Personal Information Collection Statement
To provide users of the DiDi driver app and platform (Drivers) and users of the DiDi passenger app and platform (Passengers) (such apps individually and collectively (as applicable) DiDi App) with our point to point transportation and delivery booking services, we need to collect and use personal information about you. We may not be able to provide you with the services you are seeking if you do not provide all of the information we request.
This policy applies to any users of the services provided by DiDi, and to anyone else who contacts DiDi or otherwise submits information to DiDi.
2. HOW ANY WHY WE COLLECT YOUR PERSONAL INFORMATION
DiDi primarily collects personal information about you to enable us to provide booking services and facilitate the provision of passenger transportation and delivery services, inform you of different product offerings and in order to comply with our legal and regulatory obligations.
3. WHAT PERSONAL INFORMATION DO WE COLLECT ABOUT YOU
The type of personal information we collect will depend on who you are and in what capacity you are dealing with us, such as whether you are a Driver, Passenger or someone else.
DiDi collects information about you that is made up of the information you provide us including when you create either a Passenger or Driver account with DiDi, the information that relates to your use of our services and information from other sources such as DiDi‘s business partners and related entities. This includes:
(a) your personal information in relation to your account such as your name, age, gender, address, email address and mobile contact number. We may collect the name, location, phone number and other information about third parties related to your or their use of our services if you provide that information to us. We may also collect the name and telephone number of your emergency contact. By providing this information about third parties and/or your emergency contact, you warrant that they consent to us collecting, holding and using their information;
(b) if you are registering as a Driver, we will collect additional information about you (such as passport and driver license) to verify your identify and establish your suitability as a Driver and to conduct appropriate criminal history and background checks (which may be conducted either directly or by a vendor on our behalf) and/or any other information where required or permitted by law to establish your suitability as a Driver such as any accreditation or approval required in the relevant jurisdiction and if you are a Driver in New Zealand, and whilst available to DiDi, you consent to:
- us using your name, date of birth, driver licence number and version number at the NZ Transport Agency (NZTA) transport organisation register online website toro.nzta.govt.nz (TORO) for our business purposes;
- us (or our service provider) checking your criminal record through the Ministry of Justice, for which you may be required to complete a separate consent form;
- the NZTA allowing us to receive notifications regarding you, and to access information that is stored in TORO (which may not be publicly available), such as licence status changes, expiry of endorsements, medical conditions and demerit points;
- us sharing your personal information in order to access, and to use and receive, any information that is stored in any electronic work diary system you use where necessary for our business (including health and safety) purposes or in order for us to comply with any applicable legislation;
(c) if you are a Driver, you consent to us collecting facial recognition data which we will use to verify your identity and readiness to use the DiDi driver app each time you accept a booking to provide transportation services which have been booked through DiDi;
(d) details relating to when and where you request our services and the details of any goods or services received by you related to our services, including your geographical location information (which may be calculated from information collected in (e) of this section below), delivery information, departure and destination information, trip duration and distance travelled;
(e) details of the device on which the DiDi App has been installed or accessed on, which may include your operating system and versions, unique device identifiers, serial numbers, mobile network and Wi-Fi information;
(f) recordings of voice commands provided when using the DiDi App, which may be stored and used for analytical purposes to improve the accuracy of our voice recognition functionality;
(g) details about your preferences, your experiences related to our services and/or other user generated content, including information relating to you from other individuals, such as ratings, complaints, compliments or comments about you;
(h) personal information collected and held via financial or third party payment systems about the payment mechanism or method that you might use (including credit card details) and the payments you may make for our services or other goods or services you request or receive that are related to the services we provide;
(i) your connection to other individuals whose personal information we may collect or hold, for example family members or referrals;
(j) details about your participation in any loyalty programs linked or available through DiDi or any business partner or affiliate; and
(k) if you use social media to interact with us or other services provided by third parties through the DiDi App, any information that you allow the social media platform and/or the other third party site to share with us;
(m) photos of Drivers, Passengers, and other third parties to verify that appropriate personal protective equipment is being worn in connection with COVID-19; and
(n) if you respond to optional survey requests, demographic information including age, marriage status, ethnicity, profession and income. Please see section 9 below for more information about information collected through surveys.
