Privacy Statement

This Privacy Statement describes BYD’s use of your data. The document comprehensively addresses information on the processing of personal data while using your BYD vehicle, purchasing our products or receiving our services. BYD will process your personal data within your residential country/district or other specific storage locations, you can contact us via Auto.asia@byd.com, or the following contact details:

 

Your residential country	Legal Entity	Mailing address	Storage location
Singapore, Brunei, Cambodia, Vietnam, Laos, Myanmar	BYD (SINGAPORE) PTE. LTD.	151 Lor Chuan, #04-03B Lobby C New Tech Park, Singapore 556741	Singapore
Hong Kong（China）	BYD (H.K.) Co., Ltd.	Rm.1712, Tower2, Grand Central Plaza, 138 Shatin Rural Committee Rd., Shatin. N.T., Hong Kong.
Macau（China）	BYD MACAU LIMITED	澳门宋玉生广场335-341号获多利中心21楼H座
Thailand	BYD AUTO (THAILAND) CO., LTD.	Interchange 21 building 22nd fl. room no.2211,  399 Sukhumvit Rd, Khlong Toei Nuea, Watthana,Bangkok 10110
Philippines	BYD PHILIPHINES CORP.	BGC Corporate Center 30th St. corner 11th Ave., Fort Bonifacio Taguig City, Philippines 1630
Malaysia	BYD Malaysia SDN.BHD	Unit 1.5a, Level 1, East Lobby, Menara Sunway Annexe Jalan Lagoon Timur, Bandar Sunway, 47500 Selangor
Australia New Zealand	BYD AUSTRALIA PTY LTD	Suite 102, Level 1, 2 Lyonpark Road, Macquarie Park, NSW,2113	Australia
Japan	BYD Auto Japan Inc.	Yokohama Diamond Building 19F, 1-7, Kinkocho, Kanagawa ward, Yokohama city , Kanagawa, 221-0056, Japan	Japan
India	BYD India Private Limited	D2 & D8, Sipcot Industrial Park, Irungattukottai, Sriperumbudur (TK), Kanchipuram (DT), Tamil Nadu - 602105	India

 

We would like to emphasize that we take the protection of your privacy and your personal data very seriously and that we process your data in accordance with applicable data protection laws. We would like to explain to you below in more detail which personal data we collect in connection with BYD and how we use this data. In this Privacy Statement, we will explain to you:

1. What data do we collect?

2. How do we use your personal data?

3. Who will we share this data with?

4. What third party services do we use?

5. To which third countries will we transfer your data?

6. What rights do you have in relation to your data?

7. How long do we retain your data?

8. How do we protect your data?

9. Information About Children

10. If you have any questions about your data?

11. How will we update this Privacy Statement?

This Privacy Statement may be changed over time. This Privacy Statement applies since 2024-03-10.

1. What data do we collect?

To provide our services, we have a need to process personal data. We may collect the following type of personal information when you use our products and services:

 

Type of Data	Details
Basic information	your name, plate number
Contact information	your address, phone number, email address
Vehicle information	vehicle identifiable data, vehicle usage and performance data, vehicle driving data, vehicle geolocation data, diagnostic data, infotainment system data, advanced driver assistance system data
Purchase information	purchase date, delivery status

In general, we may collect personal information directly from:

· Users of the connected vehicle services.

· Your vehicle.

Information Collected from Users of the Vehicle Service.

We may collect personal Information directly from you, such as when you activate the connected vehicle services or communicate with us related to the connected vehicle services.

· Activation. When activating the connected vehicle services, we may collect information that you provide us such as your email address, region, and other contact information.

· Customer Service and Support Data. When you request for information, calls, emails, or communications, we will maintain records about our interactions and communications with you in the form of telephone voice, online interactive text, or other forms, including the nature of the request, your name and contact information, and information related to our resolution of your request.

Information Collected from Your Connected Vehicle.

