Privacy Policy

Last Updated: January 2025

Wetusya (UEN: 201777907A), registered with the Accounting and Corporate Regulatory Authority (ACRA) of Singapore, operates a premium chauffeur-driven car rental service. We are committed to protecting your privacy and ensuring the security of your personal information in compliance with the Singapore Personal Data Protection Act (PDPA) 2012 and the European General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

1.1 Personal Data

We collect personal information that you voluntarily provide to us when you:

Contact Form Submissions:
  • Full Name: To address you properly and identify your booking
  • Email Address: To respond to your inquiries and send booking confirmations
  • Phone Number: To contact you regarding service details and updates
  • Message Content: To understand your specific requirements and preferences

Purpose: Responding to inquiries, processing bookings, and providing customer service.

Storage: Data is stored in CSV files on secure servers located in Singapore with encrypted access controls.

Booking Information:
  • Pickup and drop-off locations
  • Date and time of service
  • Vehicle preferences
  • Special requests or requirements
  • Payment information (processed through secure third-party payment processors)

1.2 Usage Data

We automatically collect certain information when you visit our website:

  • IP address and geographic location
  • Browser type and version
  • Device information and operating system
  • Pages visited and time spent on pages
  • Referring website addresses
  • Click patterns and navigation paths

1.3 Cookies and Tracking Data

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website performance. See Section 4 for detailed information.

2. How We Use Your Information

We process your personal data based on the following legal grounds under GDPR and PDPA:

Legitimate Purposes:
  • Contract Performance: To provide chauffeur services, process bookings, and fulfill our contractual obligations
  • Legitimate Interests: To improve our services, conduct market research, and enhance user experience
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Consent: For marketing communications and optional data processing (where explicit consent is obtained)

Specific uses include:

  • Processing and managing your service bookings
  • Communicating with you about your reservations
  • Sending service updates and confirmations
  • Improving website functionality and user experience
  • Analyzing usage patterns and preferences
  • Preventing fraud and ensuring platform security
  • Complying with legal and regulatory requirements
  • Sending promotional materials (with your consent)

3. How We Share Your Information

We do not sell your personal information. We may share your data with:

Service Providers:
  • Payment processors for secure transaction handling
  • Cloud hosting providers for data storage
  • Customer relationship management (CRM) systems
  • Email service providers for communication
  • Analytics platforms for performance monitoring
Legal Requirements:

We may disclose your information when required by law, court order, or governmental authority, or to protect our legal rights and safety.

Business Transfers:

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Cookies and Tracking Technologies

We use various tracking technologies to collect and store information:

Google Analytics

We use Google Analytics to understand how visitors interact with our website. This service collects:

  • Pages viewed and session duration
  • Traffic sources and referral information
  • Device and browser information
  • Geographic location data
  • User behavior and navigation patterns

Data Sharing: Anonymized data is shared with Google to generate analytics reports.

Google Ads Conversion Tracking and Remarketing

We use Google Ads to:

  • Track conversion events (booking submissions, contact form completions)
  • Display targeted advertisements to previous website visitors
  • Measure advertising campaign effectiveness
  • Create remarketing audiences based on website interactions

Data Sharing: Cookie identifiers and conversion data are shared with Google for advertising purposes.

Facebook Pixel

The Facebook Pixel allows us to:

  • Measure the effectiveness of Facebook advertising campaigns
  • Build Custom Audiences for targeted advertising
  • Create Lookalike Audiences to reach similar users
  • Track conversions and user actions on our website
  • Optimize ad delivery to people likely to take specific actions

Data Sharing: Event data, including page views and custom events, is transmitted to Meta Platforms.

How to Opt-Out of Tracking:
  • Browser Settings: Configure your browser to reject cookies or notify you when cookies are set
  • Google Analytics Opt-Out: Install the Google Analytics Opt-out Browser Add-on
  • Google Ads Settings: Visit Google Ads Settings to manage personalized advertising preferences
  • Facebook Ad Preferences: Adjust your advertising preferences in your Facebook account settings
  • Industry Opt-Out Tools: Use the Digital Advertising Alliance or Network Advertising Initiative opt-out tools
  • Global Privacy Control (GPC): Enable GPC in your browser (see Section 7)

5. Your Privacy Rights

Under GDPR and PDPA, you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you, including information about how we process it.
  • Right to Correction/Rectification: You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Right to be Forgotten): You can request deletion of your personal data when it is no longer necessary for the purposes collected, or if you withdraw consent.
  • Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller.
  • Right to Object to Processing: You can object to processing of your personal data for direct marketing purposes or based on legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore or your local supervisory authority.

To Exercise Your Rights: Contact us using the variable contact methods provided by Wetusya. We will respond to your request within 30 days as required by applicable law.

6. Platform-Specific Disclosures

6.1 Google Services (Analytics, Ads, Remarketing)

Data Shared: Cookie identifiers, IP addresses (anonymized), device information, page interactions, conversion events, and user behavior patterns.

Purpose: Website analytics, advertising measurement, remarketing campaigns, and conversion optimization.

Google's Privacy Policy: Google processes data according to their privacy policy. You can review how Google uses data from sites that use their services.

6.2 Meta/Facebook (Facebook Pixel, Custom Audiences)

Data Shared: Browser information, page views, custom events (form submissions, bookings), and hashed email addresses for Custom Audience matching.

Purpose: Advertising measurement, audience building, campaign optimization, and retargeting.

Meta's Data Policy: Meta processes data according to their data policy and provides users with advertising controls.

6.3 Microsoft/Bing Ads

Data Shared: Conversion tracking data, user interactions, and cookie identifiers for advertising purposes.

Purpose: Measuring advertising effectiveness and optimizing campaign performance on Microsoft Advertising platforms.

Important: These platforms operate as independent data controllers. Their processing of your data is governed by their respective privacy policies. We recommend reviewing their privacy statements to understand how they handle your information.

7. Global Privacy Control (GPC) Support

We respect the Global Privacy Control (GPC) signal, a browser-based specification that allows users to communicate their privacy preferences automatically.

How GPC Works:
  • When your browser sends a GPC signal, we recognize it as a valid request to opt-out of data sales and sharing for targeted advertising
  • We will honor GPC signals for non-essential cookies and tracking technologies
  • Essential cookies necessary for website functionality will continue to operate

Enabling GPC: You can enable GPC through compatible browsers and browser extensions such as Privacy Badger, DuckDuckGo, Brave, or Firefox with appropriate extensions.

8. No Automated Decision-Making

We do not use automated decision-making processes, including profiling, that produce legal effects or similarly significantly affect you. All booking decisions and customer service interactions involve human review and judgment.

9. Data Security Measures

We implement comprehensive security measures to protect your personal information:

  • Encryption: SSL/TLS encryption for data transmission and AES-256 encryption for data at rest
  • Access Controls: Role-based access restrictions and multi-factor authentication for administrative access
  • Secure Servers: Data stored on secure servers in Singapore with regular security audits
  • Regular Updates: Software and security patches applied promptly
  • Employee Training: Staff trained on data protection principles and confidentiality obligations
  • Incident Response: Established procedures for detecting and responding to data breaches
  • Third-Party Vetting: Service providers assessed for security compliance

Please Note: While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

10. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

Contact Form Data: Retained for 2 years from last contact or until you request deletion, whichever comes first.
Booking Information: Retained for 7 years to comply with accounting and tax regulations in Singapore