Last updated: 7 July 2026
EC Rent Limited ("EC Rent", "we", "us", "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you use our website (ecrent.com.hk) and services, in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").
1. Information We Collect
1.1. Information you provide directly: When you place an order, make an enquiry, or contact us, we may collect your name, telephone number, email address, delivery address, payment information, and any other information you voluntarily provide.
1.2. Order and rental information: We collect details of orders placed, rental equipment issued, rental duration, payment records, delivery and collection records, and related transaction data.
1.3. Communication records: We may retain records of communications with you, including WhatsApp messages, emails and phone call notes, for service quality and dispute resolution purposes.
1.4. Website usage data: We may automatically collect technical information when you visit our website, including IP address, browser type and version, device type, operating system, pages visited, time spent on pages, referral source, and browsing patterns. This data is collected through cookies and similar technologies.
2. How We Use Your Information
2.1. We use your personal information for the following purposes:
- Processing and fulfilling rental orders, including delivery and collection arrangements;
- Communicating with you about your orders, including order confirmations, delivery notifications, and collection scheduling;
- Processing payments and deposits, including refund processing;
- Providing customer support and responding to enquiries;
- Maintaining rental records and account management;
- Sending service-related notices (e.g., rental renewal reminders, equipment maintenance notices);
- Improving our website, products and services;
- Complying with legal obligations and enforcing our Terms of Service;
- Fraud prevention and security purposes.
2.2. We will not use your personal data for direct marketing purposes without your prior explicit consent.
3. Legal Basis for Processing
3.1. We process your personal data on the following legal bases:
- Contractual necessity: Processing necessary for the performance of a rental agreement with you;
- Legitimate interests: Processing necessary for our legitimate business interests (service improvement, fraud prevention, communication), where these interests are not overridden by your rights;
- Legal compliance: Processing necessary to comply with our legal obligations;
- Consent: Where you have given explicit consent for specific purposes (e.g., marketing communications).
4. Data Sharing and Disclosure
4.1. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
4.2. We may share your information with the following categories of recipients only as necessary for the purposes described in this Policy:
- Delivery partners: To facilitate equipment delivery and collection at your address;
- Payment processors: To process your payments securely;
- Professional advisors: Legal, accounting, or other professional advisors as required;
- Law enforcement and regulators: Where required by law, court order, or regulatory authority;
- Business transfers: In connection with any merger, acquisition, reorganisation, or sale of assets, your data may be transferred to the successor entity.
5. Data Retention
5.1. We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements.
5.2. Order and rental records are retained for a minimum of 7 years to comply with Hong Kong accounting and tax obligations.
5.3. Communication records are retained for 2 years from the last interaction unless a longer retention period is required for ongoing disputes or legal proceedings.
5.4. Website analytics data is retained in anonymised or aggregated form and cannot be linked back to identified individuals.
6. Data Security
6.1. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted communications (HTTPS), access controls, and secure storage practices.
6.2. While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
7. Cookies and Tracking
7.1. Our website uses cookies and similar technologies for essential functionality (e.g., shopping cart), performance analysis, and user experience improvement.
7.2. Essential cookies are necessary for the website to function and cannot be disabled. Analytics cookies help us understand how visitors use our website.
7.3. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.
8. Your Rights
8.1. Under the PDPO, you have the following rights regarding your personal data:
- Right of access: You may request access to the personal data we hold about you;
- Right of correction: You may request correction of any inaccurate personal data;
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time;
- Right to object: You may object to the use of your data for direct marketing purposes.
8.2. To exercise any of these rights, please contact us using the details provided in Section 11. We will respond to valid requests within 40 days as required by the PDPO.
8.3. We may charge a reasonable fee for processing data access requests, as permitted under the PDPO.
9. Children's Privacy
9.1. Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete it promptly.
10. International Transfers
10.1. Your personal data is primarily stored and processed in Hong Kong. If any data is transferred outside Hong Kong, we will ensure appropriate safeguards are in place to protect your data in accordance with the PDPO.
11. Contact and Complaints
11.1. For any privacy-related enquiries, data access requests, or complaints, please contact us via WhatsApp or through the contact details on our website.
11.2. If you are unsatisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.
12. Changes to This Policy
12.1. We may update this Privacy Policy from time to time. Material changes will be notified on our website. The "Last updated" date at the top indicates the most recent revision.