Privacy policy

We are bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth) to the extent they apply to us, and we follow them in any case. This policy explains what we collect, why, how long we keep it and who we share it with.

What we collect

• Identity and licence details — your name, date of birth, driver licence number, licence class and expiry, and images of your licence and other photo ID taken at pickup.
• Contact details — phone, email, residential address and emergency contact.
• Rental details — the car, dates, intended use, additional drivers, condition report photos, odometer and fuel readings, and the signed agreement with its electronic signature record (time, device and network address).
• Payment information — the amount, date, method and reference of each payment you make (for example a bank transfer reference). We do not collect or store card numbers or CVCs. If we later offer online payments or direct debit, they will be processed by a payment provider and we will update this policy before we do.
• Website enquiries — the details you type into our forms, with technical information (browser type, referring page and a hashed network address) used to prevent abuse.
• Infringement and toll notices — details of notices issued for the car during your rental.

Why we collect it

• To confirm you are eligible to rent, and to verify your identity and licence as our insurer requires.
• To prepare, sign and perform the rental agreement, take payments and refund the bond.
• To record the condition of the car at pickup and return so that damage is assessed fairly.
• To respond to breakdowns, accidents and insurance claims.
• To nominate the responsible driver for tolls and infringements as the law requires.
• To answer your enquiries and, if you agree, tell you about cars that may suit you.

We only ask for what we need for these purposes. If you do not provide it we may not be able to rent you a car.

How we store it and for how long

Records are stored in secured systems with access limited to staff who need it. Licence images and identity documents are stored separately from general records and are available only to authorised staff.

We keep rental records, agreements and condition reports for at least seven years after the rental ends, because tax, insurance and infringement laws require it. Enquiries that do not lead to a rental are kept for up to two years and then deleted. Licence images are deleted when they are no longer required for the purposes above, unless a claim, dispute or legal requirement means we must keep them longer.

Who we disclose it to

• Payment provider — to process rent, bond and refunds.
• Insurer and assessors — to arrange cover and handle claims.
• Toll operators, Fines Victoria, Victoria Police and other authorities — to nominate the driver of the vehicle when a notice is issued, as required by law.
• Roadside assistance, repairers and towing — when you need help with the car.
• Debt recovery and legal advisers — if amounts remain unpaid or a dispute arises.
• Service providers — hosting, email and electronic-signature systems that store data on our behalf under contract.

We do not sell personal information.

Where your information is stored. Our website and customer records system run on a server rented from Hostinger in Mumbai, India, and the hosting provider keeps backup copies of that server in Kuala Lumpur, Malaysia. Our own backups are encrypted before they are stored. Our business email is provided by Hostinger. We use these providers under their service terms and take reasonable steps to keep your information protected; they store it for us and do not use it for their own purposes.

Access and correction

You can ask to see the personal information we hold about you and ask us to correct it. Contact us by phone 0422 222 267. We will respond within 30 days. There is no fee for a request, although we may charge a reasonable cost for supplying large volumes of copies.

Complaints

If you think we have mishandled your information, contact us first using the details above and we will investigate and reply in writing. If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner at oaic.gov.au. See also our complaints page.

Website

Our website does not use advertising trackers. We use the minimum cookies needed for the customer portal to work. Form submissions record a hashed network address to limit abuse.

Changes

We will update this policy when our practices change and show the date of the current version here. This version is a draft pending legal review.