Privacy Policy

1. Introduction

gallivamos ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our heritage luxury car rental services or visit our website.

This policy applies to all personal data we collect through our services, website, telephone enquiries, email communications, and in-person interactions at our Singapore location.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].

2. Information We Collect

2.1 Personal Data You Provide

We collect information that you voluntarily provide when you:

• Complete our enquiry or booking forms (name, email address, telephone number)
• Make a reservation (additional details including driving licence information, payment information)
• Communicate with our concierge team (preferences, special requirements)
• Subscribe to our communications (email address, communication preferences)
• Provide feedback or testimonials (your comments, ratings)

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Technical information (IP address, browser type, device information)
• Usage data (pages visited, time spent, referring website)
• Cookie data (as described in our Cookie Policy)

2.3 Information from Third Parties

We may receive information from:

• Payment processors (transaction confirmation, payment status)
• Analytics providers (website usage statistics)
• Partner venues and hotels (referral information with your consent)

3. Legal Basis for Processing

Under Singapore's Personal Data Protection Act (PDPA), we process your personal data on the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract Performance: Processing is necessary to fulfill our service agreement with you
• Legal Obligations: Processing is required to comply with Singapore law
• Legitimate Interests: Processing is necessary for our business operations, provided your rights are not overridden

4. How We Use Your Information

We use your personal data to:

• Process and manage your reservations and service requests
• Provide concierge support and personalized service recommendations
• Communicate important information about your booking
• Process payments and maintain financial records
• Send marketing communications (with your consent)
• Improve our services based on feedback and usage patterns
• Maintain our website functionality and security
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements

5. Information Sharing and Disclosure

5.1 Service Providers

We share personal data with trusted third-party service providers who assist us in:

• Payment processing (secure transaction handling)
• Website hosting and maintenance
• Email communications and marketing
• Analytics and performance monitoring

5.2 Business Partners

With your consent, we may share limited information with:

• Partner hotels for valet parking coordination
• Event venues for occasion concierge services
• Professional photographers for heritage photography services

5.3 Legal Requirements

We may disclose your information when required by Singapore law or to protect our rights, property, or safety, or that of others.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission (SSL/TLS)
• Secure storage systems with access controls
• Regular security assessments and updates
• Staff training on data protection practices
• Confidentiality agreements with service providers

While we strive to protect your personal data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but continuously work to maintain appropriate safeguards.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by Singapore law. Retention periods vary based on the type of data:

• Booking records: Seven years from transaction date (financial recordkeeping requirements)
• Marketing communications: Until you withdraw consent or we no longer have legitimate business need
• Website analytics: Typically 24-26 months
• Correspondence: Three years from last contact

When personal data is no longer required, we securely delete or anonymize it.

8. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

• Access: Request copies of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of Consent: Withdraw consent for processing where consent was the legal basis
• Data Portability: Request transfer of your data to another service provider (where technically feasible)
• Objection: Object to processing based on legitimate interests

To exercise these rights, please contact [email protected]. We will respond to your request within 30 days in accordance with PDPA requirements. Please note that some requests may require verification of your identity to protect your data security.

9. Marketing Communications

With your consent, we may send you marketing communications about our services, special occasions, and heritage motoring experiences. You may:

• Opt out of marketing emails using the unsubscribe link in each message
• Contact us at [email protected] to update your communication preferences
• Continue to receive transactional messages related to your bookings even after opting out of marketing

10. Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience and analyze site usage. For detailed information about the cookies we use and your choices regarding them, please see our Cookie Policy.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected] so we can delete such information.

12. International Data Transfers

Your personal data is primarily stored and processed in Singapore. If we transfer data outside Singapore, we ensure appropriate safeguards are in place in accordance with the PDPA, such as standard contractual clauses or adequacy decisions.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when the policy was last revised. We encourage you to review this policy regularly. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

15. Regulatory Authority

If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with: