Privacy Policy

Last Updated: January 2025

Kyrevia (UEN: 201924991179R), registered with the Accounting and Corporate Regulatory Authority (ACRA) of Singapore, operates a car rental service in Singapore. We are committed to protecting your privacy and ensuring the security of your personal information in compliance with Singapore's Personal Data Protection Act (PDPA) 2012 and the European Union's General Data Protection Regulation (GDPR).
Legal Entity: Kyrevia
Registration Number: 201924991179R
Jurisdiction: Singapore
Regulatory Compliance: ACRA-registered, PDPA and GDPR compliant

1. Information We Collect

1.1 Personal Data

We collect personal information that you voluntarily provide when using our services:

  • Contact Information: Full name, email address, telephone number, mailing address
  • Identification Documents: Driver's license details, passport information, national identification numbers
  • Payment Information: Credit/debit card details, billing address, transaction history
  • Booking Details: Rental dates, vehicle preferences, pickup and drop-off locations
  • Emergency Contact: Name and phone number of emergency contact person

1.2 Usage Data

We automatically collect information about how you interact with our website:

  • IP address and approximate geographic location
  • Browser type, version, and language settings
  • Device information (type, operating system, screen resolution)
  • Pages viewed, time spent on pages, navigation paths
  • Referring website addresses
  • Date and time of access

1.3 Contact Form Data Collection

Important Notice: When you submit inquiries through our contact forms, we collect the following information:

  • Name: To address you properly in our responses
  • Email Address: Primary communication channel for responding to your inquiry
  • Phone Number: For urgent matters or follow-up calls
  • Message Content: Your inquiry, questions, or feedback

Purpose: This information is collected solely for the purpose of responding to your inquiries and providing customer support.

Storage: Contact form submissions are stored in CSV files on secure servers located in Singapore, with restricted access and encrypted storage protocols.

Singapore PDPA Compliance: All contact form data is processed in accordance with Singapore's PDPA requirements, including purpose limitation, consent, and data protection obligations.

2. How We Use Your Information

We process your personal data based on the following legal grounds and for these specific purposes:

Contractual Necessity:

  • Processing vehicle rental bookings and reservations
  • Managing rental agreements and contracts
  • Processing payments and issuing invoices
  • Providing customer support and handling inquiries
  • Verifying driver's license validity and rental eligibility

Legitimate Business Interests:

  • Improving our website functionality and user experience
  • Analyzing business performance and customer preferences
  • Preventing fraud and ensuring security
  • Maintaining business records and accounting
  • Marketing our services to existing customers

Legal Obligations:

  • Complying with Singapore traffic and vehicle rental regulations
  • Responding to legal requests and court orders
  • Tax reporting and financial compliance
  • Maintaining records as required by ACRA and other regulatory bodies

Your Consent:

  • Sending promotional emails and marketing communications
  • Using cookies and tracking technologies (where required)
  • Sharing data with third-party marketing platforms

3. How We Share Your Information

We may share your personal information with the following categories of recipients:

Service Providers:

  • Payment Processors: To securely process credit card and payment transactions
  • Cloud Hosting Services: For website hosting and data storage
  • Email Service Providers: To send booking confirmations and communications
  • Analytics Providers: Google Analytics, to understand website usage patterns
  • Vehicle Insurance Companies: As required for rental insurance coverage

Legal Requirements:

  • Singapore Police Force or law enforcement agencies when legally required
  • Courts and regulatory authorities in response to legal proceedings
  • Land Transport Authority (LTA) for vehicle-related compliance

Business Transfers:

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website performance.

🔍 Google Analytics

Purpose: We use Google Analytics to understand how visitors interact with our website, including:

  • Number of visitors and page views
  • Traffic sources (organic search, direct, referral)
  • User demographics and interests (anonymized)
  • Device and browser information
  • Bounce rates and session duration

Data Shared: Google Analytics collects IP addresses (anonymized), cookie identifiers, and usage data. This information is processed by Google LLC in accordance with their privacy policy.

📢 Google Ads (Conversion Tracking & Remarketing)

Purpose: We use Google Ads to:

  • Track conversions from our advertising campaigns
  • Display remarketing advertisements to previous website visitors
  • Optimize ad performance and targeting

Data Shared: Google Ads uses cookies to track your interactions with our ads and website. This includes conversion events (bookings, form submissions) and remarketing audience lists.

📘 Facebook Pixel

Purpose: The Facebook Pixel allows us to:

  • Measure the effectiveness of Facebook and Instagram advertising
  • Build Custom Audiences for targeted advertising
  • Create Lookalike Audiences to reach new potential customers
  • Track conversions and optimize ad delivery

Data Shared: Meta (Facebook) receives information about your website visits, including pages viewed, actions taken, and device information. This data is matched with your Facebook profile if you are logged in.

🔷 Microsoft Bing Ads

Purpose: We use Bing Ads Universal Event Tracking (UET) to:

  • Measure advertising campaign performance on Bing search
  • Track conversions from Bing advertisements
  • Create remarketing audiences

Data Shared: Microsoft collects cookie data, IP addresses, and conversion information when you interact with our Bing ads and website.

How to Opt-Out of Tracking:

  • Browser Settings: Configure your browser to block or delete cookies
  • Google Ads Settings: Visit Google Ad Settings to control personalized advertising
  • Facebook Ad Preferences: Adjust your Facebook ad preferences in your account settings
  • NAI Opt-Out: Visit the Network Advertising Initiative opt-out page
  • DAA Opt-Out: Use the Digital Advertising Alliance's opt-out tools
  • Browser Extensions: Install privacy-focused browser extensions that block tracking

5. Your Privacy Rights

Under Singapore's PDPA and the GDPR (for EU residents), you have the following rights regarding your personal data:

🔍 Right to Access

You have the right to request a copy of all personal data we hold about you, including the purposes of processing and categories of recipients.

✏️ Right to Correction

You can request that we correct any inaccurate or incomplete personal information we maintain about you.

🗑️ Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when it is no longer necessary for the purposes collected or if you withdraw consent.

📦 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

🚫 Right to Object

You can object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

⛔ Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

⚖️ Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights, including denying services or charging different prices.

📋 Right to Restriction

You can request restriction of processing in certain circumstances, such as when you contest the accuracy of data or object to processing.

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days as required by PDPA and GDPR regulations.

6. Platform-Specific Data Sharing Disclosures

We maintain relationships with the following advertising and analytics platforms that receive your data:

Google LLC (Analytics & Ads)
  • Data Shared: Website usage data, conversion events, device information, anonymized IP addresses
  • Purpose: Website analytics, advertising measurement, remarketing
  • Privacy Policy: Google processes data according to their privacy policy and GDPR commitments
  • Data Location: Data may be transferred to and processed in the United States and other countries where Google operates
  • Retention: Google Analytics data is retained for 26 months by default