PRIVACY NOTICE
PRIVACY NOTICE Porter Global Technologies Sdn. Bhd. Company Registration No. 202601023287 (1685384-M) Pursuant to the Personal Data Protection Act 2010 (Act 709), Malaysia
Effective Date: 17/07/2026
Language Note : This Notice is provided in English and Bahasa Malaysia. In the event of any inconsistency between the two versions, the English version shall prevail.
Porter Global Technologies Sdn. Bhd. ("Porter", "we", "us", or "our") respects your privacy. This Privacy Notice (herewith, the 'Notice') explains what personal data we collect, why we collect it, how we use it, who we share it with, and your rights under the Personal Data Protection Act 2010 (PDPA). This Notice applies to all persons whose personal data we process in connection with our services in Malaysia, including customers and driver partners
1. Who Are We?
| Legal Name | Porter Global Technologies Sdn. Bhd. |
| Registration No. | 202601023287 (1685384-M) |
| Registered Office | Suite 11.06, 11th Floor, No. 566 Jalan Ipoh, Wilayah Persekutuan, 51200 Kuala Lumpur, Malaysia |
| Website | www.theporter.com.my |
| Nature of Business | On-demand goods transportation services on an aggregator model |
2. What Personal Data We Collect?
The personal data we collect depends on your relationship with us. We collect only what is necessary for the stated purposes.
(a) Customers
- Name
- Mobile number
- Email address
- Pickup address
- Delivery address
- Call recordings
- Chats
- Support interactions
(b) Driver Partners
- Name and identification details
- MyKad or National Registration Identity Card (NRIC) details
- Driving license details
- Vehicle details and vehicle photographs
- GDL license details (where applicable to commercial vehicles)
- Bank account information (for payment purposes)
- Selfie photograph (for identity verification at onboarding)*
- Real-time location data when using the Driver Partner App
- Call recordings
- Chats
- Support interactions
*Where such information constitutes sensitive personal data under the applicable law, Porter obtains explicit consent prior to collection and applies additional safeguards, including but not limited to restricted access, encryption, and retention controls.
(c) App and Website Usage Information
- Device information and model details
- App usage data and session metadata
- Crash reports and error logs
- Cookies and similar tracking technologies
- Push notification preferences
3. How and When We Collect Personal Data?
-
We collect personal data directly from you when you register for an account, place a delivery order, communicate with us, contact customer support, participate in promotions, or otherwise interact with our website or applications.
-
For driver partners, personal data is collected during onboarding, identity verification, vehicle registration, and while using the Driver Partner application.
-
Where consent is required under applicable law, we obtain consent through electronic forms, app-based disclosures, tick-box acknowledgements, and other appropriate mechanisms. Such consent is recorded and maintained for evidentiary and compliance purposes.
-
All personal data requested is to be provided by you on a voluntary basis. However, the personal data we request is necessary for us to provide our products and services to you. If you do not provide the required information, we may not be able to provide you with, or continue to provide, our products and services.
4. Why We Use Your Personal Data?
We process your personal data for the following purposes:
- To create and manage your account on our platform
- To verify your identity and, for driver partners, to verify eligibility to drive
- Providing transportation and delivery services
- To process payments and manage billing
- To track deliveries and trips to progress in real time
- To improve our applications and services
- To detect and prevent fraud and misuse of our platform
- To send service and account related notifications
- To respond to enquiries and customer support requests
- To send promotional and marketing messages, where you have given consent or where permitted by law
- To comply with legal and regulatory obligations applicable in Malaysia
5. Who We Share Your Personal Data With?
We may share your personal data with the following categories of recipients, to the extent necessary for the purposes described in this Notice:
| Category of Recipient | Examples |
|---|---|
| Driver-Partners | To the extent required for performance of services |
| Cloud and infrastructure providers | Firebase, Firestore, Datadog |
| Analytics and behavioral tools | Amplitude, Apxor, Adjust |
| Marketing and engagement platforms | MoEngage, GupShup |
| Messaging and communication services | Sendbird |
| Payment processing providers | Checkout.com and other payment gateways |
| Fraud detection and security partners | Incognia |
| Regulatory authorities, courts, or law enforcement | Where required by applicable law |
| Group entities and affiliated companies | Porter group companies including entities in India |
| Professional advisers | Legal, audit, and compliance service providers |
"We do not sell your personal data to any third party."
6. International Transfers of Personal Data
Your personal data may be transferred to and processed outside Malaysia. This occurs because our group companies, systems, and certain service providers are in other jurisdictions.
