Privacy Policy

1. Who we are

This website is operated by [LEGAL COMPANY NAME], [LEGAL ADDRESS], Spain ('Island Cars', 'we', 'us'). For any question about this policy or your personal data, contact us at [PRIVACY CONTACT EMAIL].

2. What data we collect

Account and profile data: name, email, phone, date of birth, address, driver's license number, and ID/passport document details, provided when you register.

Booking data: pickup and return locations, rental dates, selected vehicle, price, payment method, and payment status, created when you book a car.

Technical data stored in your browser: your search criteria (pickup/return location, dates) are kept in your browser's local storage for up to 4 hours so the site can restore your last search — this data stays on your device and is not sent to our servers as a separate tracking mechanism.

We do not knowingly collect data from anyone under 18.

3. Why we process your data, and on what basis

To create and manage your account — necessary to perform our contract with you.

To process and manage vehicle bookings, including cancellations — necessary to perform our contract with you.

To comply with legal obligations, such as reporting traffic fines to the relevant authorities — necessary for legal compliance.

To respond to your enquiries and provide customer support — our legitimate interest in supporting our customers.

To keep the site secure and prevent abuse — our legitimate interest in protecting our service and users.

4. Cookies and local storage

We use your browser's local storage (not third-party tracking cookies) to remember your last vehicle search for up to 4 hours, so you don't have to re-enter it if you return to the site. This data is stored only on your device and is automatically cleared after 4 hours or when you clear your browser data.

We currently do not use advertising or analytics cookies. If this changes, we will update this policy and, where required, ask for your consent.

5. Who we share your data with

Our hosting and database provider, which stores account, profile, and booking data on our behalf under a data processing agreement.

Public authorities (police, traffic authorities, courts), where required by law — for example, in relation to traffic fines or legal claims.

Insurance companies, where relevant to a claim involving your rental.

We do not sell your personal data to third parties.

6. How long we keep your data

We keep account and profile data for as long as your account is active. If you delete your account, we delete your profile data, except where we are legally required to retain certain records (for example, for tax or legal claim purposes) for longer.

Booking records may be kept for longer where required for accounting, tax, or legal purposes.

Search data stored in local storage is automatically cleared after 4 hours.

7. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at [PRIVACY CONTACT EMAIL]. You also have the right to lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos, www.aepd.es) or your local supervisory authority.

8. International data transfers

Your data is stored on servers located in [SERVER LOCATION]. If we ever transfer data outside the European Economic Area, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

9. Changes to this policy

We may update this policy from time to time. The 'Last updated' date at the top of this page shows when it was last revised. We encourage you to review this page periodically.