Privacy Notice

1. Introduction

AN HOA PHAT RENT A CAR COMPANY LIMITED (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy describes how the AvisC mobile application (“AvisC” or the “App”) collects, accesses, uses, stores, discloses, and protects personal information when you use our application and related vehicle rental services.
This policy applies to users of AvisC on Android and iOS devices.
By using AvisC, you acknowledge this Privacy Policy. Where consent is required by applicable law, we will request your consent before processing the relevant personal information.

2. Information We Collect

The information processed by AvisC depends on the features you use, the permissions you grant, and the information you provide.

2.1. Account and Contact Information

When you register for an account or use our services, we may collect your name, phone number, email address, account identifier, and other information necessary to manage your account and provide our services.

2.2. Booking and Vehicle Rental Information

When you make or manage a vehicle rental booking, we may process booking details, rental dates and times, pickup and drop-off locations, selected vehicle information, journey records, rental status, and communications related to your booking.
This information is used to provide and manage vehicle rental services, support journey confirmation, and resolve service-related issues.

2.3. Camera and Photographs

AvisC may access your device camera to take photographs for confirming the beginning or end of a journey and documenting vehicle condition.
Photographs captured or submitted through the App may be associated with a booking or journey record. Where necessary, these photographs may be transmitted to our servers for verification, recordkeeping, customer support, and dispute resolution.
Camera access is subject to your device permissions. If you deny camera access, certain photograph-based journey confirmation features may not be available.

2.4. Photo Library and Saved Images

AvisC may allow you to select photographs from your device's photo library or save photographs to your device.
Access to photographs depends on the permissions granted and the operating system’s photo access controls. The App does not necessarily access or upload every photograph stored on your device merely because photo library permission is available.
Photographs selected or submitted by you may be processed for the relevant booking, journey confirmation, or vehicle documentation feature.

2.5. Location Information — Foreground and Background

AvisC uses location-related functionality to support map displays, identify nearby branches, and provide journey-related services.
Foreground location: When you use relevant features, AvisC may access your device location while the App is in use to display maps, identify nearby branches, or support other requested location-based functions.
Background location: If background location access is enabled and you grant the required permission, AvisC may access your location while the App is not actively displayed, where necessary to support journey-related functionality.
Location information may be associated with a booking or journey and transmitted to our servers or relevant service providers when necessary to provide the requested service.
Location access is subject to your device settings and the permissions you grant. You may change these permissions at any time through your device settings. Disabling location access may limit certain map, nearby branch, or journey-related features.
Where required, AvisC will provide an appropriate disclosure and request permission before accessing background location information.

2.6. Microphone and Audio Features

AvisC may request microphone access to support audio-related features provided by the App.
Microphone access is subject to your device permissions and the relevant feature’s operation. Audio data will be collected, transmitted, or stored only where required by the functionality actually used.
If a feature records or transmits audio, the App should provide appropriate information about that operation before the recording or transmission occurs.
You can manage microphone permissions through your device settings. Disabling microphone access may affect features that depend on it.

2.7. Flash and Torch Functionality

AvisC may use your device’s camera flash or torch to help you take photographs in low-light conditions.
Using the flash does not, by itself, involve collecting a separate category of personal information.

2.8. Push Notifications

AvisC may send push notifications relating to booking confirmations, booking status, journey updates, service announcements, promotions, and other relevant information.
To deliver notifications, the App may process push notification tokens, device or App identifiers, notification preferences, and delivery-related technical information.
Notifications may be delivered through platform services such as Firebase Cloud Messaging (FCM) on Android or Apple Push Notification service (APNs) on iOS, as applicable to the App’s implementation.
You can manage notification permissions through your device settings and, where available, through the App’s notification preferences.
Promotional notifications will be handled in accordance with applicable consent and marketing requirements.

2.9. iOS Tracking and Advertising Identifiers

On iOS, AvisC may display Apple’s App Tracking Transparency permission request if the App or its integrated services perform activities that require such permission under Apple’s rules.
If the App implements tracking and you grant permission, relevant identifiers, such as the Identifier for Advertisers (IDFA), may be processed for permitted advertising measurement, campaign attribution, or related purposes.

If you deny tracking permission, AvisC must respect that choice and must not perform tracking activities that require Apple’s authorization.
The presence of an App Tracking Transparency prompt does not, by itself, mean that the App collects or shares the IDFA. Actual processing depends on the App’s implementation and integrated third-party services.

2.10. Internet Connection and Technical Information

AvisC requires internet connectivity to communicate with our servers and provide online services, including booking management and journey-related functionality.
When the App communicates with our servers, technical information may be processed, such as IP addresses, connection information, request logs, App version, operating system information, and diagnostic data, depending on the implementation.

This information may be used to operate, maintain, secure, troubleshoot, and improve the App.

2.11. Customer Support and Other Information

If you contact us, submit feedback, or report a problem, we may process the information you provide to respond to your request and resolve the issue.
We may also process other information that you voluntarily provide through the App, where necessary for the relevant service.

3. How We Use Personal Information

We may use personal information for the following purposes:
- To create, authenticate, and manage user accounts, where applicable.
- To receive, process, confirm, and manage vehicle rental bookings.
- To document vehicle condition and confirm the beginning or end of a journey.
- To display maps and identify nearby branches.
- To provide audio-related features where enabled.
- To send booking updates, journey notifications, service announcements, and permitted promotional messages.
- To operate, maintain, secure, and troubleshoot the App.
- To provide customer support and resolve complaints or disputes.
- To detect and prevent fraud, misuse, unauthorized access, and security incidents.
- To measure advertising effectiveness or support permitted advertising-related functions, where applicable.
- To comply with applicable laws and respond to lawful requests.
We will not knowingly process personal information for purposes incompatible with those described in this policy without an appropriate legal basis.

