Skip to content

Privacy Policy

Version 2026-10

JomCarA (Johor Malaysia Caravan Association) runs this platform. This page explains which personal data we handle, why, and what you can do about it. It follows Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Who is responsible

The Johor Malaysia Caravan Association (JomCarA) is the data user for this platform. JomCarA is the platform that connects members, hosts and guests; it is not a committee's private tool.

Questions about your data: info@jomcara.example.

2. What we collect

  • Account: your name, e-mail address, password (kept only as a one-way hash), preferred language and, if you add them, your phone number and profile picture.
  • Membership: member number, tier, validity dates, renewal requests and payment references, your vehicles (type, plate number, make, model) and your requests to upgrade or to become a host.
  • Hosting: the listings you create (text, pictures, location, prices) and the decisions made about them.
  • Bookings: dates, number of guests, message and price of each booking, and the host's answers.
  • Security records: sign-in events, changes to accounts and settings, and the network (IP) address used, kept in an audit trail.
  • Technical: the cookies listed below. We use no advertising or tracking cookies and we do not sell data.

3. Why we use it

  • To run your account and membership (contract).
  • To let hosts and guests arrange stays: a host sees the name, e-mail address, number of guests and message of a guest who books with them, and the guest sees the host's first name and the initial of the last name.
  • To keep the platform safe and prevent fraud and abuse (legitimate interest), and to meet legal and accounting duties.
  • To send you service e-mails such as booking and renewal messages. We send no marketing e-mail without your consent.

4. Who can see it

  • JomCarA committee members and administrators, only as needed to run the association, check applications and listings, and help members.
  • Hosts see the details of guests who book with them; guests see the host's short name.
  • Visitors see published listings (with the host's short name), news and guides. Anyone who scans a membership card sees only a short name, tier, member number and expiry date.
  • Service providers that help us operate (for example e-mail delivery and hosting), under confidentiality. We do not share your data for advertising, and we give data to authorities only when the law requires it.

5. How long we keep it

  • Account data is kept while your account is open. When you delete your account we remove your name, e-mail address, phone number, picture and vehicles, and anonymise your bookings and renewals.
  • Records we must keep for accounting and security (payment references and the security audit trail) are kept as long as the law and security require, with your name removed wherever the system allows.
  • Backups are overwritten within 35 days.

6. Your rights

Under the PDPA you may ask to see the personal data we hold about you, ask us to correct it, withdraw your consent, and ask us to stop using it.

  • Sign in and open Account > Your data to download a copy of your data or to delete your account.
  • You can correct your name, phone number, picture and language in your profile.
  • For anything else write to info@jomcara.example. We answer within 21 days.

7. Security

We protect your data with encrypted connections (HTTPS), hashed passwords, optional two-factor sign-in (required for the committee), limits on repeated sign-in attempts, encrypted keys and regular backups.

No system is perfectly safe. If a breach affects you, we will tell you and the authorities as the law requires.

8. Cookies

We use only the cookies the site needs to work. They are not used for tracking.

  • .JomCarA.Auth keeps you signed in (until you sign out, or after two hours without activity).
  • .JomCarA.Csrf protects forms against forgery.
  • .JomCarA.Culture remembers your language.
  • Short-lived cookies are used while you sign in with two-factor authentication and to show a message after an action.

Because these cookies are essential there is no cookie banner. Pages with maps load map pictures from OpenStreetMap, which can see your IP address. If you block cookies you can still read the public pages, but you cannot sign in.

9. Children

The platform is for adults. Do not create an account for a child under 18. If one exists, tell us and we will remove it.

10. Changes

We may update this page. The version at the top shows the latest wording; we will e-mail members about important changes.

Terms of Use