Privacy Policy

Last Updated: January 15, 2026

Introduction

carriqat is committed to protecting the privacy and personal data of our clients in accordance with Singapore's Personal Data Protection Act (PDPA). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you engage our vehicle rental services.

By using our services or providing us with your personal data, you consent to the collection, use, and disclosure of your information as described in this policy. If you have questions or concerns about our privacy practices, please contact us at [email protected].

Data Controller

carriqat, located at 391A Orchard Road, #15-03, Ngee Ann City Tower A, Singapore 238872, is the data controller responsible for your personal information.

Personal Data We Collect

We collect personal data necessary to provide our vehicle rental services and maintain our business relationship with you. The types of personal data we may collect include:

  • Contact information: name, email address, telephone number, and physical address
  • Identification information: Singapore driving license number or international driving permit details
  • Payment information: credit card details, billing address, and transaction records
  • Service preferences: vehicle preferences, rental history, and special requirements
  • Communication records: correspondence via email, phone, or contact forms
  • Technical data: IP address, browser type, and device information when you visit our website
  • Marketing preferences: consent for marketing communications and cookie preferences

How We Collect Personal Data

We collect personal data through several methods:

  • Direct interactions: when you inquire about services, make a booking, or communicate with our team
  • Contact forms: information submitted through our website contact or inquiry forms
  • Email and telephone: data provided during correspondence with our staff
  • Service delivery: information collected during vehicle pickup, rental period, and return
  • Website usage: technical data collected through cookies and similar technologies
  • Third-party services: payment processors, insurance providers, and business partners as necessary

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract performance: processing necessary to fulfill our vehicle rental agreement with you
  • Consent: where you have given explicit consent for specific processing activities
  • Legitimate interests: processing necessary for our business operations while respecting your privacy rights
  • Legal compliance: processing required to comply with Singapore laws and regulations

How We Use Your Personal Data

We use your personal data for the following purposes:

  • Service delivery: coordinating vehicle rentals, arranging pickup and return, and providing customer support
  • Payment processing: handling transactions and maintaining financial records
  • Communication: responding to inquiries, confirming bookings, and providing service updates
  • Insurance and liability: verifying driving credentials and maintaining appropriate coverage
  • Service improvement: analyzing usage patterns to enhance our offerings and customer experience
  • Marketing communications: sending service updates and promotional materials where consent is provided
  • Legal compliance: meeting regulatory requirements and protecting our legal rights
  • Business operations: maintaining records, conducting analysis, and managing our vehicle fleet

Data Sharing and Disclosure

We may share your personal data with third parties in the following circumstances:

  • Service providers: payment processors, insurance companies, and vehicle maintenance services
  • Professional advisors: legal counsel, accountants, and business consultants when necessary
  • Regulatory authorities: when required by law or to protect legal rights
  • Business transfers: in connection with any merger, acquisition, or sale of business assets

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. All third-party service providers are contractually obligated to maintain appropriate data protection standards.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including:

  • Service records: retained for seven years after the rental period for business and legal purposes
  • Financial records: maintained for seven years in accordance with Singapore tax requirements
  • Marketing preferences: until you withdraw consent or request deletion
  • Website analytics: aggregated and anonymized data may be retained indefinitely

After the retention period expires, we securely delete or anonymize your personal data in accordance with data protection best practices.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Secure storage systems with access controls
  • Regular security assessments and updates
  • Staff training on data protection practices
  • Secure payment processing through certified providers
  • Incident response procedures for data breaches

While we take reasonable steps to protect your data, no security system is entirely impenetrable. We cannot guarantee absolute security but maintain industry-standard protective measures.

Cookies and Website Tracking

Our website uses cookies and similar technologies to improve functionality and analyze usage. These include:

  • Essential cookies: necessary for website operation and cannot be disabled
  • Analytics cookies: help us understand how visitors use our website
  • Preference cookies: remember your settings and choices

For detailed information about our cookie practices, please review our Cookie Policy.

Your Rights

Under the Personal Data Protection Act, you have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate or incomplete data
  • Withdrawal of consent: withdraw consent for processing where consent is the legal basis
  • Data portability: request transfer of your data in a structured, commonly used format
  • Restriction: request limitation of processing in certain circumstances
  • Objection: object to processing based on legitimate interests

To exercise these rights, contact us at [email protected]. We will respond to your request within 30 days. Some requests may require identity verification to protect your privacy.

Third-Party Links

Our website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these external sites. We recommend reviewing their privacy policies before providing any personal information.

International Data Transfers

Your personal data is primarily stored and processed within Singapore. If we transfer data outside Singapore, we ensure appropriate safeguards are in place to protect your information in accordance with PDPA requirements.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from someone under 18, we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email or through a notice on our website. The "Last Updated" date at the top of this policy indicates when it was last revised.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

carriqat Privacy Office

391A Orchard Road
#15-03, Ngee Ann City Tower A
Singapore 238872

Email: [email protected]

Telephone: +65 6493 7158

Complaints

If you believe we have not handled your personal data in accordance with this policy or applicable law, you may lodge a complaint with Singapore's Personal Data Protection Commission (PDPC).