Kairos Mobility Ventures LLC Privacy Policy
I. Introduction
A. Purpose
- Protect Customer Data: The primary purpose of this privacy policy is to protect the personal information of our customers. Kairos Mobility Ventures LLC [will be referred as Kairos] is committed to ensuring that customer data is collected, used, and stored securely.
- Compliance: This policy is designed to comply with all applicable data protection laws and regulations. Adherence to these laws is essential to maintain customer trust and avoid legal repercussions.
- Transparency: We aim to be transparent about how customer data is handled. This policy outlines the types of data we collect, how we use it, and the measures we take to protect it.
B. Scope
- Coverage: This policy applies to all personal information collected by Kairos, including data collected through our website, mobile applications, and in-person interactions.
- Affected Parties: The policy covers all customers, potential customers, and users of our services. It also applies to our employees, contractors, and third-party service providers who have access to customer data.
- Data Types: The policy addresses various types of personal information, including contact details, payment information, rental history, and any other data that can be used to identify an individual.
C. Definitions
- Personal Information: Any information that can be used to identify a customer, such as name, address, email, phone number, and payment details.
- Data Processing: Any operation performed on personal information, including collection, storage, use, sharing, and deletion.
- Data Controller: Kairos is responsible for determining the purposes and means of processing personal data.
II. Data Collection
A. Types of Data Collected
The following table outlines the types of personal information collected by Kairos :
|
Data Type |
Description |
|
Contact Information |
Name, address, phone number, email address |
|
Payment Information |
Credit card details, Bank account details, Debit card, billing address |
|
Rental Information |
Rental history, vehicle preferences, rental dates, vehicle telematics data |
|
Identification Documents |
Driver’s license |
|
Communication Records |
Emails, phone calls, chat messages |
|
Location Data |
GPS coordinates, travel routes, vehicle location history collected through our mobile app and vehicle telematics systems |
|
Biometric Information |
If applicable, any biometric data used for identity verification or vehicle access |
- Contact Information: This includes basic details like name, address, phone number, and email address. It is essential for communication and identification purposes.
- Payment Information: Credit card details and billing addresses are collected to process payments securely. This data is encrypted to prevent unauthorized access.
- Rental Information: Details about rental history, vehicle preferences, and rental dates help us provide personalized services and enhance customer experience.
- Identification Documents: Copies of driver’s licenses and passports are collected to verify identity and comply with legal requirements.
- Communication Records: Emails, phone calls, and chat messages are recorded to ensure quality customer service and resolve any disputes.
Location Data: GPS location information collected during the rental period through vehicle telematics systems and our mobile application helps us provide location-based services, vehicle recovery in case of theft, and rental verification.
Biometric Information: In certain situations, we may collect biometric data such as facial recognition or fingerprints for identity verification or keyless vehicle access systems, but only with your explicit consent.
B. Methods of Data Collection
- Online Forms: Customers provide their personal information through online forms on our website and mobile applications. These forms are designed to be user-friendly and secure.
- In-Person Transactions: Information is collected during in-person interactions at our rental locations. Staff are trained to handle personal data securely.
- Third-Party Sources: We may collect data from third-party sources, such as credit agencies, with the customer’s consent. This helps us verify identity and creditworthiness.
- Automated Systems: Some data is collected automatically through cookies and tracking technologies on our website. This data helps us understand user behavior and improve our services.
Vehicle Telematics: Data collected automatically through sensors and systems installed in rental vehicles, including location, speed, mileage, fuel levels, and diagnostic information.
Mobile Application: Information collected through our mobile application, including location data when the app is in use or running in the background (with proper permissions).
C. Purpose of Data Collection
- Service Provision: Personal information is primarily collected to provide rental services. This includes processing reservations, payments, and providing customer support.
- Personalization: Data is used to personalize customer experiences, such as recommending vehicles based on rental history and preferences.
- Legal Compliance: Collecting and storing certain data is necessary to comply with legal and regulatory requirements, such as verifying the identity of renters.
