WYW2U PRIVACY POLICY & PERSONAL DATA PROTECTION NOTICE

Effective Date: 3 October 2026
Website: wyw2u.com
Business: WYW2U Automated Car Wash

WYW2U (“WYW2U”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy and Personal Data Protection Notice explains how we collect, use, store, disclose and protect personal information when you visit our website, create a customer account, purchase a membership, use our automated car-wash services, or communicate with us.

By using the WYW2U website or services, you acknowledge that you have read and understood this Privacy Policy.

1. WHO WE ARE

WYW2U operates an automated car-wash service and related online membership services.

Our website allows customers to create accounts, purchase memberships, manage their membership information and use WYW2U services.

For privacy-related questions, please contact WYW2U using the contact information provided on our website.

Website: wyw2u.com

2. PERSONAL DATA WE COLLECT

Depending on how you use WYW2U services, we may collect the following information:

Account Information

Full name;
Email address;
Telephone/mobile number;
Username or account information;
Login and authentication information.

Vehicle Information

Vehicle registration/plate number;
Vehicle make or model;
Vehicle colour;
Other vehicle information provided by the customer.

Membership Information

Membership type;
Membership purchase information;
Membership start date;
Membership validity information;
Wash credits;
Wash redemption history;
Customer/member number;
QR-code information associated with your membership.

Transaction Information

Products or memberships purchased;
Purchase date and time;
Transaction amount;
Payment status;
Refund information;
Transaction reference information.

We generally do not need to collect or store your complete credit/debit card number when payment is processed by a third-party payment provider.

Technical Information

When you use our website, we may automatically receive certain technical information, such as:

IP address;
Browser type;
Device type;
Operating system;
Website pages visited;
Login activity;
Website performance information;
Cookies and similar technologies.

3. HOW WE COLLECT YOUR DATA

We may collect personal data when you:

Create a WYW2U account;
Purchase a membership;
Register a vehicle;
Update your account;
Use a QR code;
Redeem a wash;
Contact customer support;
Submit an enquiry;
Subscribe to communications;
Make a payment;
Request a refund;
Use our website;
Participate in promotions or campaigns.

We may also receive certain information from service providers that help us operate our website, payment system, membership system and other services.

4. WHY WE COLLECT YOUR PERSONAL DATA

We may use your personal data to:

Create and manage your WYW2U account;
Process membership purchases;
Process payments;
Activate memberships;
Manage wash credits;
Verify membership ownership;
Generate and manage QR codes;
Identify customers during wash redemption;
Record wash transactions;
Provide customer support;
Communicate with you about your account;
Send membership information;
Send transaction confirmations;
Send important service notifications;
Process refunds;
Detect and prevent fraud or unauthorized use;
Maintain and improve our website;
Maintain security;
Analyze website and service performance;
Manage promotions;
Comply with applicable laws and legal obligations.

5. QR CODES AND MEMBERSHIP INFORMATION

WYW2U may provide customers with a unique QR code associated with their account or membership.

The QR code may be used to identify the relevant membership and/or redeem an eligible car-wash service.

The QR code itself should not be considered a password or security credential.

Customers should not intentionally share their QR code with unauthorized persons.

Information associated with QR-code usage may be recorded for purposes including:

Membership verification;
Wash-credit deduction;
Transaction records;
Fraud prevention;
System security;
Customer support.

6. VEHICLE REGISTRATION INFORMATION

WYW2U may collect vehicle registration numbers and related vehicle information because such information may be necessary to:

Identify the vehicle associated with a membership;
Manage multi-vehicle memberships;
Prevent unauthorized membership use;
Provide customer support;
Maintain accurate membership records.

Vehicle information will be handled in accordance with applicable privacy and data-protection requirements.

7. PAYMENT INFORMATION

Payments may be processed through third-party payment providers.

Depending on the payment method used, payment providers may collect and process payment information necessary to complete the transaction.

WYW2U may receive transaction information such as:

Payment status;
Transaction reference;
Amount paid;
Date and time of payment;
Payment method or provider.

We do not intentionally collect more payment information than is reasonably necessary to process and manage your transaction.

Payment providers may have their own privacy policies and terms.

8. EMAIL COMMUNICATIONS

We may use your email address to send:

Account information;
Membership confirmations;
Payment confirmations;
Membership information;
Digital membership cards where applicable;
Service notifications;
Security notifications;
Customer-service communications;
Important changes to our services or policies.

Where permitted by applicable law, we may also send promotional communications.

You may opt out of non-essential marketing communications where an unsubscribe option is provided.