Transfers are made to the following destinations:
- India: Our parent company and group technology operations are based in India. Personal data of all categories of data subjects is transferred to India for operational and service delivery purposes.
- Other jurisdictions: Service providers wheresoever they are hosting their servers or have their data centers in place vis-à-vis Firebase, Amplitude, MoEngage, Sendbird, and Datadog operate servers in multiple countries.
We take reasonable and appropriate steps to ensure that your personal data receives an adequate level of protection wherever it is transferred. These steps include entering into data transfer agreements with recipients to impose data protection obligations consistent with the PDPA.
Where consent is required under applicable law for cross-border transfers, such consent will be obtained through appropriate mechanisms. Porter will implement reasonable safeguards to ensure that transferred personal data receives a level of protection consistent with the PDPA.
7. Cookies and Tracking Technologies
We use cookies and similar technologies on our website and applications for the following purposes:
- To keep our website and app functioning properly
- To understand how users interact with our services
- To improve user experience and interface design
- To measure service performance and feature usage
Technologies used: Google Analytics, Firebase Analytics, MoEngage, Amplitude, and Apxor.
You may manage cookie preferences through your browser or device settings. Disabling certain cookies may limit the functionality of our services.
8. Marketing Communications
We may send you updates, offers, and promotional messages by SMS, email, push notifications, or other channels.
You may withdraw your consent to receive marketing communications at any time by:
- Following the opt-out or unsubscribe instructions included in each communication
- Contact us for further clarification using the details in Section 12 of this Notice
Please note that withdrawal of marketing consent does not affect your receipt of service-related or account notifications, which we may continue to send where necessary.
9. Security of Your Personal Data
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures are reviewed and updated periodically in line with industry standards and applicable legal requirements.
In the event of a personal data breach that is likely to result in significant harm, Porter will notify the Personal Data Protection Commissioner and, where required by applicable law, affected data subjects without undue delay, in accordance with the PDPA 2010 and its amendments vide 2024.
10. How Long We Retain Your Personal Data?
We retain personal data only for as long as is necessary to fulfil the purposes described in this Notice, or as required by law. The following factors determine our retention periods:
- The duration of your relationship with us as a customer or driver partner
- Legal, regulatory, and contractual obligations applicable to us in Malaysia
- The resolution of any disputes or enforcement of our rights
In-app chat records (processed via Sendbird) are retained for a period of six months. When personal data is no longer required, it will be securely deleted or anonymized so that it can no longer identify you.
11. Your Rights Under the PDPA
Subject to applicable law and reasonable verification of your identity, you have the following rights in relation to your personal data
| Right | What It Means |
|---|---|
| Right of access to personal data - S. 30 of PDPA, 2010 | You may request a copy of the personal data we hold about you. Any fees applicable to access requests shall be charged in accordance with applicable law. |
| Right to correct personal data - S.34 of PDPA, 2010 | You may request correction of personal data that is inaccurate, incomplete, or misleading. |
| Withdrawal of consent to process personal data - S. 38 of PDPA, 2010 | You may withdraw your consent to the processing of your personal data at any time, subject to legal or contractual limitations. Please note that withdrawal of consent may affect our ability to provide certain services or functionalities. |
| Right to prevent processing likely to cause damage or distress - S.42 of PDPA, 2010 | You may request that we stop or restrict certain processing activities in defined circumstances. |
| Right to prevent processing for purposes of direct marketing - S.43 of PDPA, 2010 | You may opt out of receiving promotional communications at any time. |
| Right to data portability - Section 43A PDPA, 2010, r/w Amendment 2024 | You may request that certain personal data provided by you be transferred to another data controller or provided to you in a structured and commonly used format, subject to technical feasibility and applicable law. |
To exercise any of these rights, please contact us using the details in Section 12. We will endeavor to respond to your request within the timelines prescribed under the applicable law.
12. Contact Us
If you have any questions about this Notice, wish to exercise your rights, or wish to raise a concern about how we handle your personal data, you may reach us at:
| Entity | Porter Global Technologies Sdn. Bhd |
| Registered Address | Suite 11.06, 11th Floor, No. 566 Jalan Ipoh, Wilayah Persekutuan, 51200 Kuala Lumpur, Malaysia |
| privacy@theporter.my |
13. Updates to This Notice
We may update this Notice from time to time to reflect changes in our data practices, our services, or applicable law. The latest version will always be available on our website at www.theporter.com.my. We will notify you of any material changes through appropriate channels, such as in-app notifications or email, before the changes take effect.
Material changes to this Notice will be communicated through appropriate channels before they take effect. Where required by applicable law, Porter will obtain fresh consent for changes that materially affect the manner in which personal data is processed.