- Marketing: With customer consent, data may be used for marketing purposes, such as sending promotional offers and newsletters. Customers can opt-out of marketing communications at any time.
Vehicle Management and Safety: Data is collected to monitor vehicle condition, location, and usage to ensure proper maintenance, prevent theft, and ensure compliance with rental terms.
Business Improvement: Information is analyzed to improve our business operations, vehicle fleet, and service offerings.
III. Data Use
A. Use of Personal Information
- Service Fulfillment: Personal information is used to fulfill rental service requests, including processing bookings and payments. This ensures that customers receive the services they have requested.
- Customer Support: Data is used to provide customer support, handle inquiries, and resolve issues. Having access to accurate information helps us assist customers effectively
- Account Management: Personal information is used to manage customer accounts, including updating contact details and rental preferences. This allows us to maintain accurate records.
- Fraud Prevention: Data is used to detect and prevent fraudulent activities. This includes verifying the identity of customers and monitoring transactions for suspicious behavior.
- Compliance: Personal information is used to comply with legal obligations, such as reporting requirements and identity verification. This ensures that Kairos adheres to applicable laws.
Predictive Analytics: With your consent, we may use rental patterns and preferences to predict future needs and offer personalized recommendations.
B. Sharing of Personal Information
- With Service Providers: Personal information may be shared with third-party service providers who assist us in delivering services. These providers include payment processors, cloud service providers, IT support services, and vehicle telematics providers. These providers are contractually obligated to protect the data and use it only for the specific services they provide to us.
- For Legal Reasons: Data may be shared with government authorities or law enforcement agencies if required by law. This ensures compliance with legal obligations.
- With Business Partners: Personal information may be shared with business partners for joint marketing initiatives. Customers will be informed and can opt-out if they prefer.
- For Mergers/Acquisitions: In the event of a merger or acquisition, personal data may be transferred to the new entity. Customers will be notified of any changes in data handling practices.
- With Insurance Providers: Information may be shared with insurance companies in the event of accidents, damages, or claims processing.
C. Data Retention
- Retention Period: Personal information is retained for as long as necessary to fulfill the purposes outlined in this policy. This includes retaining data for legal and regulatory compliance.
- Data Deletion: Once the retention period expires, personal information is securely deleted or anonymized. This ensures that data is not kept longer than necessary.
- Customer Requests: Customers can request the deletion of their personal information at any time. We will process such requests in accordance with legal requirements.
- Specific Timeframes: Personal information is generally retained for a period of 2 years after your last transaction with us, or longer if required by law. Vehicle usage data including location history is retained for 12 months after the rental period ends.
III. Data Use
A. Security Measures
The following table outlines the security measures implemented by Kairos to protect personal information:
|
Security Measure |
Description |
|
Encryption |
Data is encrypted during transmission and storage |
|
Access Control |
Strict access controls to limit data access |
|
Regular Audits |
Regular security audits to identify vulnerabilities |
|
Employee Training |
Ongoing training for employees on data security |
|
Secure Storage |
Data is stored with physical and technical protections |
|
Data Minimization |
We collect only the data necessary for the stated purposes |
|
Incident Response Plan |
Comprehensive plan to address potential security breaches |
- Encryption: Personal information is encrypted during transmission and storage to prevent unauthorized access. This includes using SSL/TLS for online transactions.
- Access Control: Strict access controls are in place to limit data access to authorized personnel only. This includes role-based access controls and multi-factor authentication.
- Regular Audits: We conduct regular security audits to identify and address vulnerabilities. This proactive approach helps us maintain robust data security.
- Employee Training: Employees receive ongoing training on data security best practices. This ensures that all staff are aware of their responsibilities and can effectively protect customer data.
- Secure Storage: Personal information is stored in secure facilities with both physical and technical protections. This includes secure data centers and backup procedures.
- Data Minimization: We collect only the data necessary for the stated purposes and limit access to such information.
- Incident Response Plan: We maintain a comprehensive incident response plan to address potential security breaches promptly and effectively.
