, incomplete or out-of-date data;
  • withdraw your consent to our processing of your data;
  • limit the processing of your data for direct marketing purposes; and
  • enquire about disclosures of your data.

To exercise any of these rights, email [[SUPPORT_EMAIL]]. We may need to verify your identity before acting on a request. We will respond within the period required by law. A reasonable fee may apply to data access requests, as permitted under the PDPA.

Withdrawing consent may mean we can no longer process your order, honour a warranty or provide support.

10. Marketing

If you have consented to marketing, you may unsubscribe at any time using the link in any marketing email, or by contacting [[SUPPORT_EMAIL]]. You will continue to receive transactional messages relating to your orders.

11. Children

Our website and products are not directed at persons under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Third-Party Websites

Our website may link to third-party sites, including dealer marketplace listings and social media. This policy does not apply to those sites, and we are not responsible for their privacy practices.

13. Changes to This Policy

We may update this policy from time to time. The revised version will be posted on this page with a new "Last updated" date. Material changes will be notified to you where required by law.

14. Contact and Complaints

For any question, request or complaint about how we handle your personal data:

FSR Technology Sdn Bhd (Company No. [[SSM_NO]])
[[REG_ADDRESS]]
Email: [[SUPPORT_EMAIL]]
Phone: [[SUPPORT_PHONE]]

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner, Malaysia (Jabatan Perlindungan Data Peribadi).