Privacy Policy

1. Introduction

Bold Quartz Car Rental ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website bold-quartz.com or use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when:

• Making a reservation or booking a vehicle
• Creating an account on our website
• Subscribing to our newsletter
• Contacting us with enquiries
• Participating in surveys or promotions

This information may include:

• Full name and contact details
• Address and postcode
• Email address and telephone number
• Date of birth
• Driving licence information
• Payment card details
• Emergency contact information

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage:

• IP address and browser type
• Device identifiers and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Location data (with your consent)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To process bookings, manage reservations, and provide our car rental services
• Communication: To send booking confirmations, updates, and respond to your enquiries
• Payment Processing: To process payments and prevent fraudulent transactions
• Marketing: To send promotional materials and newsletters (with your consent)
• Website Improvement: To analyse website usage and improve our services
• Legal Compliance: To comply with applicable laws and regulations
• Safety and Security: To protect our business and customers from fraud and other illegal activities

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Contract Performance: Processing necessary for the performance of a contract to which you are a party
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Processing required to comply with legal obligations

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: Trusted third parties who assist us in operating our business (payment processors, insurance companies, maintenance services)
• Legal Requirements: When required by law, court order, or legal process
• Business Protection: To protect our rights, property, or safety, or that of our customers
• Business Transfers: In connection with any merger, sale, or transfer of company assets

All third parties are required to maintain the confidentiality of your information and use it only for the specified purposes.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Typically:

• Booking and rental records: 7 years (for accounting and legal purposes)
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics data: 26 months
• CCTV footage: 30 days (unless required for investigation)

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another controller
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us using the details provided in Section 11.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our use of cookies, please refer to our Cookie Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure payment processing systems
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses
• Binding Corporate Rules
• Certification schemes

11. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.