Privacy Policy

SureRide Singapore operating under legal entity HTEK Technologies Pte Ltd., operating under the business (“SureRide Singapore”, “we”, “us” or “our”) as the official licensee of SureRide, respects the privacy of individuals and is committed to protecting personal data entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, protect and otherwise process personal data in connection with the SureRide Singapore mobile application, website, booking platform, transportation services, customer support channels and related services (collectively, the “Platform”).

This Privacy Policy applies to passengers, drivers, transportation partners, account holders, visitors to our website and other individuals whose personal data we process in connection with the Platform.

By using the Platform or providing personal data to us, you acknowledge the practices described in this Privacy Policy.

Depending on how you use the Platform, we may collect different categories of personal data.

This may include:

• Name and identification details.
• Mobile telephone number, email address and other contact information.
• Account login information and authentication details.
• Profile information and account preferences.
• Pickup and drop-off locations.
• Location and trip information, including information relating to routes, journey times and destinations.
• Booking, cancellation and transaction information.
• Payment-related information, including payment method details and transaction references. Where payments are processed by third-party payment providers, we may receive information necessary to confirm and administer the transaction.
• Vehicle, driver and transportation-provider information where applicable.
• Ratings, reviews, feedback and complaints.
• Communications with SureRide Singapore, including customer-support enquiries.
• Information contained in communications between passengers and drivers where the Platform provides such functionality.
• Device information, including device type, operating system, unique device identifiers and application version.
• IP address, browser information and technical information concerning access to the Platform.
• Usage information, including interactions with Platform features.
• Information relating to promotions, vouchers, rewards and referrals.
• Information necessary to investigate fraud, misuse, security incidents or violations of our terms.
• Information that you voluntarily provide to us.
• Any other personal data reasonably necessary for the purposes described in this Privacy Policy or otherwise permitted or required by law.

Where reasonably necessary and permitted by applicable law, we may also collect information from third parties, including payment processors, transportation partners, service providers, identity-verification providers and other persons involved in providing or supporting the Platform.

We may collect personal data in several ways, including when you:

• Create or update a SureRide Singapore account.
• Request, accept, modify or cancel a Ride Service.
• Use the Platform or interact with its features.
• Provide information through customer support.
• Make or receive payments.
• Submit a rating, review, complaint or other feedback.
• Communicate with us or a driver through Platform-supported communication channels.
• Participate in promotions, surveys, competitions or referral programmes.
• Visit or interact with our website.
• Provide information to us voluntarily.
• Contact us through telephone, email, social media or other communication channels.
• Use a device or application that automatically provides technical or location information.
• Interact with our service providers or business partners in circumstances where they lawfully provide information to us.

Where location services are enabled, we may collect location information to facilitate bookings, identify pickup and drop-off locations, provide navigation-related functionality, improve safety, prevent fraud and support the operation of the Platform.

We may collect, use and process personal data for purposes including:

• Creating and administering user accounts.
• Processing and managing Ride Services.
• Matching passengers with available drivers or transportation providers.
• Confirming bookings and providing estimated arrival information.
• Processing payments, refunds, credits and applicable charges.
• Providing customer service and responding to enquiries.
• Communicating booking, account, payment, safety and service information.
• Providing location-based functionality.
• Improving reliability, performance and functionality of the Platform.
• Monitoring and improving safety and security.
• Detecting, preventing and investigating fraud, abuse, unauthorised activity and other misconduct.
• Verifying accounts or information where reasonably necessary.
• Resolving disputes and investigating complaints.
• Managing ratings, reviews and feedback.
• Administering promotions, rewards, referral programmes and other offers.
• Conducting analytics, research and service development.
• Maintaining business, accounting, operational and transaction records.
• Meeting applicable legal, regulatory, tax, licensing and reporting obligations.
• Protecting our rights, property, systems, users and business operations.
• Establishing, exercising or defending legal claims.
• Managing corporate transactions or reorganisations.
• Sending marketing and promotional communications where permitted by applicable law.
• Performing any other purpose notified to you at the time of collection or otherwise permitted or required by law.

We will not use personal data for purposes that are incompatible with the purposes for which it was collected unless permitted or required by applicable law or where we have obtained the necessary consent.

Where required under the Singapore Personal Data Protection Act 2012 (“PDPA”), we will obtain consent before collecting, using or disclosing personal data.

Depending on the circumstances, we may also collect, use or disclose personal data without consent where an exception under the PDPA applies, including where the collection, use or disclosure is necessary or permitted for a purpose recognised under applicable law.

