Privacy Policy

Introduction

Crestborne ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our luxury vehicle rental services or visit our website.

By engaging with our services, you consent to the data practices described in this policy. If you have questions or concerns about this Privacy Policy, please contact us at privacy@crestborneasaqs.

Information We Collect

Personal Information

We collect personal information that you voluntarily provide when you:

• Make a rental reservation or inquiry
• Contact us via email or telephone
• Complete forms on our website
• Subscribe to our communications

This information may include your name, email address, telephone number, postal address, driving licence details, payment information, and preferences related to vehicle selection and rental experiences.

Automatically Collected Information

When you visit our website, we may automatically collect:

• Device information (type, operating system, browser type)
• IP address and general location data
• Pages visited and time spent on our website
• Referral sources and navigation patterns

This information is collected through cookies and similar tracking technologies. Please refer to our Cookie Policy for detailed information about our use of cookies.

How We Use Your Information

We use collected information for the following purposes:

Service Delivery

• Processing and fulfilling vehicle rental reservations
• Coordinating marque historian consultations and style consultant appointments
• Providing heritage documentation and curated itineraries
• Managing payments and financial transactions

Communication

• Responding to inquiries and service requests
• Sending booking confirmations and rental details
• Providing customer support and assistance
• Sharing updates about our services (with your consent)

Business Operations

• Improving our services and customer experience
• Analyzing website usage and rental patterns
• Maintaining vehicle inventory and scheduling
• Complying with legal and regulatory requirements

Legal Basis for Processing

Under Singapore's Personal Data Protection Act (PDPA), we process your personal data based on:

• Consent: You have provided clear consent for us to process your personal data for specific purposes
• Contract Performance: Processing is necessary to fulfill our rental service agreement with you
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving services and preventing fraud
• Legal Obligations: Processing is required to comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

Service Providers

We work with trusted third-party service providers who assist in business operations, including payment processing, insurance verification, vehicle maintenance tracking, and website hosting. These providers have access to personal information only as needed to perform their functions and are contractually obligated to maintain confidentiality.

Legal Requirements

We may disclose your information when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission and storage
• Secure server infrastructure with regular security updates
• Access controls limiting employee access to personal information
• Regular security audits and vulnerability assessments
• Staff training on data protection and privacy practices

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but maintain commercially reasonable safeguards.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Rental booking information and associated documentation are typically retained for seven years following the completion of services, in accordance with Singapore's business record-keeping requirements. Marketing communications preferences are retained until you withdraw consent.

When personal information is no longer required, we securely delete or anonymize it in accordance with our data retention schedule and applicable regulations.

Your Rights

Under Singapore's PDPA, you have the following rights regarding your personal data:

Access

You have the right to request access to the personal information we hold about you.

Correction

You may request correction of inaccurate or incomplete personal information.

Withdrawal of Consent

You may withdraw your consent for us to collect, use, or disclose your personal data at any time, subject to legal or contractual restrictions.

Data Portability

You may request that we provide your personal information in a structured, commonly used format.

Exercising Your Rights

To exercise any of these rights, please contact us at privacy@crestborneasaqs. We will respond to your request within 30 days. We may require verification of your identity before processing requests.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyze site usage. For detailed information about the cookies we use and how to manage your preferences, please review our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites, such as payment processors or mapping services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@crestborneasaqs.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable regulations. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy regularly to stay informed about how we protect your information.

Significant changes will be communicated via email or prominent notice on our website. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days of receipt.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Singapore, particularly the Personal Data Protection Act 2012. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Singapore.