Privacy Policy
Last updated: 29th July, 2020
evRiderz Privacy Policy
This Privacy Policy (“Privacy Policy”) shall be used for Personal Data protection with respect to the following persons:
- “Customers”: any persons who request or receive delivery, transportation, food, or other products and services from a mobile application and web-based technology platform of EVRIDERZ Operations (Thailand) Company Limited and/or its group companies (“EVRiderz”) that connects the Customers and/or Merchants, with the Drivers to facilitate on-demand transport and/or delivery services (the “Platform”);
- “Drivers”: any persons who provide, or submit applications to EVRiderz to provide, delivery, transportation or other services;
- “Merchants”: any restaurant, retails store or any persons who provide, or submit applications to EVRiderz to provide foods, products or services to the Customers;
- Any persons interacting, communicating with and/or providing Personal Data to EVRiderz.
This Privacy Policy sets out EVRiderz’s practices and security measures with respect to the Personal Data and applies to all personal data of any individuals whom EVRiderz engages with, including the Customers, Drivers, Merchants, employees, vendors and stakeholders of EVRiderz (collectively as, “Data Subjects”).
You may review this Privacy Policy together with other privacy statements which EVRiderz may additionally provide on the Platform or on specific occasions when EVRiderz collects your personal data (“Privacy Statements”). This Privacy Policy supplements to the other Privacy Statements and is not intended to override them.
1. Key Summary of this Privacy Policy
EVRiderz has engaged with you for several purposes, and therefore has numbers of the personal data under the collection. In this regard, EVRiderz ensures that the personnel, business operations, and performances of EVRiderz shall be complied with this Privacy Policy, the Privacy Statements (if applicable) and the Personal Data Protection Act B.E 2562 (“PDPA”) and other applicable laws, in order to protect the privacy and security of the Data Subjects, including to avoid unauthorized or unlawful acts, to prevent violation of laws, and to mitigate any potential risks from penalty imposed by the PDPA and applicable laws.
2. Types of Personal Data
“Personal Data” means any data relating to an individual which can identify such individual, directly or indirectly excluding the data of a deceased individual.
The Personal Data that EVRiderz may collect from you is consisted of:
2.1 Identity Data
- name;
- last name;
- title;
- gender;
- age;
- nationality;
- country of residence;
- date of birth;
- identification number;
- occupation;
- picture/profile picture;
- signature;
- background history;
- occupation’s industry;
- passport number;
- other government-issued identification data;
- any other identity data with the similar nature
2.2 Sensitive Data
- religion;
- gender preference;
- criminal record;
- health data, such as disability, dietary, allergy and disorder
2.3 Transactional Data
- types of interested services and products and budget ranges;
- delivery and transportation information;
- other details regarding any acquired service and product;
- insurance information;
- details in any contract/agreement;
- purchase/order history;
- communication data through the Platform;
- feedback and correspondence;
- other transactional details with the similar nature;
2.4 Contact Details
- address;
- phone number;
- email address;
- other contact details, such as Line, WeChat, Facebook, WhatsApp and Instagram
2.5 Financial Data
- credit or debit card details;
- bank account details;
- source of fund;
- supporting data for loan application required by banks
2.6 Account Data
- Account details such as login name and password, account number, and points
2.7 Preference and Lifestyle Data
- preference;
- interests;
- lifestyle activities;
- likes and dislikes
2.8 Technical Data
- cookies;
- IP address;
- log files;
- device details;
- usage data in the Platform;
- rental devices data such as location data from rental motorcycles and mobile device;
- location;
- mobile network data;
- hardware model;
- operation system;
- other technical data with the similar nature
2.9 Public Data
- data publicly available on both online and offline channels such as social media data, e.g. photos, posts, locations, friend list, liked pages
If you would like to use any service or product of EVRiderz, EVRiderz will need your Personal Data in order to provide such service or product, enter into a contract with you, perform any obligation thereunder, or meet any of your requests, which EVRiderz may not be able to do so without your Personal Data.
If you provide the Personal Data about other persons to EVRiderz, you affirm that this Privacy Policy and the Privacy Statements (if applicable) have been reviewed by such persons and that such persons have given their consent regarding the processing of their Personal Data.
