EHI Privacy Policy

Dear eHi users: we have updated the privacy policy of eHi. This update details the personal privacy information we collect, adds a detailed description on how to use your personal information, clarifies the purpose of our collection of information, and defines the ways of user query, modification and personal information cancellation. eHi will update this privacy policy from time to time.

INTRODUCTION

eHi attaches great importance to the privacy and personal information protection of users. We respect and protect the privacy of all users who use the eHi platform. In order to provide you with our products and / or services, we need you to provide the personal information necessary for the products and / or services. If you do not provide your relevant information, we may not be able to provide you with the corresponding products and / or services. Through this privacy policy, we hope to explain to you the way by which we collect, use, save, share,transfer and disclosing these information when you use our products and / or services, and the way by which we provide you to access, update, delete and protect these information.

This policy will help you understand the following:

I.Scope of Application of This Privacy Policy
II.How do We Collect Your Personal Information
III.How do We Use Cookies and Similar Technologies
IV.How do We Use, Share, Transfer and Disclose Your Personal Information
V.How do We Save and Protect Your Personal Information
VI.How do You Manage Your Personal Information
VII.Notices and Amendments
VIII.How to Contact Us

I.Scope of Application of This Privacy Policy

eHi privacy policy is applicable to all users of eHi services, products, websites and App.

II.How do We Collect Your Personal Information

In general, you do not need to enter any personal information to access this website (including eHi APP), but on some pages, you will be requested to enter personal information for the provided services or transactions as per your requirements. We will only collect the information that is necessary for the purpose of the product functions according to the principles of legality, legitimacy and necessity.

Personal information refers to all kinds of information recorded by electronic or other means that can be used alone or in combination with other information to identify a specific natural person or reflect the activities of a specific natural person.

Personal information covered by this privacy policy includes:

Basic information (including personal name, birthday, gender, address, personal phone number, email);

Personal identity information (including ID card, passport, officer's card, Mainland Travel Permit for Taiwan Residents, Mainland Travel Permit for Hong Kong and Macau Residents, driving license, etc.);

Network identity identification (including system account, IP address, email address and password, passwords and passwords protection answer related to the above);

Personal device information (including device model, device MAC address, unique device identifier, battery, signal strength, etc.);

Personal location information (including travel information, precise positioning information, accommodation information, longitude and latitude).

1.The information you actively provide when using our services;

1.1.Information you fill in when you register your account, such as your name, email address, telephone number and contact address;

1.2.Information you upload when using the service, such as ID card number, passport number, driver's license number, date of birth, financial information (including credit card or account information), etc;

1.3.The information submitted by you through our customer service or when you participate in our activities, for example, your name, phone number, home address and other information may be included in the questionnaire you fill in when you participate in our online activities.Some of our services may require you to provide specific personal sensitive information to achieve specific functions. If you choose not to provide such information, you may not be able to use certain functions in the service normally, but it will not affect your use of other functions in the service. By providing your personal sensitive information, you agree that we will deal with your personal sensitive information according to the purpose and method described in this policy.

2.The information we obtain when you use the service;

2.1.Log information. When you use our service, we may automatically collect relevant information and store it as service log information.

2.2.Device information, such as device model, operating system version, unique device identifier, battery, signal strength and other information;

2.3.Software information, such as version number and browser type of the software. In order to ensure the security of the operating environment or provide services, we will collect information including IP address about the mobile application and other software you use;

2.4.Service log information, such as information you search and view when using our service, service failure information, referral website and other information;

2.5.Communication log information, for example, the account, communication time and time period that you used for communication when using our service.

2.6.Location information. When you use location related services, we may record the location information of your device to provide related services for you.

2.6.1.When you use the services, we may obtain your geographic location information through IP address, GPS, WIFI or base station;

2.6.2.The information provided by you or other users when using the service may include your geographic location information, such as the information of your region that may be included in the account information provided by you, and the geographic marker information contained in the photos shared by you or other people;

2.7.Other relevant information; in order to help you better use our products or services, we will collect relevant information. For example, we collect friends list and group list information. To ensure that you can contact people you know when using our service, if you choose to enable the import address book function, we may encrypt your contact's name and phone number, and collect only the encrypted information.

2.8.Your information contained in the information shared by other users; for example, photos or videos shared by other users may contain your information.

2.9.Information obtained from third-party partners; we may obtain information generated or shared by you when using our services through third-party platforms. For example, when you use our service by logging in through Alipay applet, we will get personal identity information and public information that you access when using our services so as to facilitate the business you are going to deal with. Please read carefully the user authorization agreement or privacy policy of the third party partner.

III.How do We Use Cookies and Similar Technologies

1.Cookies is an identification symbol composed of letters and numbers that can be written on your computer's hard disk through your web browser, so that the system can identify your browser during your visit and provide special services such as 1-Click to cancel link purchase, recommending products for you, personalized ads on other websites, etc. Therefore, one of the main uses of cookies is to provide a practical time-saving function. You can accept or reject cookies. Most web browsers automatically accept cookies, but you can usually modify your browser's settings to reject cookies based on your own needs.

