Privacy Policy
Last updated: April 2026 · Version 2.0
1. Introduction
XanhMoto (“we”, “us”) is committed to protecting the privacy and personal data of our customers (“you”). This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you use our website and EV rental services.
This policy complies with:
- Cybersecurity Law 2018 (Law No. 24/2018/QH14) of Vietnam.
- Decree 13/2023/ND-CP on Personal Data Protection.
- Principles of the GDPR (General Data Protection Regulation) — applied when serving international visitors.
By using our services, you agree to the terms outlined in this policy. See also our Terms of Service.
2. Information We Collect
2.1. Information Provided Directly by You
| Information Type | Details | Collection Time |
|---|---|---|
| Personal Data | Full name, phone number, email | Booking or registering an account |
| Identity Documents | Photo of ID / Passport | Vehicle pickup (identity verification) |
| Order Details | Rental duration, pickup/dropoff location, vehicle model, accessories | When placing a booking |
| Feedback | Reviews, ratings, complaints | After rental completion |
2.2. Automatically Collected Information
| Information Type | Details | Purpose |
|---|---|---|
| Vehicle GPS Data | Real-time vehicle location | Technical support, locating vehicle, emergency response |
| Access Logs | IP address, browser type, device specs | Security audit, experience optimization |
| Cookies | Login sessions, language preferences | Maintaining user session state |
Data Minimization Principle: XanhMoto only collects data strictly required for service delivery. We do not directly collect financial or payment card data on our systems.
3. Purpose of Information Use
Your personal data is used for the following purposes:
- Service Delivery: Processing bookings, verifying identity, handing over vehicles, technical support.
- Communication: Order updates, pickup/return reminders, emergency alerts via SMS/email.
- Safety & Asset Protection: GPS tracking for vehicle retrieval and emergency assistance.
- Service Improvement: Anonymous analytics to optimize platform experience.
- Legal Compliance: Fulfilling statutory obligations and regulatory requests.
We do not use personal information for third-party advertising or sell data in any form.
4. Legal Basis for Processing
- Contract Performance: Necessary for executing the rental contract between you and XanhMoto.
- Consent: Express consent granted when submitting your booking.
- Legitimate Interests: Vehicle tracking for asset security and fraud prevention.
- Legal Obligation: Compliance with Vietnamese record-keeping laws.
5. Data Retention & Period
| Data Type | Retention Period |
|---|---|
| Photo of ID / Passport | Permanently deleted within 30 days post rental completion |
| Booking Records | Retained for 24 months for accounting and customer care |
| GPS Tracking Logs | Deleted within 30 days post vehicle return (unless in dispute) |
| Contact Profile | Retained until customer deletion request |
Upon expiration of the retention period, data is permanently deleted or anonymized.
6. Security Measures
- Encryption: All web traffic encrypted via HTTPS/TLS. Sensitive data encrypted at rest.
- Access Control: Strict role-based access control (RBAC) limited to authorized staff.
- Infrastructure: Secure cloud servers with automated backups and security audits.
- Incident Response: Affected customers will be notified within 72 hours of any security breach.
7. Third-Party Sharing
XanhMoto never sells or rents customer personal data. Information is shared only with:
| Recipient | Scope | Purpose |
|---|---|---|
| Delivery Staff | Name, phone number, location | Vehicle handover |
| Payment Gateways | Order ID, total amount | Payment processing |
| Law Enforcement | As required by law | Court orders, legal investigations |
| Traffic Authorities | Rental contract, ID copy | Transferring traffic violation fines if renter evades penalty payment |
8. Cookies & Tracking Technologies
We use essential cookies to maintain user sessions and language preferences. You may manage cookie settings in your browser.
9. Your Rights
You have the right to access, correct, delete, or restrict processing of your personal data. We respond to data privacy requests within 15 business days.
10. Protection of Minors
Our service is intended for users aged 16 and older. We do not knowingly collect personal data from children under 16.
11. Policy Changes
Updates to this policy will be posted on this page with the effective date updated at the top.
12. Contact Us
For data privacy inquiries or requests, contact our team at:
XanhMoto — Data Protection Office
Email your privacy request to:
xanhmoto@gmail.comResponse within
15 business days