PRIVACY POLICY

1. Introduction

Basalt is committed to protecting the privacy and security of personal information collected through our car rental services. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our services, website, or contact our team.

We comply with Taiwan's Personal Data Protection Act and handle all personal information with care and transparency. If you have questions about our privacy practices, please contact us at [email protected].

2. Data We Collect

We collect personal information necessary to provide car rental services and fulfill legal obligations. The types of data we collect include:

Information You Provide Directly

• Contact details (name, email address, phone number)
• Identification information (driver's license number, passport details for verification)
• Rental preferences and travel itinerary details
• Payment information processed through secure third-party payment processors
• Communication records with our support team

Automated Collection

• Website usage data (pages visited, time spent, browser type)
• IP address and general location information
• Cookie data for website functionality and analytics (see Cookie Policy)
• Device information for service optimization

3. How We Use Your Data

Personal information is used for the following purposes:

• Processing rental reservations and managing vehicle delivery logistics
• Verifying driver credentials and maintaining insurance compliance
• Providing customer support and responding to inquiries
• Communicating rental confirmations, schedule changes, and service updates
• Improving service quality through feedback analysis
• Website functionality and user experience enhancement
• Legal compliance and dispute resolution
• Sending marketing communications (only with your consent)

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill rental agreements and provide requested services
• Legal Obligation: Compliance with Taiwan regulations, insurance requirements, and tax laws
• Legitimate Interest: Business operations, service improvement, and fraud prevention
• Consent: Marketing communications and optional data processing (you may withdraw consent at any time)

5. Data Sharing and Third Parties

We share personal information only when necessary for service delivery or legal compliance:

Service Providers

• Insurance companies for coverage verification and claims processing
• Payment processors for secure transaction handling
• Vehicle maintenance and roadside assistance providers
• Cloud hosting services for data storage (with appropriate security measures)

Legal Requirements

We may disclose personal information when required by law, court order, or government request, or to protect our rights, property, or safety of our customers and staff.

We do not sell personal information to third parties or use it for unrelated marketing purposes without explicit consent.

6. Data Retention

We retain personal information only as long as necessary for service delivery and legal compliance:

• Rental agreement records: 7 years (tax and legal compliance)
• Communication records: 3 years
• Insurance documentation: As required by insurance providers and regulations
• Marketing contact lists: Until consent is withdrawn
• Website analytics data: 26 months

After retention periods expire, personal data is securely deleted or anonymized.

7. Data Security

We implement technical and organizational measures to protect personal information from unauthorized access, loss, or misuse:

• Encrypted data transmission using SSL/TLS protocols
• Secure cloud storage with access controls and regular backups
• Staff training on data protection procedures
• Regular security audits and system updates
• Physical security measures for document storage

While we take reasonable precautions, no internet transmission is completely secure. We encourage you to protect your account credentials and contact us immediately if you suspect unauthorized access.

8. Your Rights

Under Taiwan's Personal Data Protection Act, you have the following rights regarding your personal information:

• Access: Request a copy of personal data we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of personal data (subject to legal retention requirements)
• Data Portability: Receive your data in a structured, commonly used format
• Object: Oppose processing for direct marketing or legitimate interest grounds
• Withdraw Consent: Revoke consent for optional data processing at any time
• Lodge Complaint: File a complaint with Taiwan's relevant data protection authority

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies and Tracking

Our website uses cookies to enhance functionality, analyze traffic, and improve user experience. We use:

• Essential Cookies: Required for website operation (cannot be disabled)
• Analytics Cookies: Help us understand site usage patterns
• Preference Cookies: Remember your settings and choices

For detailed information about our cookie usage and how to manage preferences, please review our Cookie Policy.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. Renters must be at least 18 years old and possess a valid driver's license. If we become aware of information collected from a minor, we will delete it promptly.

11. International Data Transfers

Personal data is primarily stored and processed within Taiwan. If data is transferred internationally for service provision (such as cloud hosting), we ensure appropriate safeguards are in place through contractual protections and compliance with applicable data protection standards.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website or via email for active customers. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information

For questions about this Privacy Policy, to exercise your data rights, or to report privacy concerns, please contact: