Dudu Driver App · Privacy policy
Operator and scope
This policy is provided by RCEP International Corporation Limited for Dudu services in mainland China and Thailand. Drivers participate as partner drivers. The rights and obligations of each party are governed by applicable local law and valid agreements.
Regional rules and sensitive information
We process personal information under applicable law where the service is provided. Information receiving special legal protection, including relevant movement and financial-account information, is limited to clear, necessary purposes. We provide explanations and obtain consent where required by the applicable jurisdiction. Requirements in mainland China and Thailand apply respectively; a general authorisation does not replace local requirements.
Information and purposes
Account access uses phone number, driver ID, email and credentials from the chosen authentication channel for login, verification and binding. Verification mail is sent only when requested. Profiles, qualifications and vehicle configuration support account display and eligibility checks. Orders, places, routes, messages, uploaded images and contact requests support service delivery. Payout-account holder, bank, account number and currency that you provide are used to verify your own payout account and make payments. Account sessions, language and interface preferences maintain sign-in and the experience you choose.
Location, images and permissions
Driver location supports orders, pickup, trip progress and navigation. During an active pickup or trip, location may continue updating in the background to provide those services. Camera and photos are used when you actively use relevant image or avatar features. Refusing image access does not prevent text communication. You can manage permissions in device settings; disabling location affects location-dependent features.
Recipients and sharing
Necessary order information is shown to the driver and passenger according to role and function. Enabled map, navigation, authentication, mail and telephone services may process relevant information; see third-parties.html. Partner status does not permit unrestricted download, marketing use or publication of passenger information. Third-party processing is limited to the purposes explained to you and the scope permitted by law; it does not authorise unrestricted publication or unrelated use of personal information.
Chat translation
When you choose chat translation, the selected message and target language are processed by Google Cloud Translation to provide a translation. A message may contain your or another person’s personal information; submit only what is needed for communication. Original and translated text are handled under this policy’s retention and deletion rules. Choosing not to translate does not prevent ordinary text chat.
Retention, deletion and cross-border processing
We retain personal information in accordance with applicable law where the service is provided and only for the period necessary for the purposes stated in this policy. Account information is retained as needed to provide account services. Order and transaction records are retained for applicable statutory obligations and necessary dispute handling. Location, communications and other service information are limited to the scope and period necessary for service delivery, safety and lawful dispute handling. We delete or anonymise information when its purpose has been fulfilled, its retention period ends or deletion is legally required. Information that must lawfully be retained is protected and restricted to the necessary period and purpose. Account deletion does not remove applicable statutory retention obligations.
Personal information is processed as necessary by this service and the providers of relevant features. Where a service involves cross-border transfers, we follow applicable requirements in mainland China, Thailand and other relevant jurisdictions for notice, safeguards and consent where required. See the third-party service information for providers and purposes. Use of the service does not authorise unrelated, undisclosed uses of personal information.
Your choices and rights
You may exercise rights of access, a copy, correction, deletion, withdrawal of consent, restriction and, where applicable, objection and data portability under applicable law. Relevant matters may be handled through the product’s available profile, permission and account-deletion functions. Withdrawal does not affect lawful processing before withdrawal; refusing optional processing does not affect unrelated features. Where identity verification is legally needed, it is limited to information necessary to handle the request.
Security, updates and minors
We take appropriate measures against unauthorised access, disclosure, loss or misuse of personal information. Information relating to minors receives safeguards required by law. Changes to purposes, data categories or sharing are accompanied by updated notice and consent where required.
Related official policies and terms
Google Maps features are subject to applicable Google terms and privacy policies. Other suppliers apply only where enabled. These links do not replace the SDK first-use terms flow or mean that all services are enabled.
Information for a rights request
For access, correction, deletion, withdrawal or other requests, identify the product, the action requested and enough information to identify the relevant account or records. For a particular order, include the relevant order information. Do not provide passwords, one-time codes, unrelated identity documents, photos or other people’s information.
Verification and request outcomes
To prevent impersonation, verification is limited to identity or lawful authority necessary for the request and should not require unrelated information. Requests are handled within the applicable legal or otherwise reasonable period, with an explanation of the outcome. If a request cannot lawfully be fully satisfied, the reasons and applicable remedies are explained.
Withdrawal and continued use
You may adjust authorisations through device permissions and privacy controls offered by the product. Withdrawal does not affect earlier lawful processing or remove legal duties to retain necessary information. Refusing optional permissions does not affect unrelated features; a requested feature may be unavailable where location or verification is necessary for it.
Mainland China provisions
Relevant processing in mainland China is subject to local personal-information rules. Information receiving special protection must have a specific, sufficiently necessary purpose and meet applicable enhanced notice, consent and safeguard requirements. You may seek explanations and exercise access, copy, correction, deletion and withdrawal rights, and use competent authorities or other lawful remedies.
Thailand provisions
Relevant processing in Thailand is subject to the PDPA and applicable implementing rules. Legal grounds are determined by the requested service and applicable law; not every processing activity is treated as consent-based. Subject to applicable conditions, you may exercise access, copy, correction, deletion, restriction, objection, portability and withdrawal rights and complain to the competent regulator.
Requirements for cross-border processing
Serving both regions does not permit unrestricted cross-border use. Where information is transferred to an overseas recipient, the relevant service, data categories, purpose and recipient must be identified as required by law, with applicable notice, safeguards and consent. Where a third party provides an independent service, its policy explains its processing and rights procedures.