B. Breach Response
- Detection: We have systems in place to detect data breaches promptly. This includes monitoring for unusual activity and implementing intrusion detection systems.
- Notification: In the event of a data breach, affected customers will be notified promptly. This ensures that customers can take steps to protect themselves.
- Mitigation: We take immediate steps to mitigate the impact of a data breach. This includes containing the breach, assessing the damage, and implementing corrective measures.
- Investigation: A thorough investigation is conducted to determine the cause of the breach and prevent future incidents. This includes reviewing security protocols and updating them as necessary.
-
Regulatory Reporting: Where required by law, we will report data breaches to the relevant regulatory authorities within the required timeframes.
V. Customer Rights
A. Access and Correction
- Access Requests: Customers have the right to request access to their personal information. We will provide a copy of the data we hold about them upon request.
- Correction Requests: If personal information is inaccurate or incomplete, customers can request corrections. We will update the data accordingly.
- Response Time: We aim to respond to access and correction requests within a reasonable timeframe. This ensures that customers can promptly verify and update their information.
B. Data Portability
- Portability Requests: Customers have the right to request the transfer of their personal information to another service provider. We will provide the data in a structured, commonly used format.
- Scope of Portability: The portability right applies to data provided by the customer and processed by automated means. This ensures that customers can move their data easily.
- Conditions: Portability requests are subject to certain conditions, such as the data being processed based on consent or contract. We will inform customers of any limitations.
C. Right to Erasure
- Erasure Requests: Customers have the right to request the deletion of their personal information. We will delete the data upon request, subject to legal requirements.
- Scope of Erasure: The right to erasure applies in certain circumstances, such as when the data is no longer needed for the original purpose. We will assess each request individually.
- Exceptions: There are exceptions to the right to erasure, such as when data is required for legal compliance. We will inform customers of any such exceptions.
D. Additional Rights for EU/UK Residents
If you are located in the European Union or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including:
– Right to Object: You may object to the processing of your personal data in certain circumstances – Right to Restriction: You may request restriction of processing of your personal data – Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time – Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority
VI. Cookies and Tracking Technologies
A. Use of Cookies
- Purpose: Cookies are used to enhance the user experience on our website. They help us remember user preferences and provide personalized content.
- Types of Cookies: We use various types of cookies, including session cookies, persistent cookies, and third-party cookies. Each type serves a different purpose.
- Control: Customers can control cookie settings through their browser. This allows them to accept or reject cookies as they prefer.
-
Cookie Policy: For detailed information about the specific cookies we use and their purposes, please refer to our Cookie Policy available on our website.
-
Cookie Consent: We implement a cookie consent management system that allows you to choose which categories of cookies you accept beyond those that are strictly necessary for website functioning.
B. Tracking Technologies
- Purpose: Tracking technologies, such as web beacons and pixel tags, are used to collect data about website usage. This helps us understand user behavior and improve our services.
- Third-Party Services: We use third-party services, such as analytics providers, to implement tracking technologies. These providers are required to protect customer data.
- Opt-Out: Customers can opt-out of certain tracking technologies. We provide options to disable tracking and protect user privacy.
VII. Third-Party Links
A. External Websites
- Disclaimer: Our website may contain links to external websites. We are not responsible for the privacy practices of these websites.
- Review Policies: Customers are encouraged to review the privacy policies of external websites. This ensures that they are aware of how their data will be handled.
- Third-Party Responsibility: Third-party websites are responsible for their own privacy practices. We have no control over how they collect or use customer data.
B. Partner Websites
- Collaboration: We may collaborate with partner websites for joint promotions and services. These partners are required to protect customer data.
- Data Sharing: Personal information may be shared with partner websites for specific purposes. Customers will be informed of any data sharing.
- Opt-Out Options: Customers can opt-out of data sharing with partner websites. We provide options to withdraw consent and protect user privacy.