You may withdraw consent where applicable by contacting us using the details provided in this Privacy Policy.

Withdrawal of consent does not affect the lawfulness of any collection, use or disclosure that occurred before the withdrawal.

If you withdraw consent, we will explain the likely consequences where relevant. Depending on the nature of the withdrawal, we may no longer be able to provide certain Platform functions, Ride Services or other services that require the relevant information.

Certain Platform features require access to location information.

Location information may be used to:

• Identify pickup and drop-off locations.
• Match passengers with drivers or transportation providers.
• Provide estimated arrival times.
• Support routing and journey management.
• Improve safety and service reliability.
• Investigate complaints, disputes and incidents.
• Detect fraudulent or unusual activity.
• Improve the Platform and transportation services.

You may be able to control location permissions through your device settings. Disabling location access may prevent or impair certain Platform features.

Payments may be processed through third-party payment processors.

Depending on the payment method used, we may collect or receive information such as payment status, transaction identifiers, payment method type, partial payment details and other information necessary to administer the transaction.

We may not receive or retain complete payment-card information where that information is processed directly by a third-party payment provider.

Payment providers may process personal data according to their own privacy policies and terms.

We may disclose personal data where reasonably necessary for the purposes described in this Privacy Policy.

Recipients may include:

• Drivers and transportation providers, where necessary to facilitate or complete a Ride Service.
• Payment processors and financial service providers.
• Cloud hosting, data storage and technology service providers.
• Customer-support and communications providers.
• Mapping, navigation and location service providers.
• Identity verification and fraud-prevention providers.
• Information technology, cybersecurity and software providers.
• Professional advisers, including lawyers, accountants, auditors and insurers.
• Regulators, government authorities, law-enforcement agencies and other public bodies where required or permitted by law.
• Corporate transaction counterparties and their professional advisers where reasonably necessary in connection with a merger, acquisition, restructuring, financing or sale of assets.
• Other parties where you have provided consent or where disclosure is otherwise permitted or required by law.

We do not sell personal data as a commercial product.

Where necessary to facilitate a Ride Service, we may provide a driver or transportation provider with information such as your name, pickup location, destination, booking details and other information reasonably necessary to perform the service.

Similarly, we may receive personal data about drivers and transportation providers, including identity, contact, vehicle, licensing, operational and transaction information.

Such information may be used for account administration, service provision, safety, compliance, fraud prevention, dispute management and other purposes described in this Privacy Policy.

Drivers and transportation providers are required to handle personal data made available to them through the Platform appropriately and in accordance with applicable requirements.

We may communicate with you through telephone, SMS, email, push notifications, in-app messaging and other communication channels.

Operational communications may include booking confirmations, driver-arrival information, cancellations, payment notifications, safety notifications, account alerts and customer-support communications.

Where permitted by applicable law, communications with customer support or through Platform functionality may be recorded, logged or retained for quality assurance, training, security, dispute resolution and record-keeping purposes.

Where legally required, we will obtain any necessary consent before recording communications.

We may communicate with you through telephone, SMS, email, push notifications, in-app messaging and other communication channels.

Operational communications may include booking confirmations, driver-arrival information, cancellations, payment notifications, safety notifications, account alerts and customer-support communications.

Where permitted by applicable law, communications with customer support or through Platform functionality may be recorded, logged or retained for quality assurance, training, security, dispute resolution and record-keeping purposes.

Where legally required, we will obtain any necessary consent before recording communications.

Where permitted by applicable law, we may send information about promotions, new services, rewards, offers and other marketing communications.

Where consent is required, we will obtain the appropriate consent before sending marketing communications.

You may opt out of marketing communications by using the unsubscribe or opt-out mechanism provided in the communication or by contacting us.

Even if you opt out of marketing communications, we may continue sending non-promotional communications necessary to administer your account, bookings, payments, safety or use of the Platform.

Our website and Platform may use cookies, software development kits, pixels, device identifiers and similar technologies.

These technologies may be used to:

• Maintain account sessions.
• Remember preferences.
• Improve Platform functionality.
• Understand how users interact with the Platform.
• Detect security issues and fraudulent activity.
• Measure performance.
• Conduct analytics.
• Improve user experience.
• Support marketing and promotional activities where permitted.

You may be able to control certain cookies and similar technologies through your browser or device settings.

Disabling certain technologies may affect the functionality of the Platform.

We may analyse aggregated, statistical or de-identified information concerning use of the Platform.

