Privacy Policy
Last updated: April 2025
DREAMAX Co., Ltd. (株式会社ドリマックス), operator of DREAMAX Rent-a-Car, is committed to protecting the privacy of our customers. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.
1. Information We Collect
We collect the following categories of personal information:
Account Information (OAuth Sign-in)
When you sign in via Google OAuth, we receive your name, email address, and profile photo from that provider. We do not receive your password.
Driver Details
To process your rental booking, we collect your passport number, driving licence number, and the issuing country of those documents. You may also upload photos of your passport, driving licence, and International Driving Permit (IDP) or licence translation.
Contact Preferences
You may optionally provide a WhatsApp number and/or LINE ID so that we can communicate with you about your booking.
Booking Records
We store records of your bookings, including dates, rental amounts, deposit amounts, and booking status, in our secure database.
Payment Information
Payments are processed entirely by Stripe. We do not store your card number, CVV, or other sensitive payment credentials on our servers. We retain only the Stripe payment intent reference and transaction status.
2. How We Use Your Information
- To process and manage your car rental reservation
- To verify your identity and driving eligibility
- To communicate with you about your booking (confirmation, reminders, changes)
- To process payments and security deposits via Stripe
- To comply with Japanese legal requirements applicable to car rental operators
- To improve our service through aggregated, anonymised usage analytics
- To handle disputes, insurance claims, or traffic violation notices
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
3. Third-Party Services
We rely on the following third-party service providers. Each has its own privacy policy:
| Provider | Purpose |
|---|---|
| Firebase / Google Cloud | Authentication, database (Firestore), and file storage |
| Stripe | Secure payment processing and deposit management |
| Resend | Transactional email delivery (booking confirmations) |
| Google Analytics 4 | Anonymised website usage analytics |
| Google OAuth | Sign-in via Google account |
These providers process your data only as necessary to deliver the services described above and are bound by their respective data processing agreements.
Industry Compliance Sharing
In cases of contractual breach (such as failure to return the vehicle, unpaid traffic violation fees, or other violations specified in our Terms & Conditions Articles 17 and 34), your personal information — including name, date of birth, and driver's licence number — may be registered in the 「一般社団法人全国レンタカー協会情報管理システム」 (Japan Rent-A-Car Association Information Management System) and shared with other member rental car operators for the purpose of customer screening. The retention period in this system is up to seven years.
4. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes set out in this policy, or as required by Japanese law:
- Booking records — retained for a minimum of 7 years to comply with accounting and tax regulations.
- Driver documents (uploaded images) — retained for the duration of the rental period plus a reasonable dispute resolution window, then deleted.
- Account information — retained while your account is active. You may request deletion at any time.
5. Your Rights
Under applicable privacy law (including Japan's Act on the Protection of Personal Information, APPI), you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your personal information (subject to legal retention requirements)
- Object to or restrict certain processing activities
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us at info@dreamax.co.jp. We will respond within 30 days.
6. Cookies & Analytics
Our website uses cookies and similar technologies for the following purposes:
- Essential cookies — required for authentication sessions and core functionality. Cannot be disabled.
- Analytics cookies (Google Analytics 4) — used to understand how visitors use our site. IP addresses are anonymised. You may opt out via your browser settings or the Google Analytics Opt-out Add-on.
We do not use advertising or tracking cookies.
7. Contact
If you have any questions or concerns about this Privacy Policy, please contact us:
DREAMAX Co., Ltd. (株式会社ドリマックス)
〒546-0024 大阪府大阪市東住吉区公園南矢田4丁目3番21号
Email: info@dreamax.co.jp
This policy may be updated from time to time. The date at the top of this page reflects the most recent revision. Continued use of our service after changes constitutes acceptance of the updated policy.