Privacy Policy & Personal Data Protection

EVDriveHub Car Rental Co., Ltd. places great importance on the protection of your personal data regarding the collection, use, and disclosure of your personal data as a user of our vehicle and driver booking or rental services through the company's service channels, such as website, application, or the company's social media. Therefore, the company has formulated this policy to inform you about the use of your personal data to conduct business transactions with you in accordance with the law, including to improve the content of the company's website and application.

1. Personal Data Collected

The company will collect your personal data as follows:

1.1 User Account Registration Data

(1) General personal data and contact information, such as name and surname, phone number, email address

(2) Social media account data used for registration (if any), such as Facebook, Google, or LINE account, profile picture, etc.

(3) Account information, including account name, account data, username, password, email, profile picture, updated account data

(4) Any other information you have provided to the company (if any)

1.2 Personal Data for Service Use

(1) Identity verification data for you or other persons for whom you rent a vehicle or driver, such as copies of ID card/passport, driving license, travel/accommodation evidence, insurance claim

(2) Representative, coordinator, parent, or guardian data, such as name-surname, phone number, or other contact information, signature

(3) Social media for contact, such as LINE, Facebook, Instagram Account, or Email Account

(4) Vehicle and driver rental details and history, such as rental details, vehicle data, accessory data, rental history, rental time, vehicle provider, etc.

1.3 Financial Personal Data

Data, evidence, and details regarding payment of fees or service charges, payment history, payment evidence, as well as bank account and credit/debit card information, such as bank account number, card type, credit/debit card number, bank name, email linked to credit/debit card, CVV number, etc.

1.4 Technical Personal Data

Usage data and device information used to access and use the company's platform services, such as device identifier, IP address, device ID, device type, connection data, browser type, login/logout logs, computer traffic data (Log), referring website data, geographic location data, etc.

1.5 Complaint/Dispute Data

Data for complaint and dispute management, such as audit data, investigation of fraudulent behavior or violations of law, regulations, and company rules or contracts between you and the company, consideration and penalty data, litigation, and the company's legal rights exercise, including report data when reports are submitted to relevant regulatory agencies or authorities with legal authority.

1.6 Personal Data of Minors

The company does not target its services to minors. However, in some cases the company may need to process personal data of such persons occasionally if they use the company's services, in which case the company will comply with personal data protection laws related to the processing of personal data of minors.

1.7 Data Not Intended for Collection

In general, the company does not intend to collect, use, or disclose (1) nationality, (2) religion, and (3) blood type appearing on copies of your ID card/passport for any specific purpose. If you have provided the company with a copy of your ID card/passport, please cover such information before handing it to the company, and if you have not covered such information, it shall be deemed that you have authorized the company to cover such information, and the document with such information covered shall be considered complete and legally enforceable in all respects. Other personal data includes:

(1) Communication data, opinions/suggestions, and participation in company activities, such as inquiry data through company channels, company activity participation history, etc.

(2) Management of advertising and public relations media in which you or your personal data appear as part of the company's advertising or public relations materials (if any)

(3) Images and sounds recorded through CCTV, photographs, video recordings, and audio recordings of conversations (if any)

2. Methods of Collecting Personal Data

The company collects your personal data by the following methods:

2.1 Direct Collection from You

You may provide your personal data directly to the company through the registration and service use process through website, application, or other service channels, contacting the company, inquiring, filling in forms, complaints, participating in activities, surveys, or providing feedback to the company, either in electronic or paper form.

2.2 Automatic Collection

The company may collect certain technical information about the device you use, operating system, activity data, usage patterns, browsing history, or other technical data through the use of cookies or similar technology. You can check more details about the company's cookie policy on the company's website.

2.3 Collection from Third Parties

Additionally, the company may collect your personal data from other sources or third parties, including:

(1) Vehicle rental providers

(2) Your father, mother, or guardian (if you are under 20 years of age)

(3) Your social media service providers, such as Facebook, Email, LINE, Google, etc.

(4) Your representative, coordinator, or any other person for whom you rent a vehicle or driver for the benefit of that person

3. Purposes of Using Personal Data

1. Service Administration for Users

The company's procedures to provide vehicle and driver rental services to you, including user account registration, coordination, communication, vehicle reservation, and other operations according to the company's procedures to provide services to you under the service agreement or terms of service between you and the company, including other agreements related to such service agreements, such as damage guarantee agreements, etc.

2. Financial Administration

The company's procedures for financial management, including:

(1) Payment management for services, fees, and vehicle or driver rental, such as maintaining payment history, issuing receipts, etc.

