// LEGAL
Privacy Policy
Last updated: January 2025 · GDPR compliant
1. Introduction
QUUB ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services at quub.rent.
This policy is compliant with the General Data Protection Regulation (GDPR) and applicable data protection laws.
2. Data Controller
QUUB is the data controller for personal data collected through this website. Contact: privacy@quub.rent
3. Data We Collect
We collect the following categories of personal data:
- Identity data: First name, last name, date of birth, driver's license number
- Contact data: Email address, phone number
- Payment data: Payment card details (processed securely via Stripe)
- Technical data: IP address, browser type, device identifiers
- Usage data: How you use our website and app
- Location data: With your consent, GPS data during rentals
- Damage data: Photographs taken via the app at rental handover
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract: To fulfil your rental booking
- Legal obligation: Tax records, regulatory compliance
- Legitimate interests: Fraud prevention, service improvement
- Consent: Marketing communications (opt-in only)
5. How We Use Your Data
- Process and manage rental bookings
- Send booking confirmations and operational updates
- Process payments and security deposits
- Document vehicle condition at pickup and return
- Comply with legal and regulatory requirements
- Improve our services and website functionality
- Send marketing communications (with your consent)
6. Data Sharing
We do not sell your personal data. We may share it with:
- Payment processors (Stripe) — for secure payment handling
- Insurance providers — for claims processing
- Law enforcement — when legally required
- QUUB franchise operators — for reservations at franchise locations
7. Data Retention
Rental records are retained for 7 years for tax and legal compliance. Marketing data is deleted within 30 days of an unsubscribe request. Account data is deleted within 90 days of account closure.
8. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Data portability — receive your data in a machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time for consent-based processing
To exercise these rights, email: privacy@quub.rent
9. Cookies
We use essential cookies for website functionality and analytics cookies (with your consent) to understand usage patterns. You can manage cookie preferences via your browser settings.
10. Security
We implement industry-standard security measures including TLS encryption, secure payment processing, and regular security audits. No data transmission over the internet is 100% secure; we cannot guarantee absolute security.
11. Changes to This Policy
We may update this policy periodically. Significant changes will be notified via email or prominent notice on our website.
12. Contact
For privacy questions or to exercise your rights: privacy@quub.rent