Privacy Policy

1. Data controller

MF International Partners Co. Ltd., registered in Thailand under no. 0835565008037. We operate EV Rental Phuket.

Registered office: Phuket, Thailand.
Email (privacy): privacy@evrentalphuket.com
Email (general): contact@evrentalphuket.com

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity & contact: name, email, phone, nationality, preferred language.
• Booking data: chosen plan, start date, pick-up location, notes.
• KYC & rental data: passport or ID, driving licence, visa or entry stamp, emergency contact.
• Payment data: processed by Stripe. We receive transaction metadata only — no full card numbers stored.
• Technical data: IP, browser, device, pages visited, approximate city, via cookies — only with consent. See Cookie Policy.
• Communications: messages sent by email, WhatsApp or contact forms.

3. Purposes and legal bases

Under the PDPA we rely on:

• Contract performance — process reservation, verify eligibility, deliver vehicle, manage deposit, administer rental.
• Legal obligation — comply with Thai tax, accounting, road-traffic and anti-fraud laws.
• Legitimate interest — protect fleet, prevent fraud, secure site, answer inquiries.
• Consent — non-essential cookies, analytics, marketing. Withdraw consent any time.

4. Data retention

• Booking & KYC: retained for the rental duration plus up to 5 years per Thai accounting rules.
• Contact messages: up to 24 months unless related to an active rental.
• Cookie & analytics data: up to 13 months or until consent withdrawn.

5. Disclosure

We share data only with:

• Service providers acting on our instructions (hosting — Vercel; email — Resend; payments — Stripe; identity — Supabase).
• Thai authorities when legally required.
• Insurers in the event of a claim.

We never sell, rent or share your personal data for commercial or marketing purposes. Identity documents such as your passport, driving licence or visa are collected and kept solely to meet legal, tax and safety obligations — never for any commercial purpose. Transfers outside Thailand use PDPA-recognised safeguards.

6. Your rights

Subject to PDPA conditions, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion or destruction when no longer necessary or consent withdrawn.
• Request restriction of or object to processing based on legitimate interest.
• Request portability of data you provided, in a machine-readable format.
• Withdraw any consent previously given.
• Lodge a complaint with Thailand's PDPC.

privacy@evrentalphuket.com — Email privacy@evrentalphuket.com. We respond within 30 days.

7. Security

We use HTTPS, access controls and encrypted storage. Payment data handled by PCI-DSS compliant providers.

8. Children

Services not directed at under-18s. Drivers must be at least 21.

9. Updates

We may update this policy. The last updated date reflects the latest version. Material changes announced on the site.