Data Protection Policy
Last Update: 25th March 2026
1. Introduction
This Data Protection Policy applies to all personal data collected by CleanXpert Sdn Bhd and the MR HELMET app (hereinafter referred to as "MR HELMET", "we", "us", or "our"). MR HELMET is designed to help users manage helmet cleaning packages, monitor usage, track transactions, and access other app-related services efficiently.
We are committed to protecting your privacy ("Personal Data") in accordance with the Malaysia Personal Data Protection Act 2010 ("PDPA") and applicable laws. This policy describes how we collect, use, store, and disclose your personal information.
2. Personal Data We Collect
The app only collects Personal Data with your consent and voluntarily provided information. Examples include:
- Name, NRIC/passport number
- Email, phone number, and address
- Device information (IMEI, IMSI, Bluetooth, Wi-Fi SSID/BSSID)
- Location information (GPS) for tracking helmet cleaning machines
- Profile pictures, photos, audio/video for maintenance logs
- Transaction history
3. User Consent & Permissions
By using MR HELMET, you consent to the following permissions for app functionality:
- Camera: Optional, used only to capture your profile photo.
- Files & Storage: To upload profile photo and store app-related documents.
- Audio & Video: Not required at this time.
- Location: Identify machine locations and enable location-based features.
- Phone: Directly call support or maintenance teams.
- Device IDs (IMEI/IMSI): Ensure proper app functionality and monitoring.
- SSID/BSSID: Ensure seamless connectivity for transactions and usage monitoring.
4. How We Use Your Data
- Verify user identity and secure accounts
- Provide access to helmet cleaning machines and app features
- Track transaction
- Send notifications, reports, and updates
- Handle support requests and maintenance logs
- Prevent fraud and unauthorized access
- Comply with laws and regulatory obligations
5. Sharing & Disclosure
We will take reasonable steps to protect your data. Personal Data may be shared with:
- Internal CleanXpert teams
- Government authorities or enforcement agencies, if required by law
- Service providers assisting in app functionality and maintenance
We will not sell or transfer your data for commercial purposes without your consent. Data collected via machines is used solely for operational improvement and analytics.
6. Data Security
We implement technical, administrative, and physical safeguards to protect your data against unauthorized access, alteration, disclosure, or destruction. However, we cannot fully guarantee security on the internet and urge users to follow best practices for account safety.
7. Retention & Deletion
Your Personal Data is retained as long as your account is active. Inactive accounts for more than three years may be contacted to confirm retention. Deleting your account removes your data, except where retention is required by law.
8. Your Rights
- Access or correct your Personal Data
- Withdraw consent for processing
- Opt-out of promotional communications
9. Governing Law
This Data Protection Policy and your use of the MR HELMET are governed by the laws of Malaysia.