4. HOW WE USE YOUR PERSONAL INFORMATION
We collect and use your personal information in the course of our normal business operations and activities, including for the following purposes:
(a) to provide services to you;
(b) to communicate with you;
(c) to notify you of any important information or content that you may be interested in;
(d) to facilitate the provision of transportation and delivery services for you;
(e) for research and development;
(f) to verify your identify and/or verify your immigration status (depending on the capacity in which you have engaged with DiDi);
(g) to ensure and enhance the safety and security of users;
(h) for customer support services such as facilitating responses to your enquiries or complaints;
(i) to conduct customer surveys and research activities;
(j) to conduct marketing, promotions and advertising activities;
(k) to fulfil our obligations or claim our rights in legal proceedings;
(l) to facilitate communications between users;
(m) to authenticate users;
(n) to investigate and prevent possible fraud and illegal activity;
(o) to process and facilitate payment for goods and services facilitated by us;
(p) to deal with disputes and complaints;
(q) to comply with laws, including assisting government agencies and law enforcement investigations;
(r) to report to regulatory authorities or government bodies on regulatory compliance including providing your health information to health authorities as considered necessary or reasonably required; and
(s) to use or disclose it as otherwise authorised or permitted by law.
With your consent, DiDi uses your personal information to provide you with information on products, services that we, or third parties offer, competitions and other marketing information that we consider may be relevant to you or that you might be interested in, even after you cease acquiring products or services from us.
5. COOKIES AND THIRD PARTY TECHNOLOGIES
Cookies are small text files that are stored on your browser or device by websites, apps, online media, and advertisements.
(a) verifying users;
(b) remembering user preferences and account settings;
(c) determining the popularity and demand for services;
(d) delivering and measuring the effectiveness of promotional campaigns; and
(e) analysing user traffic and trends, and generally understanding the behaviours of users.
6. LOCATION SERVICES
Before you can use the DiDi App for the first time, we will ask you to choose whether to allow DiDi access to your location and in what circumstances. Location services must be enabled for us to provide booking services. You may change these settings at any time on your device. With your permission, we will obtain your location through IP address, GPS, and other sensors that provide necessary information for the provision of transportation and delivery services.
We may collect Wi-Fi metadata from your device including whether your device is Wi-Fi and GPS enabled and connected to Wi-Fi, the Media Access Control (MAC) address or your device, the Set Service Identifier (SSID) and signal level of Wi-Fi networks within range of your device, the GPS location of your device in relation to Wi-Fi networks in range of your device and the time the metadata was collected. We use the information primarily so that we can recommend pick-up points based on a Passenger’s approximate location. The information collected will be encrypted before being sent to our related body corporate where it will be de-identified and aggregated for storage, research and analysis purposes.
8. YOUR SOCIAL MEDIA USE
DiDi uses third-party websites for interactive information sharing and to connect with customers such as Facebook and Twitter. We recommend you read any terms and conditions (including any privacy statements or policies) that apply to any third-party web service relating to the handling and management of your personal information as they may use your personal information in ways and for purposes that will be different to the way DiDi uses and discloses your personal information.
We encourage you to keep your personal information confidential by contacting DiDi through direct or private messages, email or the customer service hotline.
10. DISCLOSURES OF YOUR PERSONAL INFORMATION INCLUDING OVERSEAS
DiDi may disclose your personal information for any of the reasons outlined in section 4 above and related purposes which would be reasonably expected by you.
The information indicated in section 3 (a) and (d), entirely or partly, may be automatically shared:
(t) in relation to the Passenger’s information, to the Passenger’s emergency contact or emergency services, upon activation of the alarm function; or
(u) in relation to the Driver’s information, to the Passenger’s emergency contact or emergency services upon activation of the alarm function.
DiDi may disclose your personal information to related bodies corporate, other companies within the DiDi group, business partners and service providers we engage such as customer service providers, to help us provide our services or conduct data processing on our behalf. These entities may be located and operate overseas including in mainland China and Hong Kong, Singapore, Brazil, the Philippines, Ireland and the United States of America. Except where an exception under the Privacy Legislation applies, DiDi will comply with its obligations under the Privacy Legislation in relation to any such disclosures, including using reasonable commercial efforts to ensure that such third parties only use your personal information as reasonably required for the purpose of disclosure and in a manner consistent with the Privacy Legislation, for example (where commercially practical) by including suitable privacy and confidentiality clauses in our agreement with those third parties.
Subject to any limitations in your privacy and information permissions and settings, we may share your personal information with other users to provide booking services and facilitate the provision of transportation and delivery services. Your privacy and information permissions and settings can be updated at any time in the DiDi App when you are logged into your account.
DiDi may disclose Passenger contact information to a Driver or a Driver’s insurer, or Driver contact information to a Passenger, if we have reasonable grounds to believe that a genuine dispute has arisen in connection with the provision of transportation or delivery services by the Driver booked through the DiDi App.
If you use the split fare functionality on the DiDi App with other Passengers, we may disclose the fact that you have made a split fare payment and the amount of the payment to those other Passengers that booked the transportation services with you.
