This Privacy Policy explains how Lendo.My ("Lendo", "we", "us") collects, uses, discloses and protects your personal data when you use our website and services at lendo.my (the "Platform"). We handle personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By creating an account or using the Platform, you consent to the practices described here. If you do not agree, please do not use the Platform.

1. Who we are

Lendo.My is a peer-to-peer rental marketplace based in Sabah, Malaysia, connecting people who want to borrow tools, equipment and services with people who own them. Our registered contact details are at the end of this policy.

2. Information we collect

• Account information — your name, email address, phone number and password when you register.
• Social sign-in data — if you choose to register or log in with Google or Facebook, we receive your name, email address and a unique provider account identifier from that provider. We do not receive your social media password.
• Identity verification — to raise your verification tier you may submit identification documents and a selfie. These are used solely to verify your identity and reduce fraud.
• Listings and bookings — details of items you list or rent, dates, prices, delivery details and transaction history.
• Payment information — payments are processed by our payment providers (Stripe and Billplz). We do not store your full card numbers or bank credentials; we retain transaction references and payout/deposit records.
• Messages — communications you exchange with other users through the Platform.
• Technical and usage data — IP address, device and browser information, and log data, including cookies and similar technologies used to keep you signed in and to operate the Platform.

3. How we use your information

• To create and manage your account and verify your identity.
• To operate bookings, process payments, hold and release deposits, and pay out earnings.
• To enable communication between renters and owners for a booking.
• To maintain safety, prevent fraud and abuse, and resolve disputes.
• To send service-related notifications (for example booking updates and one-time passcodes) and, where permitted, important account messages.
• To comply with our legal obligations and enforce our Terms of Service.

4. How we share information

We do not sell your personal data. We share it only as needed to provide the service:

• With other users — when you make or accept a booking, the counterparty sees the limited information needed to complete it (such as your display name and the messages you send). We mask full names where possible.
• With payment providers — Stripe and Billplz, to process payments, deposits and payouts.
• With service providers — for example our SMS/OTP provider and email delivery, acting on our instructions.
• For legal reasons — where required by law, regulation, court order, or to protect the rights, safety and property of Lendo, our users or the public.

5. Third-party services

Some features rely on third parties who handle data under their own privacy policies, including Stripe, Billplz, Google and Meta/Facebook. We encourage you to review their policies.

6. Data retention

We keep your personal data for as long as your account is active and as needed to provide the service. We may retain certain records (such as transaction and tax records, and information needed to resolve disputes or comply with the law) for a longer period as required or permitted by Malaysian law.

7. Your rights under the PDPA

Subject to the PDPA, you may request access to and correction of your personal data, withdraw consent to its processing, or limit how we process it. To exercise these rights, or to delete your account and data, contact us at the details below or see our Data Deletion page. Withdrawing consent or deleting your account may mean we can no longer provide some or all of the service.

8. Security

We use reasonable technical and organisational measures to protect your personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your password confidential.

9. Cookies

We use cookies and similar technologies that are necessary to operate the Platform, keep you signed in, and remember your preferences. You can control cookies through your browser settings, though disabling them may affect how the Platform works.

10. Children

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a revised "Last updated" date. Material changes may be notified to you through the Platform.

12. Contact us

If you have questions or requests regarding this policy or your personal data:

Lendo.My
Lorong Api-Api, 88000 Kota Kinabalu, Sabah, Malaysia
Company registration no. 202601099334
Email: hello@lendo.my