Privacy Policy

Introduction

noctissaws ("we," "our," or "us") is committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you utilize our vehicle rental services.

By engaging with our services, you consent to the data practices described in this policy. If you have questions regarding this policy, please contact us at [email protected].

Data Collection

Personal Information We Collect:

• Full name and identification details (passport or national ID number)
• Contact information (email address, phone number, mailing address)
• Driver's license information and verification details
• Payment information (credit card details, billing address)
• Rental history and vehicle usage records
• Communication records with our team
• Emergency contact information when provided

Automatically Collected Data:

• IP address and device information when accessing our website
• Browser type and version
• Pages visited and time spent on our website
• Referring website addresses
• Vehicle telemetry data for performance rentals (when opted in)

Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to fulfill our rental agreement with you
• Legitimate Interest: Operating and improving our services, fraud prevention, security measures
• Legal Obligation: Compliance with Singapore's tax, insurance, and transport regulations
• Consent: Marketing communications and optional telemetry data collection

How We Use Your Data

Your personal information is used for:

• Processing rental bookings and managing vehicle assignments
• Verifying driver eligibility and license validity
• Processing payments and maintaining financial records
• Communicating about bookings, changes, or service updates
• Providing customer support and resolving inquiries
• Conducting vehicle inspections and damage assessments
• Improving service quality through feedback analysis
• Complying with legal and regulatory requirements
• Sending marketing communications (with your consent)

Data Sharing and Disclosure

We may share your personal data with:

• Insurance Providers: For coverage verification and claims processing
• Payment Processors: Secure transaction processing through PCI DSS compliant gateways
• Vehicle Manufacturers: For warranty claims or technical support when necessary
• Legal Authorities: When required by law or to protect our rights and safety
• Service Providers: Third parties performing functions on our behalf (hosting, analytics, customer support)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Data Retention

We retain your personal data for:

• Rental Records: 7 years from rental completion (tax and legal compliance)
• Payment Information: Duration required by payment card industry standards
• Marketing Consent: Until consent is withdrawn or account closure
• Website Analytics: 26 months from data collection
• Communications: 3 years for service quality and dispute resolution

Data Security

We implement multiple security measures to protect your personal data:

• SSL/TLS encryption for all data transmission
• Secure data storage with access controls and authentication
• Regular security audits and vulnerability assessments
• Staff training on data protection practices
• Incident response procedures for data breaches
• Physical security measures at our office location

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Cookies and Tracking

Our website uses cookies to enhance user experience and analyze site usage. We employ:

• Essential Cookies: Required for website functionality (always active)
• Analytics Cookies: Understanding visitor behavior and improving services
• Preference Cookies: Remembering your settings and choices

For detailed information about cookies, please review our Cookie Policy.

Your Rights Under Singapore PDPA

You have the following rights regarding your personal data:

• Access: Request copies of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal: Withdraw consent for marketing communications at any time
• Data Portability: Request data in a structured, commonly used format
• Objection: Object to processing based on legitimate interests

To exercise these rights, contact us at [email protected]. We will respond within 30 days of verification.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from someone under 18, please contact us immediately for removal.

Third-Party Links

Our website may contain links to external sites not operated by us. We are not responsible for the privacy practices of these third-party sites. We recommend reviewing their privacy policies before providing personal information.

International Data Transfers

Your personal data is primarily processed and stored within Singapore. If international transfers are necessary for service delivery, we ensure appropriate safeguards are in place to protect your data in accordance with Singapore PDPA requirements.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website with a revised date
• Sending email notification for material changes
• Obtaining fresh consent where required by law

Continued use of our services after policy updates constitutes acceptance of the changes.

Contact Information

For privacy-related inquiries, data access requests, or concerns, contact:

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with Singapore's Personal Data Protection Commission (PDPC). Contact details: