Privacy Policy
Last updated: August 2026
CariHero ("we", "us", "our") is committed to protecting your personal data in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA).
1. What we collect
- From businesses: business name, contact phone, category, location, SSM number (if any), service description.
- From users: search queries, optional quote request info (phone + service description).
- Automatically: IP, browser, pages visited (via Plausible analytics, no cookies, no tracking pixels).
2. What we do NOT do
- We never sell your data to third parties.
- We never share your phone number publicly (only via opt-in WhatsApp button).
- We never use tracking cookies or third-party advertising pixels.
3. Your rights (PDPA)
You may request access, correction, or deletion of your data at any time. Email contact@carihero.com.
4. Data retention
We retain business listings until you request removal. Quote request data is auto-deleted after 90 days. Backup data is encrypted at rest in Cloudflare R2.
5. Contact
Data inquiries: contact@carihero.com