(2) Tax and tax evidence management

3. Organizational Risk Management

Operations to manage and control company risks, covering but not limited to business, product/service, and liquidity risks.

4. Information and News Dissemination

Informing or presenting news to you about products, services, advertising, promotions, important events, or other company activities, including invitations to events, activities, or other company projects through channels you agree to allow, such as email, SMS, etc.

5. Personalized Marketing

Analysis and processing of your data to create and present advertisements, offers, or promotional items in the form of personalized marketing, which includes linking habits with your behavior, preferences, and thoughts.

6. Product and Service Development and Improvement

Operations for product and service development and improvement, including user satisfaction surveys, research, data analysis, testing, and other operations for such purposes.

7. Advertising and Public Relations Management

Management and operations in advertising and public relations about the company, or company products, services, or activities, which include your appearance or personal data appearing as part of advertising or public relations materials.

8. Complaint, Dispute, and Litigation Management

Operations to investigate and manage complaints, disputes, and litigation, including operations for establishing legal claims, compliance with or exercise of legal claims, or raising defenses, various litigation, as well as operations to enforce the company's legal judgments.

9. Security Maintenance

Operations to assess safety risks and maintain the security of information systems, data, and your and the company's assets, including: (1) inspection, testing, and operations to develop security standards, (2) detection and prevention of unauthorized access, (3) recording images and sounds through CCTV, photographs, video and audio recordings, conversation recordings, recording and controlling building access.

10. Compliance with Legal Obligations or Government Orders

Operations to comply with laws, rules, regulations, or procedures of government agencies or regulatory agencies regarding business operations, including but not limited to tax laws, computer crime laws, and personal data protection laws, or orders from government agencies, including compliance with judicial proceedings and law enforcement.

11. Hazard Prevention

Operations in good faith that the collection, use, or disclosure of personal data is necessary to prevent or suppress danger to life, body, or health of you or other persons, in cases where you cannot give consent to disclose information at that time and there is no other way to prevent or suppress such danger.

4. Security of Personal Data

We protect your personal data. Any personal data we receive will be protected and handled according to procedures we believe are appropriate to ensure that your personal data can only be accessed by those we designate. All company employees must strictly adhere to the company's security guidelines, and the use of such personal data must be in accordance with the purposes of data use.

5. Retention Period of Personal Data

The company will retain your personal data for only 10 years to fulfill the purposes of data use and compliance with laws or orders from any authorized agency. The company will arrange for the deletion or destruction of your personal data after such period or when your personal data is no longer necessary for the purposes of data use, unless it is a case where the company must retain personal data to enforce legal rights or contracts as deemed appropriate by the company.

6. Disclosure of Personal Data

The company may disclose your personal data to outside parties within the scope of the purposes of data use. Outside parties to whom the company may disclose your personal data are:

6.1 Company Personnel

The company may disclose your personal data to directors, executives, and company employees who are responsible for personal data management under the purposes of data use according to this policy. The company will limit access to only those with the right to access and disclose to such persons only as necessary on a need-to-know basis.

6.2 External Service Providers

The company may use external service providers necessary for the management and operations of the company according to the purposes of data use, such as data management service providers, cloud service providers for data backup and storage, complaint management service providers, customer contact service providers (Call Center), IT system service providers, email service providers, financial and payment service providers, etc., including professional consultants such as legal advisors, auditors, lawyers, etc.

6.3 Government Agencies, Regulatory Agencies, and Other Agencies Specified by Law

The company may disclose your personal data to government agencies, regulatory agencies, or other agencies specified by law, including their officials, to comply with laws, rules, regulations, or procedures of relevant agencies, including compliance with judicial proceedings and law enforcement.

6.4 Other External Parties

The company may disclose your personal data to other external parties, such as representatives, coordinators, your father, mother, or guardian (if you are under 20 years old or you did not rent the vehicle/driver yourself), or any other person for whom you rent a vehicle/driver for the benefit of that person, etc. Such disclosure will remain under the company's personal data protection principles.

7. Rights of Data Subjects

You have the right to request that the company take action regarding your personal data as follows:

7.1 Right of Access

The right to request access to or obtain copies of your personal data under the company's responsibility, including requesting the company to disclose the acquisition of such personal data to which you have not given consent.

7.2 Right to Rectification

The right to request verification, amendment, update, or correction of your personal data to be accurate, complete, and current, without causing misunderstanding.

