Privacy Policy
Last updated: April 2025
DREAMAX Co., Ltd. (株式会社ドリマックス), operator of DREAMAX Rent-a-Car, is committed to protecting the privacy of our customers. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.
1. Information We Collect
We collect the following categories of personal information:
Account Information (OAuth Sign-in)
When you sign in via Google or Facebook OAuth, we receive your name, email address, and profile photo from those providers. We do not receive your social media passwords.
Driver Details
To process your rental booking, we collect your passport number, driving licence number, and the issuing country of those documents. You may also upload photos of your passport, driving licence, and International Driving Permit (IDP) or licence translation.
Contact Preferences
You may optionally provide a WhatsApp number and/or LINE ID so that we can communicate with you about your booking.
Passengers & Additional Information
You may optionally provide the ages of children under 6 in your party, and your preferred pick-up and return times and locations.
Booking Records
We store records of your bookings, including dates, rental amounts, deposit amounts, and booking status, in our secure database.
Payment Information
Payments are processed entirely by Stripe. We do not store your card number, CVV, or other sensitive payment credentials on our servers. We retain only the Stripe payment intent reference and transaction status.
2. How We Use Your Information
- To process and manage your car rental reservation
- To verify your identity and driving eligibility
- To communicate with you about your booking (confirmation, reminders, changes)
- To process payments and security deposits via Stripe
- To comply with Japanese legal requirements applicable to car rental operators
- To improve our service through aggregated, anonymised usage analytics
- To handle disputes, insurance claims, or traffic violation notices
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
3. Third-Party Services
We rely on the following third-party service providers. Each has its own privacy policy:
| Provider | Purpose |
|---|---|
| Firebase / Google Cloud | Authentication, database (Firestore), and file storage |
| Stripe | Secure payment processing and deposit management |
| Resend | Transactional email delivery (booking confirmations) |
| Google Analytics 4 | Anonymised website usage analytics |
| Google OAuth | Sign-in via Google account |
| Facebook OAuth | Sign-in via Facebook account |
These providers process your data only as necessary to deliver the services described above and are bound by their respective data processing agreements.
4. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes set out in this policy, or as required by Japanese law:
- Booking records — retained for a minimum of 7 years to comply with accounting and tax regulations.
- Driver documents (uploaded images) — retained for the duration of the rental period plus a reasonable dispute resolution window, then deleted.
- Account information — retained while your account is active. You may request deletion at any time.
5. Your Rights
Under applicable privacy law (including Japan's Act on the Protection of Personal Information, APPI), you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your personal information (subject to legal retention requirements)
- Object to or restrict certain processing activities
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us at info@dreamax.co.jp. We will respond within 30 days.
6. Cookies & Analytics
Our website uses cookies and similar technologies for the following purposes:
- Essential cookies — required for authentication sessions and core functionality. Cannot be disabled.
- Analytics cookies (Google Analytics 4) — used to understand how visitors use our site. IP addresses are anonymised. You may opt out by using browser privacy settings or a browser extension such as the Google Analytics Opt-out Add-on.
We do not use advertising or tracking cookies.
7. Contact
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:
DREAMAX Co., Ltd. (株式会社ドリマックス)
〒546-0024 大阪府大阪市東住吉区公園南矢田4丁目3番21号
Email: info@dreamax.co.jp
This policy may be updated from time to time. The date at the top of this page reflects the most recent revision. Continued use of our service after changes constitutes acceptance of the updated policy.