1. Information We Collect We may collect personal information that you voluntarily provide to us when you make a booking, subscribe to our newsletter, or contact us. This includes:

• Identity Data: Name, date of birth, driver’s license details, passport or other ID.

• Contact Data: Billing address, delivery address, email address, and telephone numbers.

• Financial Data: Payment card details and transaction history.

• Vehicle Rental Data: Booking details, pickup/drop-off locations, rental history, and preferences.

• Technical & Usage Data: IP address, browser type, time zone setting, operating system, and how you use our Site.

2. How We Use Your Information We use your personal data lawfully and transparently for the following purposes:

• To process and manage your vehicle rental bookings.

• To verify your identity and eligibility to drive (including driver's license checks).

• To process payments, manage fees, and collect debts.

• To provide customer support and respond to your inquiries.

• To send you updates, promotional materials, or offers (where you have consented).

• To comply with legal obligations, prevent fraud, and ensure the safety of our fleet.

3. Legal Basis for Processing We process your data under the following legal grounds:

• Performance of a Contract: To fulfill your booking request and rental agreement.

• Legal Obligation: To comply with transport, insurance, and tax laws.

• Legitimate Interests: To improve our services, maintain fleet security, and prevent fraudulent bookings.

• Consent: When you explicitly opt-in to receive marketing communications.

4. Data Sharing and Disclosure We do not sell your personal data. We may share your information with trusted third parties only to the extent necessary:

• Service Providers: Payment processors, booking software, IT support, and website hosting services (Webador).

• Insurance Companies: To arrange coverage and manage claims.

Law Enforcement & Authorities: If required by law, court order, or to prevent/detect crime and traffic violations.

5. International Data Transfers If your data is transferred outside the UK/EEA, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to maintain a level of protection equal to UK data protection laws.

6. Data Security We implement industry-standard technical and organizational security measures to prevent your personal data from being accidentally lost, used, altered, or accessed without authorization.

7. Data Retention We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Legal Rights Under UK and EU data protection laws (GDPR), you have the right to:

• Access, correct, or erase your personal data.

• Restrict or object to the processing of your data.

• Request the transfer of your data (data portability).

• Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us using the details below.

9. Contact Us If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Company Name: Rental Cars

• Address: Unit 12, Riverside Prestige Park, Norwich, NR1 1WT

• Phone: 01603 555 789

• Email: [Insert Email Address, e.g., info@rentalcarsnorwich.co.uk]