RENTALCARSCAN

Privacy policy

Information version: 2026-09 / 0.8.0

Data we process

Company registration collects company identity, tax ID, address, contact person and account credentials. Booking requests collect name, email, phone, dates and the selected offer. We store request status and accepted conditions. This version does not collect payment card details. For rental management, the company may record customer contacts, tax identification, address and internal notes, as well as handover and return data: mileage, fuel or charge level and vehicle condition. Operational data is not displayed in public offers.

Purposes and grounds

Data is used to review applications, manage accounts, forward requests, manage bookings and provide support. Pre-contractual steps and performance of the contractual relationship support those activities where applicable. Security and abuse prevention rely on the legitimate interest in protecting the service. Optional language storage depends on your cookie choice.

Recipients

Request details are shared with the rental company identified in the offer. Hosting and email providers support the technical service. The rental company also processes data for its rental agreement and may have its own policy. Externally hosted photos cause your browser to connect to their host.

Retention

Data is kept for the time needed for the request, company relationship and applicable obligations. Password-reset tokens expire after one hour. Email bodies are removed from the queue after sending; sent metadata is cleared after 30 days by maintenance. Booking records are not automatically deleted in this version; the operator manages retention and deletion.

Your rights

You can request access, correction, deletion, restriction, objection or portability where applicable, using the contact on this page. Optional-cookie permission can be withdrawn in preferences. You may complain to the competent data protection authority, including the CNPD in Portugal.

Security and transfers

We use hashed passwords, protected sessions, access controls and HTTPS when configured for production. Processing locations and any international transfers depend on the operator’s service providers; request further information using the privacy contact.