3. Collection of Personal Data
EVRiderz may, directly or indirectly, collect the Personal Data of you through the following:
- Platform: This includes when you interact or communicate with EVRiderz through the Platform.
- Phone Call, Email and Messaging Applications: This includes when you interact or communicate with EVRiderz over the phone, email, fax, postal service, or messaging applications, such as Line, WeChat, Facebook, WhatsApp and Instagram.
- Offline Interactions. This includes when you visit or stay at any property, which is owned, controlled or managed by EVRiderz, such as office, when you discuss with EVRiderz’s personnel, or when you use any service of EVRiderz.
- Marketing Agencies and Service Providers: This includes any agent, agency, ambassador, marketing company, market research company, event organizer, caterer, and other service provider, which EVRiderz works with.
- Group Companies: EVRiderz may collect the Personal Data from any company within EVRiderz.
- Strategic Business Partners: This includes any business partner with whom EVRiderz collaborates to provide and offer you with services or products.
- Other Sources. This includes any third party that may provide the Personal Data of you to EVRiderz, such as any family member and related person of you. In this regard, you affirm that you have reviewed this Privacy Policy and have given the consent regarding the processing of your Personal Data. This also includes any other publicly available sources, either online or offline database.
4. Retention Period
EVRiderz will retain the Personal Data of you for no longer than necessary and within the period as specified below. Nevertheless, EVRiderz may continue to retain the Personal Data as long as (a) it is permitted by PDPA and/or any applicable laws, (b) EVRiderz is under certain contracts with you, (c) EVRiderz is under legal obligation to retain the Personal Data, (d) the consent granted to EVRiderz has not been revoked, and (e) it is deemed necessary to complete the objectives of this Privacy Policy.
All Collected Personal Data: Not over 10 years following the termination of contractual relationship
5. Purpose of Personal Data Processing
The Personal Data shall be collected and used only for the purposes stated below, including any purposes stated in the consent given by you, and any other purposes as permitted or required in PDPA and/or any applicable laws.
Purpose | Personal Data | Lawful Basis |
Providing of Services and Fulfilment of Contracts • To provide you with related services and products. • To enter into a contract and fulfil the obligations thereunder. • To manage the relationship between the EVRiderz and you. • To process your payments, issue invoices and receipts, and/or refund. • To create and update your account. • To verify your identity, background history, and eligibility to use the Platform. • To track and share the progress of rides or deliveries. • To enable features in the Platform such as the features that allow users to share information with other people. • To using data from your devices to help identifying unsafe driving behavior such as speeding or harsh braking and acceleration | • Identity Data • Sensitive Data • Financial Data • Transactional Data • Contact Details • Account Data • Financial Data • Preference and Lifestyle Data | • Contractual Basis |
Legal Requirement • To comply with legal requirements such as Revenue Code and Vehicle Act B.E. 2522. • To comply with court orders and/or orders from governmental authorities. | • All Collected Personal Data | • Legal Obligation |
Operation of Ride-hailing Business • To communicate with you about the services or products which you are interested in. • To provide personalized services and/or products in order to meet the Customers’ expectations, to assist and to respond to Customers’ requests. • To coordinate with the financial institutions providing financing for the acquisitions of the vehicles or any devices. • To coordinate with the insurance providers for the vehicles or other relevant insurance. | • All Collected Personal Data | • Consent |
Sale and Marketing • To offer sale of the products and services pursuant to your preference and lifestyle. • To provide offers, updates, promotions, advertisements about the products and services that you might be interested in, including to invite and organize marketing events. (Collectively as, “Sale and Marketing Purposes”) | • Identity Data • Sensitive Data • Transactional Data • Contact Details • Account Data • Preference and Lifestyle Data • Technical Data • Public Data | • Consent |
Data Analytics • To use and conduct the data analytics, research, look-alike modelling, automated decision making, and profiling in order to improve business operations, products, and services of EVRiderz and to learn more about you, the products and services, which you receive or may be interested in receiving. (Collectively as, “Data Analytics Purposes”) | • Identity Data • Sensitive Data • Transactional Data • Contact Details • Account Data • Preference and Lifestyle Data • Technical Data • Public Data | • Consent |
Referral Program and Promotions • To process and administer your accounts and points and to provide gift vouchers or gift cards. | • Account Data • Transactional Data • Identity Data • Contact Details | • Consent |
Security and Ordinary Business Operation • To administer and protect EVRiderz’s business security. • To verify the Data Subjects and/or any Data Subjects’ payments. • To prevent any loss, crime, fraud or any unlawful act. • To conduct an investigation of anti-money laundering and transaction failure. • To audit the business financial status and accounting matters, including the payments and debt collections • To administer and solve technical problem on the Platform and to improve EVRiderz’s business. • To conduct ordinary business operation of EVRiderz, including to connect data between EVRiderz for business operation, and to allow advisors, service providers, vendors, suppliers, contractors, sub-contractors to provide and supply EVRiderz with services and products. (Collectively as, “Security and Ordinary Business Operation Purposes”) | • All Collected Personal Data | • Consent |
6. To Whom Personal Data is Disclosed
Pursuant to the purposes stated in this Privacy Policy, the Privacy Statements, and the consent given by you, and any other purposes as permitted or required in the PDPA and/or any applicable laws, the Personal Data of you may be disclosed, or transferred to the third parties and/or governmental authorities as follows:
- Any company within EVRiderz.
