Privacy Policy
Last Updated: January 15, 2026
Introduction
carriqat is committed to protecting the privacy and personal data of our clients in accordance with Singapore's Personal Data Protection Act (PDPA). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you engage our vehicle rental services.
By using our services or providing us with your personal data, you consent to the collection, use, and disclosure of your information as described in this policy. If you have questions or concerns about our privacy practices, please contact us at [email protected].
Data Controller
carriqat, located at 391A Orchard Road, #15-03, Ngee Ann City Tower A, Singapore 238872, is the data controller responsible for your personal information.
Personal Data We Collect
We collect personal data necessary to provide our vehicle rental services and maintain our business relationship with you. The types of personal data we may collect include:
- Contact information: name, email address, telephone number, and physical address
- Identification information: Singapore driving license number or international driving permit details
- Payment information: credit card details, billing address, and transaction records
- Service preferences: vehicle preferences, rental history, and special requirements
- Communication records: correspondence via email, phone, or contact forms
- Technical data: IP address, browser type, and device information when you visit our website
- Marketing preferences: consent for marketing communications and cookie preferences
How We Collect Personal Data
We collect personal data through several methods:
- Direct interactions: when you inquire about services, make a booking, or communicate with our team
- Contact forms: information submitted through our website contact or inquiry forms
- Email and telephone: data provided during correspondence with our staff
- Service delivery: information collected during vehicle pickup, rental period, and return
- Website usage: technical data collected through cookies and similar technologies
- Third-party services: payment processors, insurance providers, and business partners as necessary
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract performance: processing necessary to fulfill our vehicle rental agreement with you
- Consent: where you have given explicit consent for specific processing activities
- Legitimate interests: processing necessary for our business operations while respecting your privacy rights
- Legal compliance: processing required to comply with Singapore laws and regulations
How We Use Your Personal Data
We use your personal data for the following purposes:
- Service delivery: coordinating vehicle rentals, arranging pickup and return, and providing customer support
- Payment processing: handling transactions and maintaining financial records
- Communication: responding to inquiries, confirming bookings, and providing service updates
- Insurance and liability: verifying driving credentials and maintaining appropriate coverage
- Service improvement: analyzing usage patterns to enhance our offerings and customer experience
- Marketing communications: sending service updates and promotional materials where consent is provided
- Legal compliance: meeting regulatory requirements and protecting our legal rights
- Business operations: maintaining records, conducting analysis, and managing our vehicle fleet
Data Sharing and Disclosure
We may share your personal data with third parties in the following circumstances:
- Service providers: payment processors, insurance companies, and vehicle maintenance services
- Professional advisors: legal counsel, accountants, and business consultants when necessary
- Regulatory authorities: when required by law or to protect legal rights
- Business transfers: in connection with any merger, acquisition, or sale of business assets
We do not sell, rent, or trade your personal data to third parties for their marketing purposes. All third-party service providers are contractually obligated to maintain appropriate data protection standards.
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including:
- Service records: retained for seven years after the rental period for business and legal purposes
- Financial records: maintained for seven years in accordance with Singapore tax requirements
- Marketing preferences: until you withdraw consent or request deletion
- Website analytics: aggregated and anonymized data may be retained indefinitely
After the retention period expires, we securely delete or anonymize your personal data in accordance with data protection best practices.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Secure storage systems with access controls
- Regular security assessments and updates
- Staff training on data protection practices
- Secure payment processing through certified providers
- Incident response procedures for data breaches
While we take reasonable steps to protect your data, no security system is entirely impenetrable. We cannot guarantee absolute security but maintain industry-standard protective measures.
Cookies and Website Tracking
Our website uses cookies and similar technologies to improve functionality and analyze usage. These include:
- Essential cookies: necessary for website operation and cannot be disabled
- Analytics cookies: help us understand how visitors use our website
- Preference cookies: remember your settings and choices
For detailed information about our cookie practices, please review our Cookie Policy.
Your Rights
Under the Personal Data Protection Act, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate or incomplete data
- Withdrawal of consent: withdraw consent for processing where consent is the legal basis
- Data portability: request transfer of your data in a structured, commonly used format
- Restriction: request limitation of processing in certain circumstances
- Objection: object to processing based on legitimate interests
To exercise these rights, contact us at [email protected]. We will respond to your request within 30 days. Some requests may require identity verification to protect your privacy.
Third-Party Links
Our website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these external sites. We recommend reviewing their privacy policies before providing any personal information.
International Data Transfers
Your personal data is primarily stored and processed within Singapore. If we transfer data outside Singapore, we ensure appropriate safeguards are in place to protect your information in accordance with PDPA requirements.
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from someone under 18, we will delete it promptly.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email or through a notice on our website. The "Last Updated" date at the top of this policy indicates when it was last revised.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:
carriqat Privacy Office
391A Orchard Road
#15-03, Ngee Ann City Tower A
Singapore 238872
Email: [email protected]
Telephone: +65 6493 7158
Complaints
If you believe we have not handled your personal data in accordance with this policy or applicable law, you may lodge a complaint with Singapore's Personal Data Protection Commission (PDPC).