4. Legal Basis for Processing

Where required by applicable law, we process personal information based on one or more of the following legal grounds:
- Your consent.
- The performance of a contract or steps taken at your request before entering into a contract.
- Compliance with legal obligations.
- Legitimate interests, where permitted by applicable law and subject to the rights and interests of the individual.
Where processing is based on consent, you may withdraw your consent subject to applicable law. Withdrawal does not affect processing lawfully performed before consent was withdrawn.

5. How We Share Personal Information

We do not sell personal information as part of our ordinary business operations.
We may disclose relevant personal information to the following categories of recipients where necessary and legally permitted:

5.1. Service Providers

We may use hosting providers, cloud infrastructure providers, technical support providers, mapping services, push notification services, analytics providers, crash reporting services, and other vendors that help us operate AvisC.

5.2. Operational and Vehicle Rental Partners

Relevant booking or journey information may be shared with authorized personnel or operational partners when necessary to fulfil a booking, provide a vehicle rental service, verify a journey, or resolve a service issue.

5.3. Advertising and Analytics Providers

Where applicable, certain technical identifiers or usage information may be processed by analytics, advertising measurement, or attribution providers in accordance with the App’s implementation, your preferences, and applicable law.

5.4. Legal and Regulatory Disclosures

We may disclose information when required by law, a valid legal process, or a competent authority, or when necessary to protect the rights, safety, and security of our Company, users, or other individuals.

5.5. Business Transfers

Personal information may be disclosed as part of a merger, acquisition, restructuring, or transfer of business, subject to applicable legal requirements and appropriate safeguards.
We seek to limit disclosures to information reasonably necessary for the relevant purpose.

6. Third-Party Services

AvisC may rely on third-party services to provide maps, notifications, hosting, analytics, crash reporting, or other features.
These providers may process information in accordance with their own privacy policies and contractual obligations.
The providers and information involved depend on the services actually integrated into AvisC. Users should review relevant third-party privacy policies where applicable.

7. Data Storage and Retention

We retain personal information for as long as reasonably necessary to provide our services and fulfil the purposes described in this policy.
Retention periods may depend on the type of information, the duration of a booking or journey, customer support requirements, dispute resolution, security needs, and applicable legal obligations.
Booking, transaction, or other records may need to be retained after a user stops using the App where required by law or necessary for legitimate recordkeeping purposes.
When information is no longer required, we will take appropriate steps to delete it, anonymize it, or securely dispose of it, subject to applicable legal requirements.

8. Data Security

We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.
Depending on the systems involved, these measures may include access controls, authentication, secure transmission, restricted access, monitoring, and security procedures.
No electronic transmission or storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we take reasonable steps to protect the information entrusted to us.

9. Your Privacy Choices and Device Permissions

You can manage device permissions through your operating system settings, including:
- Camera access.
- Photo library access.
- Foreground and background location access.
- Microphone access.
- Push notification permissions.
- App Tracking Transparency permissions on iOS, where applicable.
You may also manage available preferences within the App.
Revoking a permission may limit features that depend on that permission. Revoking device permission does not automatically delete information previously transmitted to or stored on our servers.
Where applicable, you may separately request access to, correction of, or deletion of personal information.

10. Account and Personal Data Deletion

If AvisC supports account creation, users may request account deletion through the deletion function in the App, where available, or by contacting us using the contact information provided in Section 14.
If Google Play requires a dedicated web page for account deletion, the Company will provide and maintain an accessible account deletion page at the applicable URL.
We will process deletion requests in accordance with applicable law. Information that is no longer required will be deleted or anonymized where appropriate, subject to legal retention obligations and other lawful exceptions.
Deleting an account does not necessarily result in the immediate deletion of every record where retention is legally required.
If account creation is not supported, this section should be interpreted and updated to reflect the actual data deletion process available to users.

11. International Data Transfers

Depending on our infrastructure and service providers, personal information may be processed or stored in Vietnam or other countries.
Where personal information is transferred across borders, we will apply the safeguards and requirements imposed by applicable law.

12. Children’s Privacy

AvisC is not intended to collect personal information from children in violation of applicable law.
We do not knowingly collect personal information from children where such collection is prohibited. If we become aware that information has been collected unlawfully from a child, we will take appropriate steps to investigate and delete it where required.

13. Your Privacy Rights

Subject to applicable law, you may have the right to:
- Request access to personal information concerning you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information.
- Withdraw consent where processing is based on consent.
- Object to or request restrictions on certain processing activities.
- Request information about how your personal information is processed.
- Submit a complaint to a competent authority.
To exercise your rights, please contact us using the details in Section 14. We may need to verify your identity before processing a request.

14. Contact Information

For questions, requests, or complaints relating to this Privacy Policy or the processing of personal information, please contact:
Company Name: AN HOA PHAT RENT A CAR COMPANY LIMITED
Application Name: AvisC
Android Package Name: com.avisvn.nkht
Website: https://avis.com.vn/
Privacy Contact Email: [INSERT A VALID, MONITORED COMPANY EMAIL ADDRESS]
Registered Business Address: [INSERT THE COMPANY'S VERIFIED REGISTERED ADDRESS]
Please provide sufficient information for us to understand your request. Do not send passwords or unnecessary sensitive personal information by email.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the App, our services, data processing practices, or legal requirements.
When we make changes, we will update the “Last Updated” date and publish the revised policy on this page. Where required by applicable law, we will provide additional notice or obtain consent before implementing relevant changes.

16. Applicable Law

This Privacy Policy and our processing of personal information are subject to applicable data protection and privacy laws, including the laws of Vietnam where applicable.
If any provision of this policy conflicts with mandatory applicable law, the relevant legal requirements will prevail.