Privacy Policy.

1. Scope and controller

This Privacy Policy explains how the Company handles personal information relating to website visitors, enquirers, customers, drivers, corporate representatives and authorised signatories. It applies to website, telephone, WhatsApp, email, Staff ERP, document, payment, vehicle delivery, inspection and support workflows.

2. Information collected

• Contact and identity information, including name, telephone, email, nationality, passport, UAE entry evidence, Emirates ID and driving licence information.
• Corporate information, including trade licence, tax registration information and authorised representative details.
• Enquiry, quotation, booking, agreement, payment, receipt, refund, deposit, communication and support records.
• Vehicle use and condition records, such as odometer, location supplied for delivery, inspections, photographs, tolls, parking, traffic penalties, damage and incident reports.
• Essential technical and security information needed to operate forms, protect sessions, prevent misuse and preserve audit evidence.

3. Purposes and legal grounds

Information is used to respond to enquiries, verify identity and rental eligibility, prepare quotations and agreements, allocate and protect vehicles, deliver and collect vehicles, process payments and refunds, manage deposits and charges, provide support, prevent fraud, keep accounting and audit records, establish or defend claims and meet legal or regulatory duties. Where consent is the appropriate basis, it may be withdrawn for future processing without affecting earlier lawful processing.

4. Sharing and international processing

Access is limited to authorised staff and service providers that are needed for hosting, secure storage, communications, payment processing, insurance, roadside assistance, professional advice or legal compliance. Information may be disclosed to banks, payment providers, insurers, competent UAE authorities or courts when required. If a service processes information outside the UAE, the Company must use an appropriate lawful transfer mechanism and proportionate safeguards.

5. Retention

Records are kept only as long as needed for the purpose collected, an active or potential contract, accounting, insurance, dispute, fraud-prevention, audit or legal requirement. The exact period depends on the record category and applicable obligation. At the end of the approved period, records are securely deleted, anonymised or retained under a documented legal hold.

6. Security

The Company uses role-based access, Microsoft Entra authentication for staff, private file storage, encryption in transit, controlled backups, audit logging and operational review. No system is risk-free. Suspected unauthorised access should be reported promptly using the contact details below.

7. Individual rights and requests

Subject to applicable UAE law, an individual may request information about processing, access or a copy, correction, restriction, objection, portability, review of certain automated processing, or deletion where the information is no longer required. Identity may be verified before a request is completed. A request may be limited where retention or disclosure is required by law, contract, claims or another person’s rights.

8. Website storage and communications

The website uses essential local storage or cookies only where needed to operate and remember a privacy-notice choice. The current production website does not enable optional analytics through the cookie notice. Marketing communications require an appropriate choice or lawful basis and provide a way to stop future messages.

9. Updates and complaints

Material changes are issued as a new, dated policy version. A privacy concern should first be sent to the Company with enough information to identify the relevant interaction. Individuals may also use the complaint or remedy available from the competent UAE authority.