Privacy Policy

Introduction

Veloux is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and safeguard information you provide when using our automotive rental services in Singapore.

We operate in compliance with Singapore's Personal Data Protection Act 2012 (PDPA) and maintain rigorous data protection standards across all operational aspects.

Data Collection

Information We Collect

When you engage our services, we collect the following categories of personal data:

• Contact information including name, email address, telephone number, and mailing address
• Identity verification data such as NRIC/passport number and driving license details
• Payment information including credit card details processed through secure payment gateways
• Rental history and vehicle usage records
• Communication records including email correspondence and phone call notes
• Technical data such as IP address, browser type, and device information when visiting our website

How We Collect Data

We gather information through:

• Direct interactions during booking, rental agreements, and service delivery
• Website forms and online reservation systems
• Telephone conversations and email communications
• Third-party verification services for license validation
• Automated technologies including cookies on our website

Legal Basis for Processing

We process your data based on:

• Contractual necessity to fulfill rental agreements and provide services
• Legitimate business interests in service improvement and operational efficiency
• Legal obligations under Singapore law and regulatory requirements
• Your explicit consent where required for specific processing activities

Data Usage

Your personal information serves the following purposes:

• Processing rental reservations and managing vehicle handovers
• Verifying driver qualifications and maintaining insurance compliance
• Processing payments and managing financial transactions
• Communicating about bookings, service updates, and rental details
• Improving service quality through customer feedback analysis
• Maintaining business records and fulfilling legal obligations
• Sending service-related information and, with consent, promotional materials
• Detecting and preventing fraud or unauthorized vehicle use

Marketing Communications

We will only send marketing materials if you have provided explicit consent. You may withdraw this consent at any time by contacting us at [email protected] or using the unsubscribe link in our communications.

Data Sharing and Disclosure

We may share your information with:

• Insurance providers for coverage verification and claims processing
• Payment processors for secure transaction handling
• Vehicle maintenance and service partners when necessary for service delivery
• Legal authorities when required by Singapore law or court order
• Professional advisors including lawyers and accountants bound by confidentiality

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. All data sharing arrangements include confidentiality and data protection obligations.

Data Protection Measures

We implement comprehensive security measures including:

• Encryption of data during transmission using TLS/SSL protocols
• Secure storage systems with access controls and authentication
• Regular security assessments and vulnerability testing
• Staff training on data protection and confidentiality requirements
• Physical security measures at our facility
• Incident response procedures for data breaches

In the event of a data breach affecting your personal information, we will notify you and the Personal Data Protection Commission as required by Singapore law.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy and comply with legal obligations. Specific retention periods include:

• Rental records: Seven years from rental completion for tax and legal compliance
• Financial transaction data: Seven years as required by Singapore accounting regulations
• Insurance documentation: Period specified by insurance requirements
• Marketing consent records: Until consent is withdrawn or three years of inactivity
• Website analytics data: Twenty-six months from collection

After the retention period expires, we securely delete or anonymize your data.

Cookies and Website Tracking

Our website uses cookies and similar technologies to enhance user experience and analyze site usage. Cookie categories include:

• Essential cookies necessary for website functionality
• Analytics cookies to understand site usage patterns
• Preference cookies to remember your settings

You can manage cookie preferences through our Cookie Policy page. Most browsers allow cookie control through settings, though disabling cookies may affect website functionality.

Your Rights

Under Singapore's Personal Data Protection Act, you have the right to:

• Access your personal data we hold and receive a copy
• Correct inaccurate or incomplete personal information
• Request deletion of your data where legally permissible
• Object to processing based on legitimate interests
• Withdraw consent for marketing communications
• Request data portability for information you provided
• Lodge a complaint with the Personal Data Protection Commission

To exercise these rights, contact us at [email protected]. We will respond within 30 days and may require identity verification to protect your information.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately for deletion.

International Data Transfers

Your data is primarily stored and processed within Singapore. Should we need to transfer data internationally for legitimate business purposes, we will ensure appropriate safeguards are in place through standard contractual clauses or other legally recognized mechanisms.

Policy Updates

We may update this privacy policy to reflect operational changes or legal requirements. Material changes will be communicated via email to registered users or through prominent website notice. The revised policy takes effect upon posting with the updated "Last Updated" date.

We encourage periodic review of this policy to stay informed about our data protection practices.

Contact Information

For privacy-related inquiries, data access requests, or concerns:

We are committed to addressing your concerns promptly and transparently.