Privacy policy
Last updated 11 November 2026. This explains what North Borneo Rental Car (“we”) collects when you use northborneorental.com, why, and what you can ask us to do. We follow Malaysia's Personal Data Protection Act 2010 (PDPA).
Who we are
North Borneo Rental Car, D-02-22, Block D, 2nd Floor, Unit 22, Warisan Square, Pusat Bandar Kota Kinabalu, 88000 Kota Kinabalu, Sabah, Malaysia. Email [email protected], phone +60 16-840 0017. Write to us there for any privacy question.
What we collect, and why
Booking requests
When you use a Send on WhatsApp button, the site opens WhatsApp with a message already written: the car, dates, pickup and return place (a pinned place includes its map link), your name if you typed it, a booking reference and your language. You choose whether to send it. We use it to answer you and arrange the rental. When you tap the button, the site also saves the car, pickup type, dates, estimate, name (if given), language and reference on our server, so the team can follow up requests. It does not include your phone number.
What you tell us in WhatsApp and at pickup
To complete a rental we may ask for your name, phone number, IC or passport number, driving licence, flight details, occupation and destination. We use these only to verify you, prepare the rental agreement and run the rental. We keep them while we need them for the rental, accounting and legal reasons.
Anonymous tap counts
The site counts taps on WhatsApp, share and chat buttons: the page, the car, the spot on the page, your language and the time. There are no cookies and no visitor IDs, and the count is not linked to you. We use it to see which pages and cars bring enquiries.
Abuse protection
To stop spam and misuse, we keep your IP address with a timestamp for up to 24 hours when you use features that send requests to our server.
The chat helper (Kuro)
Kuro is an AI assistant. Menu choices and booking steps run in your browser. When you type a question Kuro cannot answer from fixed replies, your last few messages are sent to an AI model on Cloudflare Workers AI to write an answer. We do not store the conversation. Please do not type passport numbers, payment details or other sensitive information into the chat. Kuro can be wrong; the team confirms everything on WhatsApp.
Maps and place search
If you search for a place or pin one on the map, your search text and the map requests go to OpenStreetMap services, which see your IP address under their own policy. The place you choose is added to your booking message.
Cookies and browser storage
We do not use advertising or tracking cookies. The site saves your language choice in your browser (local storage) and a note that Kuro's greeting was shown (session storage). A sign-in cookie is used only on the private admin page for our staff.
Who else handles your data
- Cloudflare hosts the site, delivers it, stores our booking log and runs the AI model. It processes requests, including IP addresses.
- WhatsApp (Meta) carries your messages, under its own terms and privacy policy.
- OpenStreetMap provides place search and map tiles.
These services may process data outside Malaysia. We do not sell your personal data and we do not share it for advertising.
Your rights
Under the PDPA you may ask to see the personal data we hold about you, ask us to correct it, ask us to stop using it or delete it where we are not required to keep it, and withdraw your consent. Email [email protected] and tell us how to find your request (your name and the booking reference if you have one). We may need to check who you are first.
Children
The site is for adults who can rent a car. It is not meant for children under 18.
Changes
If we change what the site collects, we will update this page and its date. Questions? [email protected] or contact us.