2.Use of similar technologies: in addition to cookies, we will also use Beacon and other similar technologies on the website. We use the Internet Beacon in the following ways: 1. By using the Internet beacon on the eHi website, we calculate the number of user visits, and identify registered eHi users by visiting cookies. 2. Provide you with personalized services through the cookies information we obtained.

IV.How do We Use, Share, Transfer and Disclose Your Personal Information

1.Using

The purpose of collecting personal information is to provide you with products and services. We may use your personal information for the following purposes:

-    Providing, processing, maintaining, improving and developing our products and services, including after-sales service and customer support, as well as services provided through devices or website.

-    Carrying out relevant promotional activities, such as providing promotional materials and updates.

-    Carry out promotional activities, such as issuing holiday coupons.

-    Analyzing and developing statistics related to the use of our products or services to better improve our products or services.

-    Optimizing device performance.

-    Storing and maintaining information related to you for our business operations or legal obligations.

-    Providing local services that do not need to communicate with our servers.

We will take desensitization, de-identification and other ways to conduct comprehensive statistics, analysis and processing of your information, so as to provide you with more accurate, personalized, smooth and convenient services, or help us evaluate, improve or design services and operating activities;

In order to improve the user service experience and recommend better or appropriate services for users, we may form a group characteristic label based on user information, which is used to provide users with marketing activity notices, commercial electronic information or advertisements which may be interesting to you. If you do not want to accept such information, you can choose to unsubscribe as the method we prompt.

When we want to use the information for other purposes not specified in this policy, we will ask your consent again in the form of confirmation agreement, copy confirmation action under specific scenarios, etc. in accordance with the requirements of laws, regulations and national standards.

2.Sharing

eHi will not disclose or provide the user's personal information to any third party, except in the following circumstances or for the following purposes. Please note that information provided to data sharing partners and business consignors is not considered to constitute disclosure or provision of information to third parties.

(1) Having obtained user’s consent.

(2) To disclose or provide in accordance with laws or regulations.

(3) eHi is required to disclose information to cooperate with the public affairs of the state or local government.

When eHi cooperates with a third party to provide users with relevant network services, provided that the third party promises to strictly bear the same responsibility of protecting users' privacy as eHi, it is deemed that the user authorizes eHi to provide only relevant information including its personal registration data to such third party; among them, eHi explains the names of the third-party SDK plug-ins to be used and their purpose for users as follows: eHi will use four plug-ins for data statistics, namely, umeng, talkingata, zamplus SDK and Tencent bugly, will use Jpush to push messages for users, and will use Baidu map to provide users with map display and navigation functions.

3.Transferring

We will not transfer your personal information to any company, organization or individual except:

(1) Obtaining your express consent or authorization in advance;

(2) Providing according to applicable laws and regulations, requirements of legal procedures, mandatory administrative or judicial requirements;

(3) Providing in accordance with relevant agreements signed with you (including electronic agreements signed online and corresponding platform rules) or other legal documents;

(4) In case of merger, acquisition, asset transfer or similar transactions, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this privacy policy, otherwise, we will require the company or organization to request your permission again.

4.Disclosing

We will only disclose your personal information publicly if we are under the following circumstances and take the safety protection measures that meet the industry standards:

(1) Disclosing the designated personal information in the disclosure way expressly agreed by you;

(2) We may disclose your personal information publicly according to the required type and disclosure method of personal information when we are required to provide your personal information according to the requirements of laws, regulations, mandatory administrative law enforcement or judicial requirements. Under the premise of complying with laws and regulations, when we receive the above-mentioned request for information disclosure, we will require to issue corresponding legal documents, such as citation or investigation letter. We firmly believe that the information we are required to provide should be as transparent as possible to the extent permitted by law. We will carefully review all requests to ensure that they have a legal basis and are limited to data that law enforcement has a legitimate right to obtain for specific investigative purposes. Under the premise of laws and regulations, the documents we disclose are protected by encryption key.

V.How do We Save and Protect Your Personal Information

1.Storage location of information

We will store the personal information collected in China in accordance with laws and regulations.

We will properly manage and protect users' personal information and in accordance with strict standards, we will prevent the disclosure, loss and tampering of personal information with the greatest caution. However, in case of any of the following circumstances, eHi will not bear any legal liability:

(1) Any personal data leakage, loss, theft or tampering caused by the abnormal operation due to the temporary shutdown for Y2K, hacker attack, computer virus invasion or attack, government control, etc;

(2) Personal data leakage caused by other websites linked to our website (including eHi APP) and any legal disputes and consequences arising therefrom;

(3) Any consequence caused by force majeure.

You also need to keep your account number and password safe when you log in to the website. The operation through your account and password will be regarded as your own operation.

