Privacy Policy
Last updated: May 31, 2026
JPA Car Rental & Transport OPC ("JPA", "we", "us") respects your privacy. This policy explains what personal data we collect, why, how we protect it, and your rights. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its IRR, and we align with international standards such as the EU GDPR for visitors abroad. We are the data controller; our office is at 22 Road 3 Street, Pildera II Subdivision Zone 20, Barangay 193, Pasay City, Metro Manila (NCR) 1300, Philippines (TIN 661-553-475-00000).
1. Information we collect
- Account details: name, email, mobile number, and password (stored hashed by our authentication provider).
- Booking details: pickup/drop-off locations and dates, vehicle and service selected, and trip notes.
- Identity verification (KYC): images of your government ID, driver's license, and a verification selfie.
- Payment information: processed by our payment provider (PayMongo). We do not store full card numbers.
- Inquiries and franchise applications: the contact details and messages you submit through our forms.
- Technical data: limited device/usage data and cookies necessary to operate the site and keep you signed in.
- Analytics data: anonymized usage metrics (pages viewed, approximate location, device type) collected via Google Analytics 4 to understand how visitors use the site and improve it.
2. How and why we use your data
We process personal data to:
- Provide, confirm, and manage your bookings and transport services (contractual necessity).
- Verify your identity to prevent fraud and protect our fleet and customers (legal obligation and legitimate interest).
- Process payments and issue receipts/invoices (contractual and legal/tax obligation).
- Respond to inquiries and franchise applications (your request / consent).
- Maintain security, comply with regulators (e.g., LTFRB, DOT, BIR), and enforce our Terms (legal obligation and legitimate interest).
3. How we share data
We do not sell your personal data. We share it only with: our payment provider PayMongo (to process payments); our cloud infrastructure provider Google Firebase / Google Cloud (hosting, database, and secure file storage); Google Analytics (anonymized site-usage measurement, IP anonymization enabled); and government authorities or regulators where required by law. Service providers are bound to process data only on our instructions.
4. International transfers
Our infrastructure runs on Google Cloud, which may process data in data centers outside the Philippines (e.g., the Singapore region). Where data is transferred internationally, we rely on appropriate safeguards and require providers to maintain a comparable level of protection.
5. Data retention
We keep personal data only as long as necessary for the purposes above and to meet legal, tax, and accounting obligations. KYC documents are retained for the period required for verification and regulatory compliance, then securely deleted or anonymized.
6. Security
We apply organizational and technical measures to protect your data, including encryption in transit, access controls, and storing identity documents in a private, access-restricted location visible only to authorized staff. No system is perfectly secure, but we work to protect your information and to notify you and the National Privacy Commission of any breach as required by law.
7. Your rights
Subject to applicable law, you have the right to be informed and to access, correct, update, object to, restrict, port, or request deletion of your personal data, and to withdraw consent. You may also lodge a complaint with the National Privacy Commission (privacy.gov.ph). To exercise your rights, contact us using the details below.
8. Cookies and analytics
We use cookies necessary to operate the site and keep you signed in. We also use Google Analytics 4 to measure site usage (pages visited, traffic sources, approximate geography, device type) so we can improve the site. IP anonymization is enabled, which truncates your IP before storage. We do not use marketing or advertising cookies. You can opt out of Google Analytics measurement by installing Google's opt-out browser add-on.
9. Bot protection (reCAPTCHA Enterprise)
To protect the site from automated abuse and fraud, we use Google reCAPTCHA Enterprise via Firebase App Check. Your interactions with the site (such as mouse, keyboard, and request signals) are sent to Google for security analysis. Your use of the site is subject to the Google Privacy Policy and Terms of Service.
10. Children
Our services are intended for adults (18+). We do not knowingly collect personal data from minors.
11. Changes and contact
We may update this policy; the "Last updated" date reflects the latest version. For privacy questions or to exercise your rights, contact our Data Protection Officer at inquiries@jpatransport.com or +63 945 234 6077.