Your vehicle is equipped with various software, sensors, features, and other technologies that may generate, store, transmit or permit the retrieval of information from a vehicle, which includes information related to the performance, location, operation and use of your vehicle and the connected vehicle services. When the connected vehicle services are available and enabled, your vehicle or we will collect your information:

· Vehicle Identifiable Data: Each vehicle has a unique vehicle identification number (VIN). There are other similar vehicle identifiable number, such as vehicle host device ID, vehicle integrate circuit card identity (ICCID) and vehicle international mobile equipment identity (IMEI). These data are only collected if the related services in your vehicle have been activated.

· Vehicle Usage and Performance Data. Information related to the use of your vehicle and the connected vehicle services, as well as vehicle performance, usage, operation, health, diagnostic logs, charging information and service-related data. This includes information such as odometer, mileage, and emissions data; tire pressure data; trouble or error codes, and other diagnostic data; brake status; engine performance;  fuel levels and refueling activity; battery levels and status; vehicle settings, commands and presets, points of interest, and other information about your use of certain features; Wi-Fi password, Wi-Fi security mode, Wi-Fi SSID, Bluetooth name and other performance data; as well as associated date and time stamps for such information. These data can be stored locally in your vehicle and remain inaccessible by us unless a specific event is triggered by your request service or repairs. For example, when you use our car control and monitoring services through BYD APP, we will collect your personal information, including platform version, vehicle door and vehicle door lock status, power gear, status of vehicle windows and sunroofs, tire pressure status, engine coolant temperature,vehicle system warning status, oil pressure indicator light  status, meter fault indicator status, charging plan,charging status, air conditioner type, remaining charging time, whether the air conditioner support temperature regulation, time for remote control of air conditioner, control results of  air conditioner, air conditioner comfort color, PM2.5 concentrations inside and outside the vehicle, driver's seat ventilation and heating status, front passenger's seat  ventilation and heating status, rear seats ventilation and heating status, fuel consumption, cumulative average fuel consumption, charging status, SOC, vehicle light status, in-car temperature, vital signs detection warning, vehicle type, and steering wheel heating status, SN (component identification number), running process information, resource usage information (CPU, memory, etc.), IP address (in car local area network), current system version of the car, and detected security events.

· Vehicle Driving Data. We collect driving data about your vehicle such as speed, acceleration, and braking data; direction of travel; trip data (mileage, date, length, conditions); ignition events; steering events; cruise control data; seatbelt status; information about vehicle incidents or events; other information about how you drive a vehicle; as well as associated date and time stamps for such information. These data can be stored in your vehicle and remain inaccessible by us unless a specific event is triggered by your request service or repairs. 

· Vehicle Geo-location Data. In providing the connected vehicle services, we may collect geolocation information, including your vehicle’s GPS location. When you engage remote services using your mobile device, we also collect your mobile device location information. Geolocation information may be associated with the other information, such as photo image, which are stored locally in your vehicle. To protect your privacy, geolocation information is either processed directly without leaving your vehicle or transmitted directly to the service provider in a form that does not directly identify you.

· Diagnostic data. we collect your vehicle operation diagnostic data for identifying and troubleshooting unexpected software or connectivity issues. diagnostics may include details about vehicle configuration, firmware, energy use, electronic systems state, and other system data used to identify bugs and conduct technical evaluations. These data include: vehicle electric quantity, remaining charging time, vehicle range, total mileage, power gear, door status, tire pressure data, window status, ventilated and heated seats status, power type, vehicle identification number, battery management system (BMS) , on-board charger with rectifier (DCOBC) , engine control module (ECM), thermal management related data, intelligent park brake system (IPB), DC-to-DC converter (DC/DC), on-board charger (OBC), front motor controller unit (FMCU),  vehicle control unit (VCU), throttle status, braking status, vehicle operating mode, vehicle status, charging and discharging information, instrument data, battery information.

· Infotainment system data. Your vehicle may collect your vehicle infotainment system analytics data regarding infotainment usage such as function successfully or unsuccessfully loaded, aggregated counts of the features or apps used, playback and browsing metadata. These infotainment features can be stored locally, or they can be located on a device that you have linked with the vehicle (e.g., smartphone, USB stick or SD card). These data are only transmitted out of the vehicle  at your request, particularly as part of the use of services in line with the settings selected by you.

