Privacy Policy

WMS Technology Solutions is a business registered in Malaysia under the Registration of Businesses Act 1956 (Registration No. 202603216502 (AS0520031-T)). Our registered address is No. 12-A, Jalan Kuini 2, Taman Sri Jarom, 42600 Jenjarom, Selangor, Malaysia.

We provide cloud-based workshop management software for automotive workshops, including job sheets and billing, stock control, payments, appointments, and WhatsApp sharing of invoices and reminders.

Where we decide why and how personal data is used (for example demo requests and our own user accounts), we act as the data user. Where a workshop enters data about its own customers into the Service, the workshop is the data user and we act as its data processor (see section 4).

• Demo and enquiry details: your name, workshop name, phone number, email address, location, preferred date and time, preferred contact method and demo format, and any optional details you choose to give us (such as team size, how you manage jobs today, and notes).
• Account details: for people who use the Service (Owners, Mechanics and Admins): name, login credentials, role, and the workshop the account belongs to. Passwords are stored in hashed form, not as plain text.
• Workshop data: information a workshop enters into the Service, such as job sheets, vehicle details, customer names and contact details, invoices, payments, stock and staff records.
• Technical information: such as IP address, browser and device type, and the date and time of access, which our hosting systems may record for security and troubleshooting.
• Cookies: we use one essential cookie to keep you signed in. See our Cookie Policy for details.

We only collect what we need. Where a field is marked optional, you do not have to provide it.

• to respond to your demo request and arrange a demo or call with you;
• to create and manage accounts, and to provide, support and maintain the Service;
• to communicate with you about your account, your plan or the Service;
• to handle billing and administration, where a paid plan applies;
• to keep the Service secure and to prevent misuse or fraud;
• to improve and develop the Service; and
• to comply with legal and regulatory requirements.

We do not use personal data for purposes unrelated to these, unless you agree or the law allows it.

Workshops using the Service enter personal data about their own customers (for example names, phone numbers, vehicle details and invoices). For that data, the workshop decides how it is used, and we process it only on the workshop’s behalf to provide the Service.

If you are a workshop, you are responsible for making sure you have the right to collect and use your customers’ data, that you have given them any notice the PDPA requires, and that the data you enter is accurate. We do not use your customers’ data for our own marketing.

If you are a customer of a workshop and want to see or correct your data, please contact that workshop directly. You may also contact us, and we will pass your request on.

• Service providers: companies that help us run the Service, such as cloud hosting and database providers. They may only use the data to provide their services to us, and must keep it confidential.
• Authorities and advisers: where the law requires it, to protect our legal rights, or to our professional advisers under a duty of confidentiality.
• Business changes: if our business is sold or reorganised, personal data may be transferred to the new owner, who must continue to protect it.
• WhatsApp: some features open WhatsApp with a ready-written message (for example an invoice link or an appointment reminder). The message is sent by your own staff through WhatsApp and is then subject to WhatsApp’s own terms and privacy policy.

We do not sell personal data.

Our database is hosted in Singapore, and our other service providers may process data in other countries. When personal data is transferred outside Malaysia, we take reasonable steps to make sure it stays protected.

We use reasonable technical and organisational measures to protect personal data, including:

• encrypted (HTTPS) connections to our website and the Service;
• passwords stored in hashed form;
• a sign-in cookie that cannot be read by scripts on the page;
• role-based access, so users only see what their role allows; and
• separation of each workshop’s data from other workshops’ data.

No system is completely secure. If a data breach affects you, we will act on it and notify the people and authorities we are required to notify by law.

We keep personal data only for as long as needed for the purposes in this policy, or as required by law. As a general guide: demo request details are kept for as long as we need to follow up, and for a reasonable period afterwards; account and workshop data are kept while the account is active, and for a reasonable period afterwards so you can ask for an export. After that we delete or anonymise the data, unless the law requires us to keep it.

Under the PDPA you may:

• ask for access to the personal data we hold about you;
• ask us to correct personal data that is inaccurate, incomplete or out of date;
• ask us to limit how we use your personal data; and
• withdraw consent you have given us (this may mean we can no longer provide some of the Service).

To make a request, email info@wmsautotech.com. We may need to confirm your identity first, and the PDPA allows us to charge a reasonable fee for handling access requests. We will respond within the time the law requires.

The Service is for businesses and is not aimed at children. We do not knowingly collect personal data from anyone under 18.

Our website may link to other websites and services (for example WhatsApp or Google Maps). We are not responsible for their privacy practices, so please read their policies.

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If we make important changes, we will make a reasonable effort to let you know.

If you have a question about this policy or how we handle personal data, please contact us: