Privacy Policy
Last Updated: February 15, 2026
Effective Date: February 15, 2026
1. Introduction
Rivenbolt ("we", "us", or "our") is committed to protecting the privacy and personal data of our clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our luxury car rental services in Singapore.
We operate in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and maintain strict standards for data security and client privacy. By using our services, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Personal Information
When you book our services, we collect:
- Full name and contact details (email address, phone number)
- Government-issued identification documents (NRIC, passport, driving license)
- Address and billing information
- Credit card details for payment processing
- Driving history and insurance information
- Emergency contact information
2.2 Usage Information
During your rental period, we may collect:
- Vehicle usage data (mileage, fuel consumption, route information from GPS)
- Communication records with our concierge team
- Service request history and preferences
- Feedback and survey responses
2.3 Automatically Collected Information
When you visit our website, we automatically collect:
- IP address and browser information
- Cookie data (see our Cookie Policy for details)
- Page views and navigation patterns
- Device information and operating system
3. How We Use Your Information
3.1 Service Delivery
- Processing rental bookings and managing vehicle delivery
- Verifying identity and driving credentials
- Processing payments and maintaining billing records
- Providing concierge support and navigation assistance
- Coordinating vehicle maintenance and logistics
3.2 Communication
- Sending booking confirmations and rental updates
- Responding to inquiries and support requests
- Providing service-related notifications
- Sharing relevant offers with your consent (opt-out available)
3.3 Service Improvement
- Analyzing usage patterns to enhance service quality
- Conducting client satisfaction surveys
- Developing new service offerings based on client needs
- Training staff to improve client interactions
4. Legal Basis for Processing
We process your personal data based on:
- Contract Performance: Processing necessary to fulfill our rental agreement with you
- Consent: Explicit permission you provide for marketing communications or optional services
- Legitimate Interest: Processing necessary for business operations, fraud prevention, and service improvement
- Legal Obligation: Compliance with Singapore regulations including Land Transport Authority requirements and tax laws
5. Data Sharing and Disclosure
5.1 Service Providers
We share limited data with trusted third parties who assist our operations:
- Payment processors (credit card verification and billing)
- Vehicle maintenance and servicing partners
- Insurance providers for coverage verification
- GPS and navigation system providers
- Cloud storage services for data backup
All service providers are bound by confidentiality agreements and PDPA compliance requirements.
5.2 Legal Requirements
We may disclose information when required by:
- Singapore law enforcement or regulatory authorities
- Court orders or legal proceedings
- Land Transport Authority investigations
- Insurance claims processing
6. Data Security
We implement comprehensive security measures:
- 256-bit SSL encryption for all data transmission
- Secure cloud storage with regular backups
- Access controls limiting staff access to necessary information only
- Regular security audits and penetration testing
- Staff training on data protection protocols
- Physical security measures at our office location
- Immediate breach notification procedures
7. Data Retention
We retain your personal data for:
- Rental Records: 7 years (Singapore tax compliance requirement)
- Payment Information: Duration required by financial regulations
- Communication History: 3 years for service quality purposes
- Marketing Preferences: Until you withdraw consent
- Website Analytics: 24 months
After retention periods expire, data is securely deleted or anonymized.
8. Your Rights Under PDPA
You have the following rights regarding your personal data:
- Access: Request copies of your personal data we hold
- Correction: Update or correct inaccurate information
- Withdrawal: Withdraw consent for marketing communications (does not affect service delivery)
- Deletion: Request deletion where legally permissible (subject to retention requirements)
- Data Portability: Receive your data in structured, machine-readable format
- Objection: Object to processing based on legitimate interests
To exercise these rights, contact us at [email protected]. We respond to requests within 30 days.
9. Cookies and Tracking
Our website uses cookies to enhance functionality and analyze usage. We employ:
- Essential Cookies: Required for website operation (cannot be disabled)
- Analytics Cookies: Track website usage patterns (can be disabled)
- Preference Cookies: Remember your settings and choices (can be disabled)
For detailed information, please review our Cookie Policy.
10. Children's Privacy
Our services are not directed to individuals under 25 years of age. We do not knowingly collect personal information from anyone under 18. If we discover we have inadvertently collected data from a minor, we will delete it immediately.
11. International Data Transfers
Your data is primarily stored and processed in Singapore. In cases where data is transferred internationally (such as cloud backup services), we ensure:
- Transfers only to countries with adequate data protection standards
- Use of standard contractual clauses approved by Singapore authorities
- Encryption during transmission
12. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated via email to active clients. Continued use of our services after updates constitutes acceptance of the revised policy. The "Last Updated" date at the top of this page indicates the most recent revision.
13. Contact Information
For privacy-related inquiries, concerns, or to exercise your rights:
Data Protection Officer: Rivenbolt Privacy Team
Email: [email protected]
Address: 100 Tras Street, #08-06, Singapore 079027
Phone: +65 6397 5284
Personal Data Protection Commission (Singapore):
If you are not satisfied with our response, you may lodge a complaint with the PDPC at www.pdpc.gov.sg