Privacy Notice

Angkut Digital Enterprise (SSM Registration No. 202603226777), trading as Utuh (‘Utuh’, ‘we’, ‘us’ or ‘our’), provides tools that help businesses keep vehicle records, dates, documents, receipts and simple checks in one place.

This Privacy Notice explains how we collect, use, disclose, store and protect personal data. It is intended to apply under Malaysia's Personal Data Protection Act 2010 (‘Malaysia PDPA’) and Singapore's Personal Data Protection Act 2012 (‘Singapore PDPA’), as applicable. The applicable regime is assessed by reference to the account's regional billing arrangement, domain used to access the Service (including a .com.my or .sg domain), and the Customer's corporate residency. Nothing in this Notice reduces a non-excludable right under applicable law.

The data we collect depends on how you interact with us. It may include your name, business name, job title, email address, phone number, fleet size, enquiry or application details, and communications with us.

If you use Utuh, this may also include account and team-member details; driver identity profiles and contact details; vehicle registration or licence-plate numbers; vehicle information; dates and documents relating to road tax, insurance, permits, inspections or maintenance; real-time checklist entries; receipts; physical receipt photos; and information you choose to enter into the Service. We only collect precise location information if a feature clearly asks for it and you choose to use that feature.

When you use our website, we may collect limited technical and usage information, such as device and browser information, pages viewed, approximate location inferred from an IP address, and cookie or similar-technology identifiers. We use this to understand whether the site is working well and how people use it.

We use personal data to reply to you; process an application or request; set up and support an account; provide reminders, records, checklists and other Utuh features; keep the Service safe; diagnose and improve the product; meet legal obligations; and protect our rights and users. We process Customer Data only as needed to provide, secure, support and improve the Service, or as otherwise instructed by the Customer or required by law.

With your permission where required, we may also send product news, useful fleet-management information, or invitations. You can opt out of marketing at any time through the unsubscribe link or by contacting us.

As between Utuh and the Customer, the Customer retains 100% legal ownership of its raw operational logs, vehicle licence-plate numbers, driver identity profiles, real-time checklist entries, physical receipt photos, and other identifiable data uploaded to or generated in the Service (collectively, ‘Customer Data’). The Customer grants Utuh a limited right to host, copy, transmit and process Customer Data solely to provide, secure, support and improve the Service and meet legal obligations.

Utuh retains exclusive, worldwide, royalty-free, perpetual and irrevocable intellectual-property rights in anonymous, de-identified and aggregated statistical metadata, operational trend lines and system analytics generated across the platform (‘Aggregated Data’). Aggregated Data does not identify a Customer, driver or distinct vehicle and is not Customer Data.

Utuh may compile, use, publish, license and monetise Aggregated Data for industry benchmarking reports, commercial analytics products and risk-scoring systems, provided the dataset is stripped of individual corporate identities, personal data and distinct vehicle tracking markers, and is designed so that re-identification is not reasonably possible by legal or technical means.

Utuh does not sell, rent, lease or trade personal data or identifiable company fleet-logistics telemetry to third-party marketing, advertising or data-brokerage networks. We may share Customer Data with carefully selected service providers that help us operate Utuh, including hosting, database and file-storage providers, email or messaging providers, analytics providers, customer-support tools, payment providers and professional advisers. They may only use the data to provide services to us or as required by law.

We may also disclose data where required or permitted by law, to protect people or property, or as part of a business restructuring, sale or investment transaction. We do not permit a recipient to use identifiable Customer Data for its own marketing or advertising purposes.

Utuh uses reasonable organisational and technical safeguards designed to protect Customer Data, including access controls and encrypted connections. Our current platform architecture uses Supabase for database services and Cloudflare R2-compatible storage for files and receipt images. Hosting locations and providers may change as the Service develops; we will maintain appropriate contractual, technical and organisational safeguards for such changes.

Where Customer Data is transferred from Malaysia or Singapore, including to a processor or storage location outside the originating country, Utuh will take reasonable steps to make the transfer in accordance with applicable cross-border-transfer requirements. This includes safeguards intended to provide a comparable level of protection where required, and any necessary assessment, consent or other lawful transfer mechanism. Cross-border hosting is not, by itself, a guarantee of legal compliance; compliance depends on the circumstances of each transfer and the safeguards in place.

We keep personal data only for as long as it is needed for the purposes described above, to meet legal, accounting or reporting requirements, or to resolve a dispute. The right retention period depends on the type of data and our relationship with you. We securely delete or anonymise data when it is no longer needed.

Subject to the PDPA and applicable law, you may ask us to tell you what personal data we hold about you, correct inaccurate or incomplete data, withdraw consent where processing relies on consent, or stop direct-marketing messages. We may need to verify your identity and, in some cases, may be unable to meet a request because of a legal obligation or a legitimate need to retain certain information.

We may update this notice as Utuh develops or the law changes. We will post the current version here and update the date below. Where a change is material, we will take reasonable steps to let affected account holders know.

For a privacy question, request or complaint, email legal@angkut.co with the subject line ‘Privacy’. We will respond as soon as reasonably possible.