Otherwise, we may disclose your personal information for other purposes to which you have consented, or as otherwise authorised or required by applicable laws.
11. STORAGE AND SECURITY
We are committed to ensuring that your information is secure. We typically hold the personal information we collect on servers in electronic databases which are located in the United States of America and managed by our related entities and/or service providers.
We have put in place suitable physical, electronic and administrative procedures to safeguard and protect the information about you that we collect. Personal information and associated data stored on servers is encrypted and is stored through data isolation technology. We limit access to personal information to individuals we or our related entities employ or contracted service providers who we believe reasonably need access to such information to provide products or services to you or to us or in order to perform their jobs.
If we become aware of a privacy breach that has caused or is likely to cause serious harm (as defined in the relevant Privacy Legislation), we will notify the relevant authorities and affected individuals, as required under the relevant Privacy Legislation.
12. DIRECT MARKETING
We may occasionally contact you directly with related point to point transport news, information, and special offers from DiDi and other businesses. You consent to us sending you such information including by means of telemarketing, email, SMS, WeChat messages and other digital channels.
If at any time you decide you do not wish to receive marketing communications from us, you may click the “Unsubscribe” button in the marketing emails and messages or by emailing us at firstname.lastname@example.org (for Drivers in Australia), or email@example.com (for Passengers in Australia) and firstname.lastname@example.org (for Drivers in New Zealand), or email@example.com (for Passengers in New Zealand). If you opt out of receiving marketing communications from us, we may still contact you or send you messages that are not of promotional nature, such as receipts for transportation and delivery services booked through DiDi.
13. LINKS TO OTHER WEBSITES
The DiDi App and communications sent by DiDi may contain links to websites or web addresses of third parties and third party services. While DiDi takes appropriate care in publishing links to any third party services, you shall, at your own discretion, decide whether or not to access such links or accept such services. DiDi gives no undertakings or warranties with respect to the accuracy, completeness, adequacy and reliability of any information, data, opinions, pictures, statements or suggestions provided by such links. DiDi does not have control over or assume any liability for third party websites, their content or their data use and retention policies or practice.
14. INFORMATION ABOUT YOUR PERSONAL INFORMATION
You may make any of the following requests in respect of your personal information:
(a) Confirmation that we hold and use personal information about you.
(b) Access to the personal information we hold about you.
(c) Correction of or updates to the personal information we hold about you.
(d) Anonymisation, blocking or erasure of your personal information that is no longer necessary in order for us to provide services to you or no longer necessary for our normal business operations and activities as set out in section 4.
(e) Data portability. In some circumstances, you may, by express request ask us to provide a third party service provider with a copy of the personal information we hold about you in a structured, machine-readable and commonly used format (as selected by us), or otherwise in accordance with the requirements of the applicable law.
(f) Deletion of personal information we hold about you, where we relied on your consent to use your personal information unless an exception applies, such as where we are required to retain such information to comply with our legal or regulatory obligations.
(g) To the extent not addressed in section 10, information regarding third parties to whom your personal information is disclosed.
(h) Revoke your consent, where we relied on your consent to use and disclose your personal information.
You can make any of the above requests by contacting us. We may ask you to provide suitable identification when you seek to make any of these requests, in order to verify your identity.
We will provide you a response as soon as possible. Simple requests will be responded to within 2-3 days, more complicated requests may take up to 20 working days to respond to. If we are unable to comply with your request for any reason (such as, we are not permitted or required to under Privacy Legislation) we will inform you of this.
If the personal information we provide in response to your request includes information that is the personal information of a third party or that is confidential or in which we own copyright (such as transcripts or recordings of customer service call records), we may redact such information where reasonably necessary, and you must keep such information confidential and not make the information public, including by sharing the information on social media, without our consent.
Users can also delete their account from the DiDi App. If you delete your account, we will retain your personal information in accordance with our record keeping policies and obligations as a booking service provider or transport service facilitator (as applicable).
DiDi may retain your personal information after you have requested us to delete or de-identify your information if:
(a) there is an unresolved issue relating to your account, such as an outstanding credit on your account or an unresolved claim or dispute;
(b) we are required to by any applicable law; and/or
(c) any information if necessary for our legitimate business interests, such as fraud prevention and enhancing users’ safety and security.
When personal information is no longer required, we will take reasonable steps to delete the personal information from our systems or de-identify the personal information.
15. LOCAL EXEMPTIONS
17. QUESTIONS, FEEDBACK AND COMPLAINTS
We will need to verify your identity when making a privacy complaint and may need to request further information from you. We will aim to resolve any privacy complaint within five business days from when we receive all the information we require to consider your complaint.
Last update: September 2020