This may include information concerning booking volumes, locations, service demand, application performance, feature usage and operational patterns.

We may use aggregated or appropriately de-identified information for analytics, research, product development, business planning, service improvement and other lawful purposes.

Where information has been properly anonymised so that individuals can no longer reasonably be identified, it may no longer constitute personal data under applicable law.

We take reasonable steps to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.

Security measures may include access controls, authentication mechanisms, encryption where appropriate, monitoring, technical safeguards and organisational controls.

However, no method of electronic transmission, storage or processing can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should notify us promptly if you suspect unauthorised access to your account.

SureRide Singapore may use service providers, technology infrastructure and other resources located outside Singapore.

Where personal data is transferred outside Singapore, we will take steps required under applicable Singapore law to ensure that the transferred personal data receives a standard of protection comparable to that required under the PDPA.

Depending on the circumstances, this may involve contractual safeguards, approved transfer mechanisms, assessments or other measures permitted under applicable law.

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected or for other legitimate business, legal, regulatory, security, accounting or dispute-resolution purposes.

The applicable retention period will depend on factors including:

• The nature of the information.
• The purpose for which it was collected.
• Whether the information is required to provide ongoing services.
• Legal and regulatory requirements.
• The need to investigate disputes, fraud or security incidents.
• Our legitimate business and record-keeping requirements.

When personal data is no longer reasonably required, we will take appropriate steps to delete, destroy or anonymise it, subject to applicable legal and operational requirements.

Subject to the exceptions and requirements under applicable law, you may request access to personal data that we hold about you and information about how we have used or disclosed that personal data.

You may also request correction of personal data held by us where it is inaccurate or incomplete.

Requests should be submitted using the contact details provided below.

We may need to verify your identity before processing a request.

We may charge a reasonable fee for an access request where permitted by applicable law, and we will provide information about any applicable fee before processing the request where required.

We may decline or limit a request where permitted or required by applicable law.

Where our collection, use or disclosure of your personal data is based on consent, you may withdraw that consent by contacting us.

Withdrawal requests should identify the relevant consent and provide sufficient information for us to process the request.

Depending on the circumstances, withdrawal may result in the suspension or limitation of certain Platform features or services.

We will explain the consequences of withdrawal where appropriate.

We rely on users to provide accurate and current information.

You should update your account information when it changes and notify us if you become aware that information we hold about you is inaccurate or incomplete.

We will take reasonable steps to ensure that personal data collected, used or disclosed by us is accurate and complete where it is likely to be used to make a decision that affects you or disclosed to another organisation.

The Platform is not intended for children who are not legally capable of entering into an agreement for the relevant services.

We do not knowingly collect personal data from children except where permitted or required by law and where appropriate safeguards are in place.

If you believe that a child has provided personal data to us improperly, please contact us so that we can investigate and take appropriate action.

The Platform may contain links to third-party websites, applications or services.

We are not responsible for the privacy practices, content or security of third-party services that we do not control.

You should review the privacy policies of third-party services before providing them with personal data.

We may collect, use and disclose personal data where reasonably necessary to:

• Detect and prevent fraud.
• Investigate suspicious activity.
• Protect passengers, drivers and other individuals.
• Investigate accidents, incidents and complaints.
• Prevent misuse of the Platform.
• Protect our systems and infrastructure.
• Comply with legal or regulatory requirements.
• Respond to lawful requests from government authorities or law enforcement.
• Establish, exercise or defend legal claims.

Where permitted by law, we may retain relevant information after an account has been closed where reasonably necessary for these purposes.

We may update this Privacy Policy from time to time to reflect changes to our Platform, business practices, technology, legal requirements or regulatory obligations.

The updated version will be made available through the Platform or our website.

Where required by law, we will provide additional notice or obtain consent before implementing material changes.

The “Last Updated” date at the beginning of this Privacy Policy indicates when it was most recently revised.

If you have questions, concerns, requests or complaints relating to this Privacy Policy or our handling of personal data, please contact us.

SureRide Singapore

HTEK Technologies Pte Ltd.

Email: privacy@sureride.com.sg

We will endeavour to respond to personal-data enquiries within a reasonable period and in accordance with applicable Singapore law.

This Privacy Policy is governed by the laws of Singapore, subject to any mandatory rights or protections applicable to you under Singapore law.

Nothing in this Privacy Policy is intended to exclude or restrict any right or protection that cannot lawfully be excluded or restricted under the Singapore Personal Data Protection Act 2012 or other applicable legislation.