· Voice commands: Your vehicle is equipped with the ability for you to use your voice to speak commands to the vehicle. We don’t capture your voice record.

· eCall Service: In the event when you are in a traffic accident or you press the SOS button for roadside assistance, the eCall system on the in-vehicle terminal will provide your vehicle location,contact information and additional required information to the PSAP (Public Safety Answering Point which is set up by government authority). The collection and sharing of these data comply with the requirements of laws and regulations, which only include Minimal Set of Data (MSD), namely MSD message identifier, types of triggers, vehicle VIN code, vehicle power type, timestamp and other required information. Please notice that the provision of this service is subject to the actual function and configuration of the vehicle.

· Advanced driver assistance system data: Your vehicle may have been equipped with a camera suite, providing advanced features such as driving assist and advanced driver assistance system to recognize things like lane lines and street signs. Advanced driver assistance system data from the camera suite is processed directly in your vehicle.

· Child Presence Detection(CPD):  In order to detect the presence of a child in the vehicle, we may detect information about the breathing, body movements, or any other sign of life in the vehicle; please note that we do not store this information.

· Intrusion Detection and Prevention Services (IDPS):  Your vehicle may be installed with intrusion detection and prevention system (IDPS) to provide continuous protection for vehicle from cyberattacks by detecting in-vehicle attacks, monitoring fleet-wide security events, and uploading to the cloud. In order to implement such function, we will collect VIN, Vehicle Intranet IP Address and components serial number. Please note that we will not store these data. The detection system is based on legal requirement. Please notice that the provision of this service is subject to the actual function and configuration of the vehicle.

· Data Usage. The in-vehicle application platform needs to consume cellular data when connecting to the network. In order to facilitate the settlement of data usage fees, we need to identify your VIN, data package, and remaining data usage. In order to provide troubleshooting and analysis services, we need to record data usage (including data usage by each application).

2. How do we use your personal data?

We use personal data to manage and meet service and information requests, to understand vehicle use, and to make our products and services as effective as possible.

Data Processing Activities （Purposes）	Type of Data	Legal Basis for Processing
To perform a contract with you and to fulfil and complete your orders, purchases and other transactions entered with us	· Your basic information · Contact information · Vehicle information · Purchase information	· Where you have provided your consent
To fulfil requests you make to us, including test drives, service requests, call back requests for events or vehicles, brochure requests or information about specific vehicles	· Contact information · Purchase information · Service history · Your intent vehicle models · Vehicle basic information (VIN)	· Where you have provided your consent
To send you details of products, services, exclusive events, special offers and rewards that we think will be of interest to you, unless you object	· Purchase information · Contact information	· Where you have provided your consent
To provide car-control service for you on BYD APP	· Vehicle basic information (VIN) · User ID · Vehicle data · Telematics log data	· Where you have provided your consent
System application service(BYD Store)	· Vehicle basic information (VIN) · User ID	· Where you have provided your consent
To provide Intellectual Charging service for you on BYD APP	· Vehicle status information (charging plan, charging status) · Vehicle basic information (VIN)	· Where you have provided your consent
To provide over-the-air (OTA) system upgrade	· Vehicle basic information (VIN) · Telematics log data	· Where you have provided your consent
To provide navigation service for you	· Your real-time location · Locations of your destination · Your address information · Vehicle basic information (VIN)	· Where you have provided your consent
To provide after-sales service for you, including identifying and troubleshooting unexpected software or connectivity issues, and other debugging log reports	· Vehicle basic information (VIN) · Telematics log data · Contact information · Purchase information · Service history	· Performance of a contract with you · Where you have provided your consent
To demonstrate compliance with regulatory requirements	· Contact information · Purchase information · Vehicle information · Information related to CPD	· Necessary to comply with a legal obligation

In order to provide related products and services, we need you to authorize to enable the corresponding permissions, such as Bodywork info, Vehicle Settings info, Storage, Location, Gearbox info, Speed info, Dashboard info, Camera, Microphone, Phone, etc. To ensure the normal use of the corresponding functions; if you refuse to enable the relevant permissions, you may not be able to obtain the relevant functions or services normally; You can disable them in “Settings- System Settings- Apps- Permissions- Location” in your vehicle screen.

