Privacy Policy

This privacy notice applies to information we collect through thestacom.my, our WhatsApp number, our service counter and the workshop floor. STACOM AUTOWORKS SDN BHD is the data controller. Our registration number with the Suruhanjaya Syarikat Malaysia is 202301089453 (1521478-K).

1. What we collect

We collect only the information needed to quote, perform and follow up on workshop work. In practice, that covers:

• Your name, mobile number and email address.
• Your vehicle's plate number, VIN, mileage and service history.
• Photographs of components we examine during a service, kept in your file.
• Records of work performed, parts fitted and amounts paid.
• Optional: postal address, when a service requires a recovery vehicle pickup.

We do not collect any data we do not need. We do not ask for your IC number.

2. How we use it

Information you share with STACOM Auto Care is used to:

• Reply to quote requests and book a slot in the workshop diary.
• Phone or WhatsApp you with status updates while your car is with us.
• Issue invoices, warranties and tax receipts.
• Keep a service log so we know what was done to the car previously.
• Send a polite reminder when the next service interval is due — only if you have asked for one.

We do not sell, rent or trade personal information to advertisers, lead-gen platforms or insurance brokers.

3. Marketing

We only send service reminders or workshop news to customers who have opted in. Each message includes a clear opt-out instruction. Replying STOP on WhatsApp is enough — we honour it the same working day.

4. Who can see your data

Inside the workshop, your file is accessible to the service advisor handling your booking and the technician assigned to the bay. Our accounts team sees invoices for bookkeeping. We do not share information outside the company except where required by law, court order or to defend a legal claim.

5. How long we keep it

Service records are kept for seven years from the date of the last invoice, in line with Malaysian tax record requirements. WhatsApp threads are retained for 24 months. Quote requests that do not turn into bookings are deleted after six months.

6. Your rights under the PDPA

You may at any time:

• Ask for a copy of the information we hold about you.
• Correct any inaccurate detail in your file.
• Withdraw consent for marketing communications.
• Ask for your personal data to be deleted, unless retention is required by law.

Send your request to [email protected]. We respond within fourteen working days.

7. Security

Customer records live in an access-controlled cloud workspace with two-factor authentication. Paper service cards are kept in a locked cabinet at the workshop. Card payment is handled by our terminal provider, not by us — we never see or store your card number.

8. Changes to this policy

If we change the way we handle personal information in a meaningful way, we will refresh the date at the top of this page and post a short note on the home page for thirty days.

9. Contact

The fastest route is email: [email protected]. Letters can be sent to Lot 14, Jalan Industri 4/2, Taman Perindustrian Puchong, 47100 Puchong, Selangor, Malaysia.