Privacy Policy

1. Introduction

Drivara ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our luxury vehicle rental services in Singapore.

We operate in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and handle all personal data with care and transparency. This policy applies to information collected through our website, mobile applications, and in-person interactions at our office.

2. Information We Collect

2.1 Personal Information You Provide

When you rent a vehicle or inquire about our services, we collect:

• Full name and contact details (phone number, email address, mailing address)
• Singapore driving licence number or international driving permit details
• Passport or NRIC number for identity verification
• Payment information including credit card details (processed securely through our payment processor)
• Emergency contact information
• Rental preferences and special requirements

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• IP address and browser information
• Device type and operating system
• Pages visited and time spent on our website
• Referring website or search engine used
• Cookie data (see our Cookie Policy for details)

2.3 Information from Third Parties

We may receive information from credit verification services, insurance providers, and regulatory authorities as required for vehicle rental operations in Singapore.

3. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: Processing rental bookings, coordinating vehicle delivery and collection, managing rental agreements
• Communication: Responding to inquiries, providing rental updates, sending booking confirmations
• Payment Processing: Handling transactions, managing security deposits, processing refunds when applicable
• Legal Compliance: Meeting regulatory requirements, responding to law enforcement requests when legally obligated
• Service Improvement: Analyzing usage patterns to enhance our offerings and customer experience
• Marketing Communications: Sending promotional materials about our services (with your consent, which can be withdrawn)

4. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to fulfill our rental agreement with you
• Legal Obligation: Compliance with Singapore laws and regulations
• Legitimate Interests: Operating our business effectively while respecting your rights
• Consent: Where you have given explicit permission for specific data uses

5. Data Sharing and Disclosure

We share your personal data with:

• Service Providers: Payment processors, insurance companies, vehicle maintenance contractors who assist in service delivery
• Government Authorities: Law enforcement agencies, traffic authorities, and regulatory bodies when legally required
• Business Partners: Cross-border documentation services for Malaysia travel arrangements
• Professional Advisors: Legal counsel, accountants, and consultants bound by confidentiality obligations

We do not sell your personal data to third parties. All data sharing occurs under appropriate contractual safeguards ensuring proper data protection.

6. Data Retention

We retain your personal data for the following periods:

• Active Rental Records: Duration of rental period plus 7 years (for tax and legal compliance)
• Financial Records: 7 years from transaction date (Singapore tax requirements)
• Marketing Communications: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months from collection date
• CCTV Footage: 30 days unless required for incident investigation

After these periods, we securely delete or anonymize your data unless longer retention is required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage systems with access controls and authentication
• Regular security assessments and vulnerability testing
• Employee training on data protection practices
• Incident response procedures for data breaches
• Physical security at our office location

In the event of a data breach affecting your personal information, we will notify you and the Personal Data Protection Commission (PDPC) as required by Singapore law.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and user behavior
• Improve website functionality and user experience
• Deliver relevant content and advertisements

For detailed information about our cookie practices and how to manage your preferences, please review our Cookie Policy.

9. Your Rights

Under Singapore's PDPA, you have the following rights regarding your personal data:

• Right to Access: Request copies of personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Withdraw Consent: Withdraw consent for marketing communications or optional data processing
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests

To exercise these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

10. International Data Transfers

Your personal data is primarily processed and stored within Singapore. If we transfer data internationally (such as to cloud service providers with overseas servers), we ensure appropriate safeguards are in place through:

• Contractual clauses ensuring adequate data protection
• Verification that recipient countries have comparable privacy laws
• Your explicit consent where required

11. Third-Party Links

Our website may contain links to third-party websites, including payment processors and mapping services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

Our services are intended for individuals 21 years of age and older (Singapore's minimum driving age for rental vehicles). We do not knowingly collect personal data from minors. If we become aware of such collection, we will promptly delete the information.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify active clients via email if changes significantly affect data processing
• Post a notice on our website for 30 days

Continued use of our services after changes become effective constitutes acceptance of the updated policy.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response to your privacy concerns, you may lodge a complaint with Singapore's Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.