BooqCar 2

GDPR Compliance

Booqcar is committed to protecting your personal data and ensuring transparency in how we collect, use, and store your information.
We comply with the European Union’s General Data Protection Regulation (GDPR) and other applicable privacy laws,
including the UK GDPR, California Consumer Privacy Act (CCPA/CPRA), and Canada’s PIPEDA.

1. What is GDPR?

The General Data Protection Regulation (GDPR) is an EU law that strengthens and standardizes data protection
for all individuals within the European Union and European Economic Area (EEA). It also governs the export of
personal data outside the EU/EEA.

2. Your Rights Under GDPR

As a user, you have the following rights:

Right to Access: Request a copy of your personal data we hold.
Right to Rectification: Correct or update inaccurate or incomplete information.
Right to Erasure: Request deletion of your data, subject to legal obligations.
Right to Restrict Processing: Limit how your data is used in certain circumstances.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Opt out of marketing communications and certain data uses.
Right to Withdraw Consent: Withdraw consent at any time for data processing or marketing.

3. How We Collect and Use Your Data

We collect personal data through:

Booking forms, broker reservations, and customer inquiries
Newsletter and promotional sign-ups
Cookies and tracking technologies (Google Analytics, Meta Pixel, Google Ads)
Vehicle telematics and fleet management systems

For details, see our Privacy Policy.

4. Lawful Basis for Processing

We process your data under these legal grounds:

Contractual necessity: To manage and process bookings and payments
Legal obligations: To comply with regulations and financial record-keeping
Legitimate interest: To improve services, security, and fraud prevention
Consent: For marketing communications and optional services

5. Data Retention & Security

Data is encrypted, stored securely, and retained only as long as necessary for business and legal reasons.
We use HTTPS, encryption, access controls, and regular security audits to safeguard data.