Privacy Policy

Who we are and what this document covers

Rent-Trip is the data controller for the personal data described in this document, wherever you take a car from us. To exercise a privacy right, write to info@rent-trip.com.

• Thailand: the data controller is Rent-Trip; requests are sent to the same address and handled under the Personal Data Protection Act B.E. 2562 (2019) (PDPA).
• the USA (Florida): the data controller is Rent-Trip, a car rental company in Orlando, Florida; the policy explains what personal information we collect, how we use it and the choices you have under Florida law.
• the UAE: the data controller is Rent-Trip, and this document is written under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
• Turkey: the data controller is Rent-Trip, and this text explains for what purposes your data is processed, the legal reasons, its transfer and your rights under Law No. 6698 (KVKK).

A request sent to info@rent-trip.com reaches the same controller in every country — no separate office address is needed to start it.

Data we collect and why

We collect only the personal data the booking requires. The categories are the same wherever you drive; the items that exist in one country only are listed below.

• Thailand: booking and rental agreement details, driving licence, passport and payment information; information needed to comply with legal obligations, such as traffic fines and insurance; and your messages via WhatsApp.
• the USA (Florida): booking details, driver's licence and passport details, payment card information, delivery address and flight number, and toll and fine information.
• the UAE: name, contact details, driving licence information, Emirates ID or passport details, payment information, rental details, and data required for Salik toll charges and traffic fines.
• Turkey: identity data, contact data, car rental and payment data, HGS and traffic penalty data, and demand and complaint data.

Where we deliver a car to you, the delivery address and flight number follow the booking, not the country. The conditions of the country where the car is collected are set out in the rental agreement you sign.

Legal bases for processing

We process your personal data on four bases: performance of a contract, legal obligation, consent or explicit consent, and legitimate interest. Where the country statute names the base, it does so in its own terms.

• Thailand: the bases are set out in the Personal Data Protection Act B.E. 2562 (2019) (PDPA) — contract, legal obligation, consent and legitimate interest; consent covers direct marketing and cookies.
• the USA (Florida): the state rules address breach notification under the Florida Information Protection Act (FS 501.171) and marketing under CAN-SPAM and FS 501.059, rather than naming a general processing base; marketing texts, WhatsApp messages and calls are sent only with your prior express written consent.
• the UAE: the bases are named in Federal Decree-Law No. 45 of 2021 (PDPL) — contract, legal obligation, legitimate interest and consent; by taking a vehicle you consent to the processing described in this policy.
• Turkey: the bases are named in Article 5 of the KVKK (Law No. 6698) — formation and performance of the contract, fulfilment of legal obligations and legitimate interest; explicit consent is obtained for processing outside that scope, such as marketing communications.

Consent is the only base you can withdraw at any time, and withdrawal never reaches back to processing already carried out on it.

Sharing with third parties

We do not sell your personal data. We share it only with the parties a rental requires — payment providers, insurers, toll and traffic authorities, and IT providers who support our website and data storage.

• Thailand: Insurers to arrange insurance coverage; the police and the Department of Land Transport for traffic fines and other legal matters; payment providers to process transactions. Each party is bound to use your data only for the stated purpose.
• the USA (Florida): Our payment processor, toll authorities and police for toll violations and other legal matters, insurers in the event of a claim, and IT providers who assist with our website and data storage.
• the UAE: Payment providers to process transactions, the Roads and Transport Authority for Salik tolls and traffic fines, and insurance providers for claims. All third parties are obligated to protect your data and use it only for the specified purposes.
• Turkey: Payment service providers, banks and payment institutions to carry out payment transactions; authorised public institutions for reporting traffic fines and HGS toll fees; legal advisors and auditors within the scope of our legal obligations.

How long we keep your data

We keep your personal data only as long as it is needed for the purposes described in this document and for as long as the law obliges us to hold it. When that period ends, the data is securely deleted or anonymised.

• Thailand: we retain your personal data only as long as necessary for the purposes stated and to comply with legal or regulatory requirements, such as accounting and tax laws; after that your data is securely deleted or anonymised.
• the USA (Florida): we retain personal information only as long as necessary for the purposes described above and to comply with legal obligations such as tax and accounting records; the specific retention period is set out in our internal policies.
• the UAE: rental records are kept for a minimum of 5 years from the end of the rental period to comply with UAE commercial and tax laws; after that, data is securely deleted or anonymised.
• Turkey: data related to the rental agreement is stored for 10 years from the end of the contract, pursuant to the statute of limitations provisions of the Turkish Code of Obligations; commercial books and records are kept for 10 years; HGS and traffic fine records are retained for the necessary period as per the request of the relevant institution.

If you need to know how long your own data will be kept, write to info@rent-trip.com.

Cookies and marketing communications

We use essential cookies to run the site, and non-essential cookies only after you consent. Marketing messages reach you only where consent is given, and you can withdraw it at any time.

• Thailand: non-essential cookies and direct marketing are set only after your explicit consent via the cookie banner, which offers equal «Accept» and «Reject» options; withdrawing consent does not affect processing carried out before withdrawal.
• Turkey: marketing communications are sent only under your explicit consent and in line with Law No. 6563; you can withdraw at any time through the «unsubscribe» link in the message, and withdrawal takes effect from that moment.
• the USA (Florida): marketing emails carry a clear unsubscribe link and our physical mailing address, and marketing texts, WhatsApp messages or calls are sent only with your prior express written consent, which you can withdraw by replying STOP; our website uses cookies and Google Analytics 4, and you can disable cookies in your browser or use the Google Analytics opt-out browser add-on.
• the UAE: consent is the basis for processing where required, and you may withdraw it at any time by contacting us, though this may affect our ability to provide services.

Your rights and how to exercise them

You may ask us what personal data we hold about you, have it corrected or deleted, restrict or object to its processing, receive a copy for reuse, and withdraw any consent you have given. Write to info@rent-trip.com to start any of these requests.

• Thailand: under the PDPA you may access, rectify, erase, restrict, port and object to processing, withdraw consent at any time, and lodge a complaint with the Personal Data Protection Committee (PDPC).
• the USA (Florida): if you are a California resident, you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the sale or sharing of your personal information, to the extent the CCPA/CPRA applies to us; we do not sell or share it.
• the UAE: under the PDPL you may obtain a copy of your personal data, request correction of inaccurate data, request deletion when it is no longer necessary, and restrict or object to processing in certain circumstances.
• Turkey: under Article 11 of the KVKK you may learn whether your data is processed, request information about it, learn the purpose and the third parties it is transferred to, request correction or deletion, object to results produced by automated analysis, and claim compensation for losses caused by unlawful processing.

In Turkey the terms of an application are set out in the rental agreement you sign. In the UAE the terms of a complaint are set out in the rental agreement you sign.

A request from the EU or the EEA is accepted at info@rent-trip.com and is handled under the data-protection law that applies to it.

Children under 13

Our website and services are not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, write to info@rent-trip.com and we will address it. This rule is the same wherever you take a car from us.

Changes to this policy

We may update this policy from time to time. The latest version is always posted on our website with the date of the last update.