Please note that transactional or service-related communications may still be sent where necessary to provide the service.

9. COOKIES

WYW2U may use cookies and similar technologies to operate and improve the website.

Cookies may be used for purposes such as:

Keeping customers logged into their accounts;
Maintaining shopping-cart information;
Remembering preferences;
Website security;
Analytics;
Improving website performance;
Understanding website usage.

Some cookies may be provided by third-party services.

You may be able to control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the WYW2U website.

WYW2U may share personal data with trusted third parties where reasonably necessary to operate our business and provide our services.

These may include:

Payment processors;
Website hosting providers;
Website and software providers;
Membership-system providers;
QR-code or technology providers;
Email and communication providers;
IT and security providers;
Professional advisers;
Accounting or auditing providers;
Government authorities or regulators where legally required.

We do not intend to sell your personal data to third parties.

Where third-party service providers process personal data on our behalf, we will take reasonable steps to require appropriate handling and protection of the information.

11. INTERNATIONAL DATA TRANSFERS

Some of our service providers may operate systems or servers outside Malaysia.

Where personal data is transferred outside Malaysia, WYW2U will take reasonable steps to ensure that such transfers are handled in accordance with applicable Malaysian data-protection requirements.

12. DATA SECURITY

WYW2U takes reasonable technical and organizational measures to protect personal data against:

Unauthorized access;
Unauthorized disclosure;
Loss;
Misuse;
Alteration;
Destruction.

Security measures may include access controls, authentication, secure communications, system monitoring and other appropriate technical safeguards.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

13. HOW LONG WE KEEP YOUR DATA

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

Providing services;
Maintaining customer accounts;
Maintaining membership records;
Processing transactions;
Resolving disputes;
Preventing fraud;
Meeting legal, accounting and regulatory requirements.

When personal data is no longer reasonably required, we may delete, anonymize or securely dispose of it, subject to applicable legal requirements.

14. YOUR RIGHTS

Subject to applicable Malaysian law, you may have rights relating to your personal data, including the right to:

Request access to personal data held about you;
Request correction of inaccurate or incomplete personal data;
Withdraw consent where processing is based on consent;
Request information about how your personal data is processed;
Object to certain uses of your personal data where applicable;
Make enquiries or complaints regarding our handling of your personal data.

Certain requests may be subject to legal requirements, verification procedures or reasonable administrative conditions.

15. REQUESTING ACCESS OR CORRECTION

If you would like to request access to or correction of your personal data, please contact WYW2U through the contact details provided on our website.

To protect customer information, we may need to verify your identity before processing a request.

We may also request additional information reasonably necessary to locate the relevant records.

Where processing is based on your consent, you may withdraw your consent by contacting us, subject to applicable legal requirements and reasonable operational limitations.

Withdrawal of consent may affect our ability to provide certain services.

For example, if certain information is necessary to maintain your membership account, we may be unable to continue providing that membership service if the required information is removed.

17. CHILDREN’S DATA

WYW2U services are primarily intended for adults and general consumers.

We do not knowingly seek to collect personal information from children where such collection is not necessary.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us.

18. MARKETING

Where permitted by applicable law, WYW2U may send information about:

Promotions;
Membership offers;
New services;
Special campaigns;
WYW2U updates.

You may opt out of marketing communications where an unsubscribe or equivalent option is provided.

Opting out of marketing communications will not necessarily stop important service-related communications.

19. THIRD-PARTY WEBSITES

The WYW2U website may contain links to third-party websites or services.

Those third parties may have their own privacy policies and terms.

WYW2U is not responsible for the privacy practices of third-party websites that we do not operate.

We recommend reviewing the privacy policy of any third-party service before providing personal information.

20. DATA BREACHES AND SECURITY INCIDENTS

If WYW2U becomes aware of a personal-data security incident that requires notification under applicable law, we will take appropriate steps to investigate, contain and address the incident.

Where legally required, we will notify affected individuals and/or relevant authorities within the applicable requirements.

21. CHANGES TO THIS PRIVACY POLICY

WYW2U may update this Privacy Policy from time to time.

Changes may be made to reflect:

Changes to our services;
Changes to our technology;
Changes to our business operations;
Changes to applicable laws or regulations;
Changes to our privacy practices.

The latest version will be published on the WYW2U website.

The effective date at the beginning of this Privacy Policy indicates when the current version became effective.

22. CONTACT US

If you have questions, requests or concerns about this Privacy Policy or your personal data, please contact WYW2U using the contact details provided on our website.

WYW2U Automated Car Wash