Privacy Policy

Introduction

Aureum is committed to protecting the privacy and security of personal information collected through our vehicle rental services. This Privacy Policy explains how we gather, use, store, and safeguard your data in accordance with Taiwan's Personal Data Protection Act and international privacy standards.

By using our services or visiting our website, you acknowledge that you have read and understood this policy. If you have questions or concerns regarding our privacy practices, please contact us at [email protected].

Information We Collect

Personal Identification Information

When you reserve a vehicle or create an account with Aureum, we collect the following personal details:

• Full name as it appears on identification documents
• Email address for reservation confirmations and service communications
• Telephone number for coordination and support purposes
• Passport or national identification number for verification
• Driver's license information including issuing country and expiration date
• Billing address and payment card details for transaction processing
• Travel dates and destination information for itinerary planning

Usage and Technical Information

Our website and digital platforms automatically collect certain technical data:

• IP address and general geographic location
• Browser type, operating system, and device information
• Pages viewed, time spent on site, and navigation patterns
• Referral source that directed you to our website
• Cookie identifiers for site functionality and analytics

Vehicle Usage Data

During your rental period, we may collect vehicle-related information for maintenance scheduling and quality assurance:

• Mileage traveled during rental period
• Fuel consumption patterns for efficiency monitoring
• Vehicle location data for roadside assistance purposes only
• Maintenance alerts or mechanical concerns reported

How We Use Your Information

Service Delivery

Your personal information enables us to process reservations, verify driver eligibility, coordinate vehicle delivery, and provide support throughout your rental period. We use contact details to send booking confirmations, pickup instructions, and important service updates.

Payment Processing

Financial information is used to authorize payment cards, process rental charges, manage security deposits, and generate invoices. Payment data is transmitted through encrypted channels and processed by certified payment service providers who maintain PCI DSS compliance.

Customer Support and Communication

We use your email address and phone number to respond to inquiries, provide itinerary recommendations, coordinate schedule changes, and assist with any concerns during your rental. Communication frequency depends on your service package and preferences.

Service Improvement and Analytics

Aggregated and anonymized usage data helps us understand client preferences, optimize our fleet selection, improve website functionality, and enhance overall service quality. This analysis does not identify individual users.

Legal Compliance

We may process personal data to comply with legal obligations, respond to lawful requests from authorities, enforce rental agreements, prevent fraud, and protect the safety of our clients and staff.

Information Sharing and Third Parties

Aureum does not sell, rent, or trade personal information to third parties for marketing purposes. We share data only under these specific circumstances:

Service Providers

We work with trusted partners who assist in operating our business:

• Payment processors for secure transaction handling
• Cloud hosting services for data storage and website operation
• Email service providers for communication delivery
• Analytics platforms for website performance monitoring
• Insurance providers for coverage verification

These partners are contractually bound to protect your information and use it only for specified services.

Legal Requirements

We may disclose information when required by Taiwan law, court order, or government request, or when necessary to protect our legal rights, prevent fraud, or ensure client and employee safety.

Data Security Measures

Aureum implements comprehensive safeguards to protect personal information from unauthorized access, alteration, or disclosure:

• SSL/TLS encryption for data transmitted between your browser and our servers
• Encrypted storage of sensitive information including payment details
• Access controls limiting staff access to personal data based on job requirements
• Regular security audits and vulnerability assessments
• Secure disposal of paper documents containing personal information
• Staff training on data protection practices and privacy obligations
• Intrusion detection and monitoring systems

While we employ industry-standard security measures, no internet transmission or electronic storage system is completely secure. We encourage you to use strong passwords and protect your account credentials.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site performance, and remember your preferences. Cookies are small text files stored on your device by your web browser.

Types of Cookies We Use

• Essential Cookies: Required for basic site functionality, navigation, and security. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website, which pages are most popular, and how we can improve user experience.
• Preference Cookies: Remember your settings and choices to provide a personalized experience on return visits.

You can manage cookie preferences through our Cookie Policy page or your browser settings. Disabling certain cookies may limit website functionality.

Data Retention

We retain personal information for the following periods:

• Active Reservations: Until rental completion plus 90 days for billing and customer service
• Account Information: For the duration of account activity plus 3 years after account closure
• Transaction Records: 7 years for tax and accounting compliance requirements
• Marketing Communications: Until you unsubscribe or request removal
• Legal Matters: As required by applicable law or until resolution of disputes

After retention periods expire, we securely delete or anonymize personal information using industry-standard data destruction methods.

Your Privacy Rights

Under Taiwan's Personal Data Protection Act and international privacy standards, you have the following rights:

Right to Access

You may request a copy of the personal information we hold about you. We will provide this data in a commonly used electronic format within 30 days of your request.

Right to Rectification

If your personal information is inaccurate or incomplete, you may request corrections. We will update our records within 15 business days after verification.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes collected, you withdraw consent, or there are no overriding legal grounds for retention.

Right to Data Portability

You may receive your personal data in a structured, machine-readable format and request transfer to another service provider where technically feasible.

Right to Object

You may object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests rather than consent.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing prior to withdrawal.

To exercise these rights, contact us at [email protected]. We may require identity verification before processing requests.

Children's Privacy

Aureum's services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. Rental agreements require drivers to be at least 21 years old with valid licensing.

If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete such data from our systems.

International Data Transfers

Your information is primarily stored and processed in Taiwan. Some service providers may process data in other jurisdictions, including cloud hosting infrastructure and payment processing systems.

When transferring data internationally, we ensure adequate protection through contractual safeguards, certification schemes, or other mechanisms recognized under Taiwan law and international privacy frameworks.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. When material changes occur, we will notify you through email or prominent website notice at least 30 days before the changes take effect.

Continued use of our services after policy changes indicates acceptance of the updated terms. We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact Information

For privacy-related questions, requests to exercise your rights, or concerns about our data practices, please contact our privacy team:

Supervisory Authority

If you believe your privacy rights have been violated or you are dissatisfied with our response to your concerns, you have the right to lodge a complaint with Taiwan's National Development Council or other relevant data protection authority.