What we do with your information
One notice, covering everyone who reaches this site from Malaysia, Singapore or Thailand.
Who this is
C Auto Aesthetics Sdn. Bhd. (Co. No. 202501059788 (1661194-A)), trading as C. Auto Aesthetics, of Nouvelle Industrial Park, 15 Lorong Teknologi B, Kota Damansara, 47810 Petaling Jaya, Selangor, Malaysia, is who this notice is about — the business that collects your information and decides what it is used for.
What we collect
When you build an estimate or send an enquiry: your name, phone number, email if you give one, and details about your car and the work you're asking about.
If you receive or transfer a CAA Passport, the same kind of details — including whoever you're transferring the car's protection record to — are collected the same way.
If you ask Des, the AI assistant in the "Ask Des" bubble, a question, we keep what you typed and what it answered for 30 days after your last message, so the studio can see what you asked if you then message us, and then delete it. It doesn't ask for your name or number, so please don't type anything you'd rather we didn't keep.
Why we collect it
To answer your enquiry, price and arrange the work, and keep the protection and service history attached to your car — the record a CAA Passport and any warranty claim later depend on. Fields marked staff-only on the estimate form are ignored when anyone else submits them.
Cookies and similar technology
This site sets no cookies of its own. It carries no analytics service and no advertising tracker, and loads no fonts, scripts or widgets from anyone else on an ordinary page view — the typeface it is set in is served from this site, not from Google.
The one thing we count is on our link page (cautoaesthetics.my/links, the address in our social profiles): how many times a day it is opened, which of our profiles the link came from, and which buttons are pressed. Those are totals and nothing else — no cookie, no IP address, no device details and nothing that could tell one visitor from another is recorded.
Two things are saved on your own device, both in your browser's local storage and neither of them sent anywhere: your in-progress estimate, so a stray back-swipe doesn't lose it, and your answer to the question below. Clearing your browser data removes both.
There is exactly one thing here that loads from another company — the Google map on the Visit page — and it is the only thing this site asks you about.
Staff sign-in uses a cookie, but it only ever reaches console.cautoaesthetics.my and is never set on this site.
Your choices, and taking them back
The map is off until you say otherwise. Leave it off and the Visit page shows a button instead — press it and the map loads that once, which is also us taking the press as your answer. Turn it on and the map is simply there when you open the page.
You can change this whenever you like, including changing it back. There is no penalty for declining and nothing on this site stops working.
We keep a dated record of what you chose, so we can show what was agreed if we are ever asked. That record holds no name, no email address, no phone number and no IP address — only a reference number, which the panel above shows you. Quote it if you contact us about this.
Marketing
We only send anything beyond a reply to your enquiry if you tick the marketing box on the estimate form — it is off by default. You can withdraw that at any time by telling us on WhatsApp or by phone.
Sharing
We do not sell your information. Besides the AI providers that answer Des's questions, below, two other companies are involved, and only in narrow ways. Cloudflare Turnstile checks that an enquiry was sent by a person rather than a script — it tells us pass or fail and nothing about you. Google Maps draws the map, if you have chosen to load it. Both talk to your browser directly rather than through us, and neither is given your enquiry.
Questions you send to Des are answered by Claude, an AI model run by Anthropic in the United States, or, when Claude is unavailable, by a model run by Cloudflare, which already hosts this site. What you type, with the earlier messages of the same conversation, is sent to them only to be answered. Anthropic processes it on our behalf and does not use it to train its models.
Our staff use Des too, in our back office, to look things up in our own records. To answer them, the records it reads, which can include your name, contact details, car and invoices, are sent to Anthropic in the same way and for that purpose only.
Reviews shown on this site are read from our Google business record by our own server, so your browser is not asked to contact Google to display them.
How long we keep it
As long as it is useful for the purpose it was collected for — chiefly, your car's ongoing protection and warranty history — and as long as the law requires. We don't have a fixed deletion schedule to quote yet; ask and we will tell you what we hold.
Your rights
Wherever you're writing to us from — Malaysia, Singapore or Thailand — you can ask to see what we hold about you, ask us to correct it, and withdraw any consent you've given, including for marketing.
If you're in Thailand, you can also ask us to erase your information or object to how it is used, subject to what we need to keep for warranty and legal reasons.
If you're not satisfied with our answer, you can complain to Malaysia's Personal Data Protection Commissioner, Singapore's Personal Data Protection Commission, or Thailand's Personal Data Protection Committee, whichever applies to you.
How to reach us
WhatsApp or call +60 12-980 1396 for anything in this notice — a request to see or correct what we hold, to withdraw a consent you have given, or a question about any of it. It reaches the studio directly.
Putting it in writing helps: what you are asking for, and which car or enquiry it concerns. That is what lets us find the right record rather than ask you twice.
Changes to this notice
We'll update the date below when this notice changes and post the new version here — nothing changes quietly.
Last updated 24 October 2026. Consent policy version 1 — if what we ask you about changes, this number moves and you will be asked again rather than have an old answer read as covering something new.