- Governmental authorities such as the Department of Business Development, the Revenue Department, and the Department of Land Transport.
- Financial institutions such as banks providing financing arrangement to you for the acquisitions of the vehicles.
- Insurance company including insurance broker company and other vendors and service providers with the similar nature.
- Service providers, vendors, suppliers, contractors, sub-contractors who work with EVRiderz to provide and supply EVRiderz with services and products, such as website hosting, marketing service, data analysis, market research, payment processing, order fulfillment, data technology and related infrastructure provision, customer service, email delivery, auditing, security service, event organizer, caterer, and other services or products.
- Agents, agencies, ambassadors, marketing companies, market research companies, which EVRiderz works with.
- Strategic business partners with whom EVRiderz collaborates to provide and offer you with services or products.
- Professional advisors such as accountants, lawyers, IT advisors, technicians, and auditors.
Third parties to whom EVRiderz chooses to sell, transfer, merge, any portions of the business, assets, or shares. This includes the parties in relation to the events of business reorganization, insolvency, rehabilitation and similar proceedings
7. Cross-Border Transfer
EVRiderz may disclose or transfer the Personal Data in relation to you to the parties located overseas, in which the destination countries may or may not have the same equivalent level of protection for Personal Data protection standards. In any case, EVRiderz takes steps and measures to ensure that the Personal Data is securely transferred and that the receiving parties have in place an appropriate level of protection standards or other derogations as allowed by applicable laws.
8. Cookies
Cookies are software which is stored in the Platform and sent to your browser when using the Platform. The Cookies on the Platform are used to identify and distinguish the users who have visited the Platform and track their personal preference, which the data of the users shall be automatically collected by Cookies. These Cookies do not cause any harmful effects to the computer or transmit any viruses, Cookies otherwise help EVRiderz to serve the users with personalized service or support, provided that its purposes of using are:
- to increase effectiveness of the Platform in operating online service or interactive applications;
- to enhance the visitation to the Platform, such as to recognize a name, account, password or previous interest, in order to serve those who repeatedly use the Platform or services; and
- to analyze the performance, including update and improve the operation of the Platform.
After the retention period, the data will be automatically and permanently deleted.
If the users, as your, disagree to the use of Cookies in automatically collecting the data while browsing the EVRiderz’s Websites & Applications, the users can choose not to accept Cookies by visiting www.evriderz.com.
9. Log Files
EVRiderz may record log files from your visiting the Platform. Log files include IP address, browser type, internet service provider name, entry and exit pages, platform type, date/time stamp, and number of clicks.
10. Minors
The minor means any person under the age of 20 years. EVRiderz may not know the age of the person visiting the Platform. The parents of the minors providing the Personal Data through the Platform, may request EVRiderz to delete the Personal Data of such minors. If EVRiderz is aware that you are minors, EVRiderz will, and without delay, proceed to obtain consent from the parents, if required by the PDPA and/or other applicable laws.
11. Personal Data Security Measure
EVRiderz recognizes the importance of maintaining the security of your Personal Data. Therefore, EVRiderz has implemented reasonable technical and organizational security measures to protect your Personal Data collected by EVRiderz against unauthorized access, misuse, loss or destruction, which include control access, encrypted storage and storage with lock.
