Your data, your rules.

We collect only the personal data we need to value your car and complete a sale. Depending on how far you go, this includes:

• Your log card. The LTA data on it — make, model, registration date, COE left, paper value and ownership details — which you submit so we can value the vehicle.
• Your contact details. Your name, mobile number and email, so we can send you your number and offers and reach you about the sale.
• Your car details. Mileage, condition and any extra information you give us, plus photos if you upload them.
• Settlement details, if you proceed. What we need to pay you and to settle any outstanding loan and the LTA transfer.

We do not ask for more than the task needs, and we will tell you if a particular step needs something specific.

We use your data for clear, stated purposes — the service you came for:

• To value your car.Carle’s valuation reads your log card’s LTA data and prices your vehicle against the market to produce your indicative number.
• To run the auction.If you list, we use your car’s details to create the lot that licensed dealers bid on.
• To pay you and complete the sale. To settle any loan, file the LTA transfer, and make payment within 7 days of your acceptance.
• To support you. So a real person on our team can answer your questions about your sale.

We do not use your data for automated decisions that have a legal effect on you without a person involved, and we never sell your personal data.

Under the PDPA, we separate the consent that’s needed to provide the service from consent for marketing. They are not the same, and you control them separately.

Where we use cookies or analytics on our website, we ask for your consent through a banner that is never pre-ticked. You can accept or decline, and change your mind later.

We keep your data inside Carle wherever we can. We share it only where it’s needed to complete your sale:

• The Carle team. Staff handling your valuation, the auction and your settlement.
• The winning dealer — only on a completed deal. When a dealer wins your car and the sale completes, we pass the details needed for handover and the LTA transfer. No dealer receives your details before that point.
• Service providers. Trusted partners who help us operate — for example, secure hosting, payment, and the LTA transfer process — under confidentiality obligations.
• Where the law requires it.If we’re legally obliged to disclose, for example to a government authority.

We keep your personal data only as long as we need it:

• While your deal is live.For as long as you’re getting a value, listing, or completing a sale with us.
• For a set period after.Once a sale completes or you stop, we retain the records we’re required to keep — for example for accounting, tax and warranty against fraud — for a stated retention period, then delete or anonymise them.
• If you don’t proceed.If you get a number but don’t sell, we keep your enquiry for a limited period so we can help if you return, then remove it.

When data is no longer needed for any lawful purpose, we securely delete it or render it anonymous so it can no longer identify you.

We take reasonable steps to protect your data against loss, misuse and unauthorised access. These include access controls so only the staff who need your data can see it, encryption in transit, secure hosting, and audit trails on staff and money actions.

No system is perfectly secure, but we treat your data as we’d want our own treated. If a data breach occurred that posed a real risk to you, we would notify you and the relevant authority as the PDPA requires.

Under the PDPA, you have real control over your data. You can:

• Access it.Ask for a copy of the personal data we hold about you, and how we’ve used it.
• Correct it.Ask us to fix anything that’s wrong or out of date.
• Withdraw consent. Opt out of marketing at any time, or withdraw other consent where the service allows.
• Request erasure. Ask us to delete your data.

An erasure request is reviewed by our team, because a deal in progress or a record we’re legally required to keep may need to be completed or retained first. Where we must keep something, we’ll tell you what, and why, and delete the rest. We won’t charge you to withdraw consent.

We’ve appointed a Data Protection Officer (DPO) responsible for how we handle your data and for answering your PDPA requests and questions.

Data Protection Officer

dpo@carle.sg

By post

The DPO, Carle Singapore Pte Ltd, 33 Ubi Avenue 3, #01-04 Vertex, Singapore 408868

Withdraw consent

Your account settings, or email the DPO above

We may update this policy from time to time. The version and effective date are shown at the top of this page and in the footer; the current version always applies. If you’re unsure about anything here, a real person on the Carle team will explain it.