Privacy Policy

Effective Date: [24-05-2025]

Thank you for visiting www.carrentalcolombo.com. Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Who We Are

www.carrentalcolombo.com is owned and operated by [Insert Company Name], headquartered at [16/2 6th lane, pagoda road, Nugegoda 10100]. If you have any questions about this policy or how we handle your data, you can contact us at:

📧 Email: carrentalcolombo@gmail.com
📞 Phone: 077 776 2211
📍 Address: 16/2 6th lane, pagoda road, Nugegoda 10100

2. What Data We Collect

We may collect and process the following personal data from you:

When you use our reservation form:

• Full name

• Email address

• Phone number

• Country your travelling from

• Rental details (pickup and return dates, vehicle preferences, etc.)

When you use our contact form:

• Name

• Email address

• Message content

Automatically via cookies:

• IP address

• Browser type and version

• Device and operating system information

• Pages visited, time and date of visit

• Referrer URL (if applicable)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual necessity: to provide car rental services you request.

• Legal obligation: to comply with local laws and regulations.

• Legitimate interest: for website functionality, analytics, and fraud prevention.

• Consent: where applicable, for email marketing and cookie tracking.

4. How We Use Your Data

We use your personal data to:

• Process and confirm your car rental reservations

• Respond to your inquiries

• Send confirmations and updates

• Improve our website and customer service

• Comply with legal obligations

5. Data Retention

We retain your personal data only for as long as necessary for the purposes stated above:

• Reservation data (name, email, phone, dates): retained for up to 2 years for legal, tax, and customer service reasons.

• Contact form submissions: retained for 12 months.

• Analytics/cookie data: retained according to our Cookie Policy or until consent is withdrawn.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. These may include:

• Essential cookies – for website functionality

• Analytics cookies – to measure usage and improve the site

You can manage or withdraw your cookie consent at any time through your browser settings or via the cookie banner on our site. For full details, see our [Cookie Policy].

7. Sharing Your Data

We do not sell your data. We may share your data only with:

• Trusted service providers (e.g. email providers, booking systems)

• Legal authorities, where required by law

All third-party processors are GDPR-compliant and only process data under our instruction.

8. Your Rights Under the GDPR

You have the following rights regarding your personal data:

• Access – Request a copy of the data we hold

• Rectification – Correct any inaccurate or incomplete data

• Erasure – Request deletion of your data (“right to be forgotten”)

• Restriction – Request restriction of processing

• Objection – Object to processing based on legitimate interests

• Data portability – Receive your data in a structured, machine-readable format

• Withdraw consent – Where processing is based on consent

To exercise any of these rights, contact us at [Insert Contact Email]. We will respond within 30 days.

9. Data Security

We take appropriate technical and organizational measures to protect your data from unauthorized access, loss, misuse, or alteration. These include encryption, secure hosting, and access controls.

10. International Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure it is protected using appropriate safeguards, such as Standard Contractual Clauses (SCCs).

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with an updated effective date.

12. Lodging a Complaint

If you believe your data protection rights have been violated, you can lodge a complaint with your local data protection authority or the European Data Protection Board (EDPB).

Last updated: [24-05-2025]