12. The Data Subjects’ Rights
Where permitted by the PDPA or applicable laws, you have the rights with respect to their Personal Data to:
- Access: You may have the right to access or request a copy of the Personal Data, which EVRiderz is collecting, using or disclosing about you. For your own privacy and security, EVRiderz may require you to prove their identity before providing the requested Personal Data.
- Data Portability: You may have the right to obtain Personal Data of them, which EVRiderz holds, in a structured, electronic format, and to send or transfer such Personal Data to another data controller, where this is (a) Personal Data of you and (b) if EVRiderz is collecting, using or disclosing such Personal Data on the basis of your consent or to perform a contract with you.
- Rectification: You may have the right to have incomplete, inaccurate, misleading, or not up-to-date Personal Data which EVRiderz collects, uses or discloses about you rectified.
- Withdraw Consent: For the purposes of consent, which you have given to EVRiderz for the collecting, using or disclosing of your Personal Data, you have the right to withdraw such consent at any time.
- File a complaint: You have the right to file a complaint with EVRiderz and/or the Personal Data Protection Committee if you believe that there is violation of the PDPA.
- Objection: You may have the right to object the collection, use, and disclosure of the Personal Data in certain circumstances, including the case where Personal Data is being processed for direct marketing.
- Restriction: You may have the right to restrict the processing of the Personal Data in circumstances where you have contested the accuracy of the Personal Data, for the period enabling EVRiderz to verify its accuracy.
- Deletion (‘right to be forgotten’): You may have the right to request that EVRiderz delete or de-identify Personal Data which EVRiderz collects, uses or discloses about you, unless EVRiderz is not obligated to do so, or if EVRiderz needs to retain such Personal Data in order to comply with a legal obligation or to establish, exercise, or defend legal claims.
You may exercise these rights by changing privacy preference, unsubscribing, or contacting EVRiderz or the Data Protection Officer as detailed in paragraph 16 below.
Your withdrawal of any previously given consent, request to delete or anonymize the Personal Data, request to restrict or object to the processing of the Personal Data could mean that EVRiderz is unable to perform its obligations under an existing contract and unable to provide you with the services and products and/or to acts on your request.
EVRiderz may refuse to comply with the request if (a) there are legal restrictions, (b) EVRiderz has compelling legitimate grounds for the processing of the Personal Data as required or permitted by the PDPA and/or any applicable laws, (c) the Personal Data has been made anonymous, (d) the person submitting the request does not have evidence to verify that he/she is you or does not has the authority to submit such request, or (e) the person submitting the request does not have legal grounds to exercise the rights or Personal Data in the possession of EVRiderz.
13. Privacy Policy of other Websites
The Platform contains address links to other websites. This Privacy Policy applies only to the Platform and EVRiderz shall be solely responsible subject to the scope of this Privacy Policy. EVRiderz shall not be responsible for any collection, storage, process, or disclosure of Personal Data, or the use of Cookies conducted by other websites which you access from the Platform. Therefore, EVRiderz would kindly suggest you carefully review the privacy policies of other websites before submitting any Personal Data.
14. Amendment and Review
EVRiderz shall regularly review this Privacy Policy and the Privacy Statements from time to time to be in accordance with any amendments made to the PDPA and applicable laws. Changes or amendments to this Privacy Policy and the Privacy Statements shall be publicly announced on the Platform to inform you; however, if the amendments are considered specifically causing significant effect to you, such amendment shall be directly notified to you.
15. Miscellaneous
This Privacy Policy and the Privacy Statements are governed by and shall be construed in compliance with the PDPA and the laws of Thailand. This Privacy Policy and the Privacy Statements are written in English and Thai language. In the event of any inconsistency between the English versions and Thai versions, the English versions shall prevail.
16. Contact Us
Regarding all queries or awareness with respect to the Personal Data arising from this Privacy Policy, the Privacy Statements, or the activities of EVRiderz, including to the exercise of any right as set out in this Privacy Policy, EVRiderz and the Data Protection Officer can be contacted at the below address:
Attention: Dr. Georg Lechner
Address: evRiderz Ltd. Flat 3, 133 Pavilion Road, London, SW1X 0BJ, United Kingdom
Tel: +66 (0) 2481 9272
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Website: www.evriderz.com