Privacy Policy

Welcome to Rental Auto. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our car rental platform.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

We collect information that you provide directly to us, including:

• Personal identification information (name, email address, phone number, age)

• Profile information (bio, location, address, city, state, country, zip code)

• Account information (display name, avatar, roles)

• Car rental history and booking preferences

• Communication records (customer support interactions, feedback)

• Host-specific information (business name, years of experience, response rate) - if you are a host

• Emergency contact information (optional)

• Verification information (email verification status, phone verification status, ID verification status)

We also automatically collect certain information when you use our platform, including:

• Device information (IP address, browser type, operating system)

• Usage data (pages visited, time spent, click patterns)

• Location data (when you enable location services or provide location in your profile)

• Cookies and similar tracking technologies

Payment Information: When you pay online by card, your payment is processed by Stripe. Rental Auto does not store your full card number, CVV, or expiry date. We receive only a payment confirmation and limited payment method details such as card brand and last 4 digits for reference in your booking history.

We use the collected information for various purposes:

• To provide, maintain, and improve our services

• To process bookings and manage your account

• To communicate with you about your bookings, account, and our services

• To verify your identity and prevent fraud

• To personalize your experience and provide relevant content

• To send promotional materials and marketing communications (with your consent)

• To analyze usage patterns and improve our platform

• To comply with legal obligations and enforce our terms of service

• To retain booking and account records for legal, accounting, fraud-prevention, and dispute-resolution purposes for limited retention periods set by law or legitimate business need

Legal basis for processing (GDPR Art. 6): (a) Contract performance — processing necessary to provide and manage the rental service you requested; (b) Legal obligation — retention of financial and booking records required by Albanian fiscal law and GDPR; (c) Consent — marketing communications, which you may withdraw at any time; (d) Legitimate interests — fraud prevention, platform security, and service improvement.

We may share your information in the following circumstances:

• With vehicle hosts to facilitate bookings and communication (name, email, phone, booking details)

• With service providers who assist in our operations (Firebase for authentication/database infrastructure, email delivery providers for transactional emails, hosting, analytics, customer support, and Stripe for secure online payment processing)

• Stripe (stripe.com): Secure online payment processing. Data shared: transaction amount, booking reference, and anonymized payment method information. Location: United States (Standard Contractual Clauses or other lawful transfer mechanisms where applicable). Privacy policy: stripe.com/privacy. Stripe is PCI-DSS Level 1 certified, the highest level of payment security certification.

• When required by law or to protect our rights and safety

• In connection with a business transfer (merger, acquisition, or sale)

• With your explicit consent for any other purpose

We do not sell your personal information to third parties.

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of sensitive data in transit and at rest

• Secure authentication and access controls

• Regular security assessments and updates

• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain personal data only for as long as necessary for booking management, legal compliance, accounting, fraud prevention, and dispute resolution.

Account data (profile, verification status, preferences) is retained for the duration of your account. After account deletion is requested, personal data is removed within 30 days, except where retention is required by law.

Booking records are retained for 7 years from the date of the rental for accounting, legal compliance, and dispute resolution, in accordance with Albanian fiscal law.

Payment transaction records are retained for 7 years for accounting and legal compliance purposes, in accordance with Albanian fiscal law.

As a user of our platform, you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you

• Rectification: Request correction of inaccurate or incomplete information

• Erasure: Request deletion of your personal information

• Restriction: Request limitation of how we process your information

• Portability: Request transfer of your information to another service

• Objection: Object to certain types of processing

• Withdraw Consent: Withdraw consent for data processing where applicable

Right regarding payment data: You may request deletion of your account and associated personal data. Note that payment transaction records must be retained for legal compliance and cannot be deleted before the legal retention period expires.

To exercise these rights, please contact us using the information provided in the Contact section.

We use cookies and similar tracking technologies to enhance your experience, analyze platform usage, and support marketing efforts. These include strictly necessary cookies (required for the platform to function, such as your session), functional cookies (remembering your preferences), and analytics/marketing cookies (used only with your consent).

Cookie consent is managed through our consent management platform. You can review and update your cookie preferences at any time via the cookie settings banner. Withdrawing consent for non-essential cookies does not affect the functionality of the core platform.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the 'Last Updated' date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Data Controller: Rental Auto, Tirana, Albania

Email: support@rental-auto.com

Phone: +355 69 609 6967

Address: Tirana, Albania

This Privacy Policy is governed by the laws of Albania (Law No. 9887/2008 on Personal Data Protection) and, where applicable, GDPR requirements.