Effective date: 30 August 2026.

This Privacy Policy explains how Rent Car Deals handles personal data when you use RentCarDeals.com, the customer or partner applications, booking services and related support. The platform is operated by TAJR RENT A CAR DED, Registration No. 923100, Business Bay, Tamani Arts Building, Office 832, Dubai, United Arab Emirates.

1. Who is responsible for your data

TAJR RENT A CAR DED operates Rent Car Deals and determines the purposes and means of processing related to operation of the marketplace where it acts as controller. An independent rental company may separately act as controller for data it needs to perform the vehicle rental agreement and comply with its own legal obligations.

2. Personal data we may collect

• Account and contact information such as name, phone number, email address, language and country.
• Identity and eligibility information such as driving-licence, identification or document information where required for verification or a booking.
• Booking information including vehicle, rental company, dates, locations, price, status, changes, handover and return details.
• Chat messages, information requests and attachments submitted through the platform.
• Location information when you grant permission or it is needed for a feature you request, such as vehicle location or delivery.
• Device and application information such as device type, operating system, notification identifiers, crash, security and usage logs.
• Support, complaint, correspondence and dispute evidence.
• Rental-company and partner information including licensing, authorised users, fleet, subscription and commercial billing information.
• Payment and transaction information where electronic payment is available. Sensitive card details may be processed directly by a payment provider and we do not need to store full card numbers.

3. Sources of information

We obtain information directly from you when you register, book, upload documents or communicate; from the rental company in connection with your booking; from your device and application during use; from service providers where necessary to provide or protect the service; and from competent authorities where legally permitted.

4. Why we process personal data

• Create, verify and administer accounts.
• Display vehicles and prices and send and manage booking requests.
• Enable customers and rental companies to perform and hand over bookings.
• Manage document requests, booking changes, problems and chats.
• Send operational account and booking notifications.
• Prevent fraud and abuse and protect users and the platform.
• Provide support and handle complaints and disputes.
• Administer subscriptions, commissions, invoices and partner commercial services.
• Meet legal, regulatory, accounting and security obligations.
• Improve service reliability, performance and user experience using data appropriate and proportionate to that purpose.

5. Legal bases

We process personal data using the legal basis appropriate to each activity, which may include performance of a contract or steps requested before a contract, compliance with legal obligations, permitted legitimate interests such as security, fraud prevention and service improvement, and consent where consent is required. Where processing relies on consent, you may withdraw it without affecting previous lawful processing or another applicable legal basis.

6. Location information

Device location is used only in accordance with permissions you grant and relevant service functions. You can manage location permission in device settings, although disabling it may prevent features that depend on location from working.

7. Chat and fraud prevention

The platform may apply automated checks to text or attachments to detect fraud, harmful content, prohibited pre-booking contact exchange or other misuse. Limited human review may occur where necessary for support, safety, complaint investigation or legal compliance. Booking chats are not provided to third-party advertisers for targeted advertising.

8. Who receives personal data

We may disclose the minimum necessary information to the rental company involved in your booking; hosting, cloud, notification, analytics, mapping, security, support and payment providers where relevant; professional advisers; and government, regulatory or judicial authorities where there is a lawful basis. Where service providers act as processors, we require appropriate instructions, confidentiality and protection obligations.

9. We do not sell personal data

We do not sell personal data to advertisers. Advertisers are not given access to identification documents, driving licences or booking chats for advertising purposes.

10. International transfers

The platform may use technical infrastructure or service providers located in different countries. Where personal data is transferred across borders, we apply transfer requirements and safeguards required by applicable law and limit transfers to what is necessary for legitimate service purposes.

11. Retention

Personal data is retained only as long as necessary for the purposes for which it was collected and for bookings, account administration, disputes, security and legal, accounting or regulatory obligations. The applicable period varies by record type, market and any legal hold or claim. When there is no longer a lawful need for information, it is appropriately deleted, destroyed or anonymised unless retention is legally required or necessary to protect a legal right.

12. Security

We use appropriate technical and organisational measures to reduce unauthorised access, loss, alteration or disclosure, including access controls, protection in transit and operational security procedures. No electronic system can guarantee absolute security, so controls are reviewed and incidents are handled in accordance with applicable legal requirements.

13. Your privacy rights

Depending on applicable law and your circumstances, your rights may include being informed about processing, access, obtaining a copy, correcting inaccurate information, requesting deletion or destruction where legally available, withdrawing consent, requesting restriction or cessation of certain processing, objecting where recognised by law, and lodging a complaint with the competent authority. We may verify identity before acting on certain requests to protect accounts and personal data.

14. Children

Car-rental services are not directed to persons who lack legal capacity to enter the relevant rental transaction. We do not seek to collect children's personal data without an appropriate lawful basis.

15. Policy changes

We may update this Policy when our services, law or processing practices change. The current version and effective date will be published, and additional notice or consent will be provided where required.

16. Contact and privacy requests

To exercise privacy rights or ask about processing, use the Support or Contact Us section in the Rent Car Deals website or applications. Postal address: TAJR RENT A CAR DED, Business Bay, Tamani Arts Building, Office 832, Dubai, United Arab Emirates.

Privacy in Saudi Arabia

Where the Saudi Personal Data Protection Law and its regulations apply, personal data is handled in accordance with requirements including transparency, data minimisation, data-subject rights, disclosure controls and applicable cross-border transfer safeguards.