Please note that it is unable to identify a specific natural person just with information of individual equipment and operating system. To optimize products, we may analyze non-personal information. If we combine such non-personal information with other non-personal information or personal information to identify a specific natural person, then the non-personal information will be regarded as personal information. Unless authorized by you or required by the law and regulation, we will anonymize your personal information.

3. Who will we share this data with?

We do not sell your personal data to anyone for any purpose, period. The table below illustrates who we may share your personal data with:

Categories of Recipients	Description	Reason for Sharing
Affiliates and subsidiaries	Companies that directly or indirectly, controls, is controlled by or is under common control with BYD, or where we have a substantial ownership interest	To assist, operate, enhance, and fulfil services on our behalf
Telenav Map	Company we’ve cooperated to provide map and navigation service	To provide navigation services map and navigation service on our behalf
AMAP Map (when your car was sold in China Hong Kong and China Macau)	Company we’ve cooperated to provide map and navigation service	To provide navigation services map and navigation service on our behalf
ZENRIN	Company we’ve cooperated to provide map and navigation service	To provide navigation services map and navigation service on our behalf
Cerence	Voice assistance service provider	Voice assisting for you to use your voice to speak commands to the vehicle
Cloud Services Provider in Singapore-AWS Cloud	Companies we’ve hired to provide cloud data hosting service	To assist, operate, enhance, and fulfil services on our behalf
Cloud Services Provider in Japan-AWS Cloud	Companies we’ve hired to provide cloud data hosting service	To assist, operate, enhance, and fulfil services on our behalf
Cloud Services Provider in India-AWS Cloud	Companies we’ve hired to provide cloud data hosting service	To assist, operate, enhance, and fulfil services on our behalf
Law enforcement and government authorities  in the country where the service is provided	Disclosure of information as required by law, or when otherwise appropriate	To comply with applicable laws

When third parties are given access to your personal data, we will take the required contractual, technical and organizational measures to ensure that your personal data are only processed to the extent that such processing is necessary. In other cases, your personal data will not be supplied to third parties, except where required or allowed by law.

4. What third party services do we use?

The following table lists the third-party services currently used by BYD and provides links to the privacy policies for each third-party service provider. Some of the third-party services might not be provided already in some area, please refer to your BYD car system. We do not share your any personal data to the below third parties(except AMAP Map,Telenav Map), we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these third parties.

Third-Party Service	Purpose and Use	Link to Third-Party’s Privacy Policy
Spotify	Provide media services	https://www.spotify.com/us/legal/privacy-policy
AMAP Map (when your car was sold in China Hong Kong and China Macau)	Provide navigation services	http://cache.amap.com/h5/h5/publish/238/index.html
Telenav Map	Provide navigation services	https://www.telenav.com/legal/terms-connected-nav-b22 https://www.telenav.com/legal/policies-privacy-policy
ZENRIN	Provide navigation services	https://www.zenrin.co.jp/privacy/index.html
Cerence	Provide voice assistant services	https://cerence.com/privacy-policy
iFlytek	Provide voice assistant services	http://aqua-sa.aicloudapi.com/service-aisp-aiui/getSecurityData
Carplay	To enable a car radio or head unit to be a display and a controller for an iOS device	https://www.apple.com/privacy/features/
Android AUTO	To enable a car radio or head unit to be a display and a controller for an Android device	https://policies.google.com/privacy

5. To which third countries will we transfer your data?

We will store your personal data within your residential country/district or other specific storage locations mentioned in contact detail, We will take appropriate measures to ensure that safeguards are in place to ensure adequate data protection level.

