Privacy Policy

1. Data controller

The data controller is MF International Partners Co. Ltd., a company registered in the Kingdom of Thailand under registration number 0835565008037. Registered activity: digital solutions agency (custom web development, AI integration, branding, SEO). The Company operates the EV Rental Phuket service.

Registered office: Phuket, Thailand (full postal address available on request).
Phone: +66 63 623 7977
Email (privacy): privacy@evrentalphuket.com
Email (general): contact@evrentalphuket.com

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity & contact data: first and last name, email, phone number, nationality, preferred language.
• Booking data: chosen rental plan, start date, pick-up location, any notes you submit.
• KYC & rental data (when you reserve a vehicle): passport or national ID, driving licence, visa or entry stamp, emergency contact.
• Payment data: processed by our payment provider (Stripe). We receive transaction metadata only — we do not store full card numbers.
• Technical data: IP address, browser type, device, pages visited, approximate location (city), collected via cookies and similar technologies — only with your consent where required. See our Cookie Policy.
• Communications: messages you send us by email, WhatsApp, or contact forms.

3. Purposes and legal bases

Under the PDPA we rely on the following legal bases:

• Contract performance — to process your reservation, verify eligibility, deliver the vehicle, handle the deposit, and manage the rental.
• Legal obligation — to comply with Thai tax, accounting, road-traffic, and anti-fraud laws.
• Legitimate interest — to protect our fleet, prevent fraud, ensure site security, and answer inquiries.
• Consent — for non-essential cookies, analytics, and any marketing communications. You may withdraw consent at any time without affecting processing already carried out.

4. Data retention

• Booking & KYC records: retained for the duration of the rental and up to 5 years afterwards to comply with Thai accounting and liability rules.
• Contact messages: up to 24 months unless they relate to an active rental.
• Cookies and analytics data: retained for up to 13 months, or until you withdraw consent.

5. Disclosure of data

We share personal data only with:

• Service providers acting on our instructions (hosting — Vercel Inc.; email — Resend; payments — Stripe; identity storage — Supabase).
• Thai authorities (police, Department of Land Transport, tax office) when legally required.
• Insurance providers in the event of a claim.

We never sell your personal data. Any transfer outside Thailand takes place under safeguards recognised by the PDPA (contractual clauses or adequacy).

6. Your rights under the PDPA

Subject to the conditions set out in the PDPA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion or destruction when data is no longer necessary or consent has been withdrawn.
• Request restriction of processing or object to processing based on legitimate interest.
• Request portability of data you provided to us, in a commonly used machine-readable format.
• Withdraw any consent you previously gave (for example, for analytics cookies or marketing emails).
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, email privacy@evrentalphuket.com. We will respond within 30 days.

7. Security

We use HTTPS, access controls, and encrypted storage to protect personal data. Payment information is handled directly by PCI-DSS compliant providers.

8. Children

Our services are not directed at persons under 18. We do not knowingly collect personal data from minors. Drivers must be at least 21.

9. Updates to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest version. Material changes will be announced on the site.