GDPR Compliance Statement

Last Updated: July 13, 2026

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation and Data Protection Act 2018. This statement outlines how we comply with data protection principles and safeguard your rights as a data subject.

Lawful Basis for Processing

We process personal data on the following lawful bases:

• Contractual necessity: Processing your reservation request and managing vehicle rental agreements
• Legitimate interests: Improving our services and maintaining website security
• Legal obligation: Retaining records for accounting and regulatory compliance purposes
• Consent: Where you have provided explicit consent for specific processing activities

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal information we hold about you
• Right to rectification: You may request correction of inaccurate or incomplete data
• Right to erasure: You may request deletion of your data in certain circumstances
• Right to restrict processing: You may request limitation of how we use your data
• Right to data portability: You may request transfer of your data in a structured format
• Right to object: You may object to processing based on legitimate interests
• Rights related to automated decision-making: We do not use automated decision-making or profiling

Data We Collect

We collect and process the following categories of personal data:

• Identity data: Full name
• Contact data: Email address
• Transaction data: Service selections and rental preferences
• Technical data: IP address, browser type, device information
• Usage data: Website interaction and navigation patterns

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Reservation inquiries: Retained for duration of rental plus seven years for legal and accounting requirements
• Technical and usage data: Retained for twelve months
• Cookie consent records: Retained for twelve months from last interaction

Data Security Measures

We implement appropriate technical and organisational measures to ensure data security, including:

• Encrypted data transmission via SSL certificates
• Secure server infrastructure with restricted access controls
• Regular security assessments and updates
• Staff training on data protection responsibilities
• Documented data breach response procedures

International Data Transfers

Your personal data is stored and processed within the United Kingdom. We do not transfer data outside the UK except where necessary for essential service provision, and only with appropriate safeguards in place.

Making a Request

To exercise any of your data protection rights, please submit a written request to [email protected] or by post to 47 Colmore Row, Birmingham, B3 2BS, United Kingdom. We will respond within one month of receiving your request.

We may require proof of identity before processing requests to ensure data security. There is no charge for most requests, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

Complaints

If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.

ICO contact details: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113. Website: www.ico.org.uk

Data Protection Officer

For questions regarding data protection or this compliance statement, please contact us at [email protected]