From time to time, BYD may also send your personal information overseas for the following reasons:

· to third party service providers who store data or operate outside of your residential area;

· to complete a transaction involving an international financial institution;

· as required by laws and regulations of your residential area or another country.

By making a purchase or otherwise submitting your personal data to us, you give your consent to transfer information to BYD in the countries other than your place of residence or in which the information was originally collected.

6. What rights do you have in relation to your data?

Unless exceptions provided by applicable law and regulations, you generally have the right to ask us:

· for access to your personal data that we hold.

· withdraw consent given, or deemed to have been in respect of the collection, use or disclosure.

· to update or correct your personal data in order to make it accurate.

If the processing of personal data is based on the consent of the Data Subject, he or she may withdraw his or her consent at any time, but this does not affect the lawfulness of the previous processing.

These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your data or if making the information available to you would reveal personal data about another person or if we are legally prevented from disclosing such information. In some instances, this may mean that we are able to retain data even if you withdraw your consent.

We hope that we can satisfy any queries you may have about the way we process your data. If you have any concerns about how we process your data, you can contact us as described below in the section “If you have any questions about your data”.

In the event you still have unresolved concerns, you also have the right to lodge a complaint with a supervisory authority, in particular the data protection authority in the Member State of your habitual residence or place of work.

Finally, please note that where we require personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, provision of requested personal data is optional.

7. How long do we retain your data?

For data about your purchasing our products or receiving our services, BYD will keep this data for legal and tax preservation obligations. Where you are a customer, BYD will keep your information for the duration of any contractual relationship you have with us, and, to the extent permitted, after the end of that relationship for as long as necessary to perform the purposes set out in this Statement.  We retain the information we collect from or about you for the period necessary to fulfill the purposes outlined in this Privacy Statement unless a longer retention period is required or permitted by law. When the information is no longer necessary for these purposes, we delete it or keep it in a form that does not identify you. When determining this retention period, we take into account various criteria, including the type of services requested by or provided to you, the nature of our relationship with you, the impact on the services we provide to you if we delete some information from or about you, and retention periods required by law.

8. How do we protect your data?

We strive to maintain the appropriate standards of security and BYD has put in place robust technical and organizational measures for the protection of your data in accordance with the current, general state of technology, especially to protect the data against loss, falsification or access by unauthorized third persons. However the transmission of information via the internet is not completely secure. So, whilst we will do our best to protect your personal data, we cannot guarantee the complete security of your data transmitted via BYD vehicle. Any transmission is at your own risk. Once we have received your personal data we will use strict procedures and security features to prevent unauthorized access. In the unfortunate event that a personal data security incident occurs, we will report it promptly and take remedial measures in accordance with the requirements of the law and regulatory authorities.

9. Information About Children

10. We endeavour to protect children's personal data. The provision of our connected vehicle products and/or services are only for adults, and we will not intentionally collect any personal data from children. In the events when the personal data of the children is collected with the consent of their parents or guardians, we will only use or disclose this data when permitted by law, with the explicit consent of the parents or guardians, or when necessary to protect the legitimate rights and interests of the children. If we discover that we have collected personal data from a child without first obtaining the consent of parents or guardians, we will seek to delete the data as soon as possible. If a parent or guardian discovers that we have collected a child's personal data without the parents or guardians’ consent, please notify us immediately through the contact data listed above, and we will try to delete the relevant data as soon as possible, except as required by applicable law.

11. If you have any questions about your data?

If you have any questions about the processing of your personal data, please read this Privacy Statement first. For additional questions, please feel free to contact us through our e-mail or write to us via contact details mentioned above according to your residence. Please note that we take your satisfaction very seriously. Should you have a complaint, please also direct it to the same email address and we will respond to you as soon as we can. You can of course also lodge a complaint with the data protection authority of the country in which you live.

12. How will we update this Privacy Statement?

We may update this Privacy Statement according to changes in our business functions and measures concerning the protection of personal information. If we make changes to this Privacy Statement, we will notify you. Where changes to this Privacy Statement will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you have.