Privacy Policy

1. Introduction

orbiturevs ("we," "us," or "our") is committed to protecting the privacy of individuals who use our luxury vehicle rental services in Singapore. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).

By using our services or providing us with your personal data, you consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy.

2. Data Controller

orbiturevs is the data controller responsible for your personal data.

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide

• Contact details: name, email address, phone number, mailing address
• Identification documents: driving license information, passport or NRIC details
• Payment information: credit card details, billing address
• Rental preferences and vehicle selection
• Communication records: inquiries, complaints, feedback

3.2 Automatically Collected Information

• Website usage data: IP address, browser type, device information
• Cookies and similar technologies (see our Cookie Policy)
• Vehicle telemetry data: GPS location, mileage, usage patterns (with consent)

4. Legal Basis and Purpose of Data Processing

We process your personal data based on the following legal grounds:

4.1 Contract Performance

To fulfill our rental agreement with you, including:

• Processing rental bookings and reservations
• Verifying driving credentials and eligibility
• Providing vehicle handover and return services
• Processing payments and managing billing
• Handling insurance claims and damage assessments

4.2 Legitimate Interests

For business operations, including:

• Fleet management and vehicle maintenance scheduling
• Customer service and support communications
• Business analytics and service improvement
• Fraud prevention and security measures

4.3 Consent

Where required by law, with your explicit consent for:

• Marketing communications and promotional offers
• Vehicle telemetry data collection
• Third-party service integrations

4.4 Legal Compliance

To comply with legal obligations under Singapore law, including tax regulations, traffic violations processing, and law enforcement requests.

5. How We Use Your Data

We use your personal data for the following purposes:

• Processing and managing vehicle rental bookings
• Verifying identity and driving credentials
• Communicating about your rental and providing customer support
• Processing payments and managing financial transactions
• Coordinating vehicle collection and return procedures
• Maintaining vehicle and fleet records
• Improving our services and customer experience
• Sending relevant service updates and communications
• Complying with legal and regulatory requirements
• Protecting against fraud and unauthorized activities

6. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

6.1 Service Providers

• Payment processors for transaction handling
• Vehicle maintenance and service centres
• Insurance providers for coverage administration
• IT service providers for system hosting and support

6.2 Legal Requirements

We may disclose your data to:

• Law enforcement agencies when legally required
• Traffic authorities for violation processing
• Courts or regulatory bodies as mandated by law

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to this Privacy Policy.

7. Data Retention

We retain your personal data for the following periods:

• Rental records: 7 years from rental completion (tax compliance)
• Payment information: Duration required by financial regulations
• Marketing consent: Until withdrawn or 3 years of inactivity
• Website analytics: 26 months from collection
• Communication records: 3 years from last interaction

Data is securely deleted or anonymized when no longer required for the purposes stated in this policy.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure servers with restricted access controls
• Regular security assessments and updates
• Staff training on data protection practices
• Incident response procedures for data breaches

While we strive to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but continuously work to maintain robust protection measures.

9. Your Rights Under PDPA

Under Singapore's Personal Data Protection Act, you have the following rights:

9.1 Right to Access

You may request a copy of the personal data we hold about you.

9.2 Right to Correction

You may request correction of inaccurate or incomplete personal data.

9.3 Right to Withdraw Consent

Where processing is based on consent, you may withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

9.4 Right to Data Portability

You may request a copy of your data in a structured, commonly used format.

To exercise these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

10. Cookies and Tracking

Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies before providing any personal data.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

13. International Data Transfers

Your personal data is primarily processed and stored in Singapore. In cases where data is transferred outside Singapore, we ensure adequate safeguards are in place as required by PDPA.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when changes were last made. Continued use of our services after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or to exercise your rights regarding your personal data, contact us:

16. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with Singapore's Personal Data Protection Commission (PDPC):