C. Social Media Integration
Our services may include social media features, such as the Facebook Like button, and widgets such as the Share button. These features may collect your IP address and which page you are visiting, and may set a cookie to enable the feature to function properly. These features are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing them.
VIII. Children's Privacy
A. Age Restrictions
Kairos services are intended for individuals who are at least 18 years of age (or the minimum driving age in the applicable jurisdiction). We do not knowingly collect personal information from individuals under these age restrictions. If we discover we have collected personal information from an individual under the applicable age restriction, we will delete that information immediately.
B. Education and Awareness
- Parental Guidance: We encourage parents to guide their children on safe internet practices. This includes teaching them not to share personal information online without consent.
- Resources: Educational resources on online privacy and safety are available on our website. These resources help parents and children understand the importance of data protection.
- Engagement: We engage with educational institutions and community organizations to promote awareness about children’s privacy. This includes providing workshops and informational materials.
C. Legal Compliance
- COPPA Compliance: We comply with the Children’s Online Privacy Protection Act (COPPA) and other relevant laws. This ensures that we handle children’s data responsibly and legally.
- Regular Review: Our policies and practices regarding children’s privacy are reviewed regularly. This ensures that we stay up-to-date with legal requirements and best practices.
- Feedback: We welcome feedback from parents and guardians on our children’s privacy practices. This helps us continually improve and address any concerns.
Information for California residents
Scope. This section applies only to California residents entitled to receive the information in this section under the California Consumer Privacy Act of 2018, including as amended under the California Privacy Rights Act of 2020 (“CCPA“). It describes how we collect, use, and share Personal Information of California residents when we act as a “business” as defined under the CCPA, and their rights with respect to their Personal Information. For purposes of this section, “Personal Information” has the meaning given in the CCPA but does not include information excluded from the scope of the CCPA. In some cases, we may provide a different privacy notice to certain categories of California residents, such as job applicants, in which case that notice will apply instead of this section.
Your California privacy rights.
As a California resident, you have the rights listed below.
Information. You can request the following information about how we have collected and used your Personal Information:
- The categories of Personal Information that we have collected
- The categories of sources from which we collected Personal Information
- The business or commercial purpose for collecting Personal Information
- The categories of third parties with whom we share Personal Information
- Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information received by each category of third-party recipient
- Whether we have sold your Personal Information, and if so, the categories of Personal Information received by each category of third-party recipient
Access. You can request a copy of the Personal Information that we have collected about you during the past 12 months.
Deletion. You can request that we delete the Personal Information that we have collected from you.
Correct. You can request that we delete, update or correct inaccuracies in your Personal Information.
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination in the form of any unlawful denial of service, increase in the price of services, decrease in service quality, or suggestion that you may be penalized for exercising your rights.
IX. Review and Update
A. Policy Review
- Regular Review: This privacy policy is reviewed regularly to ensure it remains up to date. This includes assessing changes in laws and industry standards.
- Customer Feedback: We consider customer feedback when reviewing the policy. This helps us address concerns and improve our data protection practices.
- Internal Audit: An internal audit is conducted to ensure compliance with the policy. This includes reviewing data handling practices and security measures.
B. Policy Update
- Notification: Customers will be notified of any significant changes to the privacy policy. This ensures that they are aware of how their data will be handled.
- Effective Date: Changes to the policy will be effective as of the date specified in the notification. Customers will have the opportunity to review the updated policy.
- Continued Use: Continued use of our services after the effective date constitutes acceptance of the updated policy. Customers can choose to opt-out if they do not agree with the changes.
-
Version Tracking: Each updated version of this privacy policy will be marked with a version number and effective date at the top of the document. Previous versions will be archived and available upon request.
-
Material Changes: Material changes to this policy will be communicated via email to registered users and through prominent notice on our website and mobile application at least 30 days before implementation, when possible.
C. Customer Support
Contact Information: Customers can contact us with any questions or concerns about the privacy policy at hello@kairosmobility.com Or at our postal address.
Postal address Kairos Mobility Ventures
8 The Grn
Dover, Delaware 19901
United States
