DriveHaus

Privacy Policy

Last updated: September 12, 2026

Draft. This document is a working draft prepared for review. Registration with the National Privacy Commission is required before the platform processes real identity documents; have a Philippine lawyer check this text first.

1. Who we are

DriveHaus operates an online vehicle marketplace in the Philippines. We are the personal information controller for the data described here, and we handle it in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

2. What we collect

  • Account details: name, email address, mobile number, password (stored only as a salted hash), and the role you choose.
  • Profile details: city, province, short biography, business name, avatar photograph, and for mechanics the service area and specialties.
  • Identity documents: a photograph of a government-issued ID, a selfie holding it, and optionally a proof of address, submitted for Level 2 verification.
  • Listing content: the vehicle details and photographs you publish.
  • Messages and offers: the content of chats, offers, support conversations and reports.
  • Transaction records: sales you complete, invoices, payment references you enter, and inspection reports.
  • Technical data: IP address (stored as a salted hash for share-link click counting), browser user agent, and pages viewed, used to run and secure the service.

3. Why we use it

  • To operate your account, publish listings and deliver messages, offers and notifications.
  • To verify identity, which reduces fraud and protects other users.
  • To review listings before publication and to investigate reports and disputes.
  • To issue and confirm invoices for fees you owe.
  • To send service emails about your account, listings, offers and invoices. Marketing emails, where sent, can be switched off in your settings.
  • To keep the platform secure and to comply with legal obligations.

4. Identity documents are private

Documents uploaded for verification are stored outside the public web root and are never displayed on the site. They can be opened only by you and by authorised DriveHaus staff reviewing your verification. They are not shared with buyers, sellers or other users.

5. What other users can see

Your name, avatar, city and province, verification badge, member-since date, listings, sold count and reviews are visible on your public profile and on your listings. Your email address and mobile number are never shown to another user by the platform; if you choose to share them in a chat, that is your decision.

6. Sharing

We share data only where necessary: with the mechanic assigned to an inspection you requested (the vehicle, the location and the seller's contact details for arranging the appointment); with our email delivery provider to send service messages; with our hosting provider, which stores the data on our behalf; and with law enforcement or a court where we are legally required to do so. We do not sell personal data.

7. How long we keep it

Account and profile data are kept while your account is open. Deactivating your account suspends it and removes your listings from public view; records of completed sales, invoices, disputes and reports are kept afterwards for as long as needed for legal, tax and dispute purposes. Identity documents are kept while verification remains valid and are deleted on request once no dispute or legal obligation requires them.

8. Your rights

Under the Data Privacy Act you have the right to be informed, to object, to access your data, to have it corrected, to have it erased or blocked in certain circumstances, to damages for a violation, to data portability, and to complain to the National Privacy Commission. Most of this can be done from your settings; for anything else contact us through the support chat and we will respond within a reasonable period.

9. Security

Passwords are stored hashed. Sessions use signed, http-only cookies. Identity documents are served only through an access-checked route. Access to personal data by staff is limited to what their role requires, and administrator actions on accounts and listings are logged. No system is perfectly secure; if a breach affects your data we will notify you and the National Privacy Commission as the law requires.

10. Cookies

We use a session cookie to keep you logged in, and your browser's local storage to remember your theme and display currency. We do not use advertising or cross-site tracking cookies.

11. Children

DriveHaus is not intended for anyone under 18 and we do not knowingly collect their data.

12. Changes

We may update this policy. Material changes will be notified through the platform.

13. Contact

To exercise a right or ask about this policy, use the support chat or the contact address published in the help centre.

See also the Terms of Service.