7.3 Right to Object

The right to object to the collection, use, or disclosure of your personal data at any time, in the following cases:

(1) Where the company collects personal data based on the company's or third party's legitimate interest, or for public interest in data processing, unless the company can demonstrate compelling legitimate grounds overriding those interests, or the processing is necessary for the establishment, exercise, or defense of legal claims

(2) Processing for direct marketing purposes

(3) Processing for scientific, historical, or statistical research purposes, unless necessary for the performance of a task carried out in the public interest by the company

7.4 Right to Data Portability

Under personal data protection law, you have the right to request your personal data in a format that can be read or used in general by automatic tools or devices, including the right to request that such personal data be sent or transferred to other personal data controllers or yourself, unless technically impossible.

7.5 Right to Withdraw Consent

In cases where the company relies on your consent as the legal basis for collecting, using, or disclosing personal data, you have the right to withdraw consent for such data processing that you have given to the company at any time during the period the company stores such data, unless there are restrictions on the right to withdraw consent by law or contracts benefiting you. However, such withdrawal of consent shall not affect the collection, use, or disclosure of personal data to which consent has already been given.

7.6 Right to Erasure

The right to request the company to delete or render your personal data unidentifiable in the following cases:

(1) Your personal data is no longer necessary for the purposes of data use

(2) You withdraw consent that was the basis for processing, and the company no longer has legal authority or basis to process such data

(3) You have objected to the processing under clause 7.3

(4) When your personal data has been collected, used, or disclosed unlawfully

The cases specified above shall not apply to the processing of personal data necessary for the purpose of exercising freedom of expression, for compiling historical documents or statistics, for the performance of a task carried out in the public interest, for compliance with the law to achieve objectives relating to preventive medicine or occupational medicine, or public interest in public health, for the purpose of establishing, complying with, or exercising legal claims, or raising legal claims, or for compliance with law.

7.7 Right to Restriction of Processing

The right to request suspension of processing of your personal data in the following cases:

(1) The company is in the process of verifying the accuracy of personal data as requested by you

(2) In cases where personal data is subject to deletion or de-identification under clause 7.6, but you request suspension of use instead

(3) The company no longer needs to use your personal data, but you need and request the company to retain such personal data for use in establishing legal claims, compliance with or exercise of legal claims, or raising legal claims

(4) The company is in the process of proving under clause 7.3 (1) or verifying under clause 7.3 (3) to reject your objection under clause 7.3

7.8 Right to File Complaint

In cases where the company, its employees, or staff violate or fail to comply with personal data protection law, you have the right to file a complaint with the Personal Data Protection Committee Office.

8. Exercising Rights and Contact

If you have questions about our personal data protection, have suggestions, or wish to exercise your rights under clause 7, please contact us at:

EVDriveHub Car Rental Co., Ltd.
Address: 1686 Moo 3, Sanambien-Lopburi Ramasat Road, Khuan Lang, Hat Yai, Songkhla 90110
Tel: 095-4325164
Email: [email protected]

The company needs to verify your identity before processing the request and will endeavor to the best of its ability to facilitate and process your request without delay within thirty (30) days from the date we receive such request.

9. Impact of Not Providing Personal Data

9.1 Personal data processed based on contract and legal obligation basis is data necessary for the company to comply with relevant contracts and laws according to the purposes of data use. If you refuse to provide such personal data, it may result in the company being unable to fulfill the purposes of data use until you provide the complete necessary personal data to the company.

9.2 In cases where you refuse or withdraw consent for data processing, it may result in some rights being limited to you, or may result in the company being unable to fully manage or operate according to the purposes of data use that you have refused or withdrawn consent for, if such data is necessary for the company to proceed.

10. Transfer of Personal Data Abroad

The company may send or transfer your personal data to external parties, affiliates, or service providers located in foreign countries, which may or may not have adequate personal data protection standards as required by personal data protection law. However, the company will arrange procedures and measures to ensure that the transfer of your personal data is secure.

11. Other Personal Data Protection Policies

This policy applies only to the collection, use, and disclosure of your personal data as a user of vehicle and driver booking or rental services through the company's service channels. It does not include other cases where you must study the privacy policy separately from this company policy entirely.

12. Governing Law

This Privacy Policy shall be governed by and construed in accordance with Thai law. Thai courts shall have jurisdiction over any disputes that may arise or relate to this policy.

13. Changes to the Privacy Policy

The company may make changes to this privacy policy from time to time to align with changes regarding your data processing and changes in personal data protection law or other related laws. The company will notify you of significant changes through the website or application channels. However, you understand and accept that it is your responsibility to monitor changes to this privacy policy every time you visit or use services from the company's website or application.