2.Technical measures for data security

We will adopt industry standard security protection measures, including establishing reasonable system specifications and security technology to prevent your personal information from unauthorized access, use, modification and data damage or loss.

The network service of eHi adopts encryption technology such as TLS (Transport Layer Security) protocol and provides browsing service through HTTPS and other ways to ensure the security of user data in the transmission process.

eHi adopts encryption technology to encrypt and save the user's personal information, and isolates the personal information with isolation technology.

eHi adopts strict data access rights and multiple identity authentication technology to protect personal information and avoid the illegal use of data.

eHi uses automatic code security check, data access log analysis technology for personal information security audit.

VI.How do You Manage Your Personal Information

1.Access and correct your personal information

You have the right to access and correct your personal information at any time. When you update your personal information, we will require your identity verification before we process the request. Once we have sufficient information, we can process your request to access and correct your personal information, we will respond to your request within the time limit specified by the applicable data protection law.

2.Delete your personal information

Information that you can directly clear or delete in our products and / or services page, including order information, browsing information and delivery address information; You can request us to delete personal information in the following circumstances:

(1) If the act that we deal with personal information violates the laws and regulations;

(2) If we collect and use your personal information without your consent;

(3) If the act we process the personal information violates the agreement with you;

(4) If you cancel the eHi account;

(5) If we terminate our services and operations.

If we decide to respond to your request for deletion, we will also notify the entities that have obtained your personal information from us and demand them to delete the personal information in a timely manner, unless otherwise stipulated by laws and regulations, or these entities have your independent authorization. When you delete information from our services, we may not immediately delete the corresponding information from the backup system, but we will delete the information when updating the backup system.

3.Change the scope of your authorization consent or withdraw your authorization

You may revoke your authorization of the privacy policy at any time, which may cause you to be unable to use our relevant products and / or services. According to your request, we will process your request within a reasonable time after you make the request, and will follow your request of no longer collecting, using or disclosing your personal information.

4.Cancellation of account

You can directly apply for account cancellation in our products. After you cancel your account, we will stop providing you with products and / or services, and delete your personal information according to your requirements, unless otherwise specified by laws and regulations.

5.If you do not want to accept the promotional information we sent you, you can cancel it at any time by the following ways:

(1) You can reply "TD" at any time to cancel the promotional SMS we sent you.

(2) You can set whether to accept the product and promotion information that we push to you through "Notification" by the setting in the "Account Setting - Setting- Push Message Setting - Notification" of the mobile app.

(3) In order to protect your privacy, we will not in any way or by any means push you promotions or products involving sensitive content related to religion, sex, disease, etc

6.Respond to your request

If you are unable to access, correct or delete your personal information in the above ways, or if you need to access, correct or delete other personal information generated when you use our products and / or services, or if you think there is any violation from eHi on the laws and regulations or any agreement with you for the collection or use of personal information, you can contact our online customer service or contact with us by calling the customer service hotline. In order to ensure security, we may need you to provide a written request or to prove your identity in other ways. We will reply to your request within 15 working days after receiving your feedback and verifying your identity. In principle, we will not charge you for your reasonable requests, but we will charge you a certain cost for repeated requests beyond the reasonable limit as the case may be. We may reject requests that are unprovoked, require too many technical means (for example, the need to develop new systems or fundamentally change current practices), pose risks to the legitimate rights and interests of others, or are highly impractical (for example, involving information stored on backup tapes).

We will not be able to respond to your request in accordance with laws and regulations in the following cases:

(1) Related to national security and national defense security;

(2) Related to public safety, public health and major public interests;

(3) Related to criminal investigation, prosecution and trial;

(4) There is sufficient evidence that you have subjective malice or abuse of rights;

(5) Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals and organizations.

VII.Notices and Amendments

In order to provide you with better services and with the development of the company's business, eHi will update this privacy policy from time to time. However, without your express consent, we will not reduce your rights under this privacy policy. We will remind you of the update of the relevant content by issuing the updated version on the company's official website and APP, and making a website announcement or other appropriate ways before it takes effect.

For major changes, we will also provide more significant notice (we will explain the specific changes of privacy policy by, including but not limited to, email, SMS or special tips on the browsing page).

Major changes referred to in this policy include but are not limited to:

(1) Dramatical changes in our service model, such as the purpose of personal information processing, the type of personal information processing, the way of using personal information, etc;

(2) Significant changes in our ownership structure, organizational structure, etc. Such as business adjustment, bankruptcy merger and acquisition, etc;

(3) Changes on the main objects of personal information sharing, transfer or public disclosure;

(4) Significant changes on your right to participate in the processing of personal information and the way you exercise it;

(5) Changes on the responsible department, contact information and complaint channel for personal information security;

(6) High risks indicated in the personal information security impact assessment report.

VIII.How to Contact Us

If you have any questions, opinions or suggestions on this privacy policy or your personal information, please contact us by visiting http://www.1hai.cn/help/ online customer service system, or calling customer service hotline 400-888-6608.