Privacy Policy

1. Introduction and Scope

larcarrent.com ("we", "us", "our") operates a car hire booking platform serving customers in Larnaka, Larnaca, Cyprus and the wider island. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit our website, make a vehicle reservation, or interact with our customer support team.

This policy applies to all visitors and registered users of larcarrent.com, regardless of whether you complete a booking. By using our website or services, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please do not use our platform.

We operate in accordance with the General Data Protection Regulation (GDPR) as applicable within the European Union and Cyprus, the Processing of Personal Data (Protection of Individuals) Law of Cyprus (Law 125(I)/2018), and any other applicable data protection legislation.

2. Data Controller

The data controller responsible for your personal information is larcarrent.com, with business operations based in Larnaka, Larnaca, Cyprus. You can reach our data protection contact using the details provided in Section 10 of this policy.

3. Information We Collect

We collect personal data in the following categories, depending on how you interact with our services:

3.1 Personal Identification Data

When you make or enquire about a car hire booking, we may collect your full name, date of birth, email address, telephone number, home or billing address, and driver's licence details including licence number, issuing country, and expiry date. This information is necessary to confirm your eligibility to hire a vehicle and to identify you at the point of collection.

3.2 Booking and Transaction Data

We record details relating to your reservation, including your selected vehicle category, pickup and drop-off dates and locations (such as Larnaka International Airport, Finikoudes seafront, or hotel delivery addresses across Larnaca district), rental duration, optional extras selected, and any special requests. This data is essential for fulfilling your hire agreement.

3.3 Payment Information

We do not store full payment card details on our servers. Payment processing is handled exclusively by PCI-DSS-compliant third-party payment processors. We may retain a reference number, transaction amount, currency, and payment method type (for example, debit card or credit card) for accounting and dispute resolution purposes. Our core offer of no-deposit, debit-card-friendly booking means we process only what is strictly necessary for your transaction.

3.4 Browsing and Technical Data

When you visit our website, our servers and analytics tools may automatically collect your IP address, browser type and version, operating system, referring website, pages visited, time spent on each page, and device identifiers. This technical data helps us maintain website security, diagnose errors, and understand how visitors interact with our platform.

3.5 Cookie Data

We use cookies and similar tracking technologies to improve your browsing experience, remember your preferences, and measure website performance. Please refer to our Cookie Use page at larcarrent.com/cookie-use for a detailed breakdown of the cookies we set and your consent options.

3.6 Location Data

If you grant permission through your browser or device, we may access approximate location data to help pre-fill pickup locations or suggest nearby collection points in the Larnaka area. You may withdraw this permission at any time through your browser or device settings.

3.7 Communications Data

If you contact us by email, telephone, or through our website contact form, we retain records of that correspondence, including the content of messages and any attachments, to assist with ongoing customer support or dispute resolution.

4. How We Use Your Information

We process your personal data only when we have a lawful basis to do so. The purposes and corresponding legal bases are as follows:

4.1 Processing and Managing Bookings

Your identification, booking, and payment data are processed to fulfil the car hire contract you enter into with us or our partner suppliers. This processing is necessary for the performance of a contract under Article 6(1)(b) of the GDPR.

4.2 Customer Support

We use your contact and booking data to respond to enquiries, resolve complaints, assist with changes or cancellations, and coordinate vehicle delivery to addresses in Larnaka and the surrounding Larnaca district. This is based on our legitimate interest in providing a quality service.

4.3 Service Improvement

Aggregated and anonymised technical and usage data helps us identify performance issues, improve website navigation, and develop new features. This processing is based on our legitimate interests in maintaining and improving our platform.

4.4 Marketing Communications

If you have given explicit consent, we may send you promotional emails or messages about car hire deals in Cyprus, seasonal offers, or updates relevant to your travel preferences. You may withdraw consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. We will not send marketing communications without your prior consent.

4.5 Legal Compliance and Fraud Prevention

We may process your data as required by applicable law, including tax obligations, anti-fraud checks, and regulatory requirements under Cypriot and EU law. This processing is based on legal obligation under Article 6(1)(c) of the GDPR.

5. Data Sharing and Third Parties

We do not sell your personal data. We share it only where necessary and with appropriate safeguards in place. Recipients may include:

5.1 Vehicle Supplier Partners

Your booking details are shared with the local car hire partner fulfilling your reservation in Larnaka. This may include suppliers operating at Larnaka International Airport (LCA), the Finikoudes seafront area, or other pickup points across Larnaca district. These partners are contractually required to process your data only for the purpose of fulfilling your hire agreement.

5.2 Payment Processors

Transaction data is passed to our PCI-DSS-compliant payment processing partners solely to authorise and complete your payment. These processors are prohibited from using your payment data for any other purpose.

5.3 Insurance Providers

Where you opt for additional vehicle insurance or where insurance coverage is included in your hire, relevant booking and driver details may be shared with the insurance provider as required to validate or administer your policy.

5.4 Technology and Analytics Providers

We use trusted third-party technology services for website hosting, analytics, email delivery, and booking management. These providers act as data processors under our instruction and are bound by appropriate data processing agreements.

5.5 Legal and Regulatory Authorities

We may disclose your personal data to Cypriot or EU regulatory authorities, law enforcement agencies, or courts when required to do so by law or in response to a valid legal request.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Our standard retention periods are as follows:

• Booking and transaction records: 7 years from the date of the transaction, in compliance with Cypriot tax and accounting obligations.
• Customer support correspondence: 3 years from the date of the last interaction, unless a dispute is ongoing.
• Marketing consent records: retained until you withdraw consent, plus 1 year thereafter for compliance evidence.
• Website technical logs: up to 12 months, then deleted or anonymised.
• Cookie consent records: 12 months from the date consent was recorded.

When retention periods expire, we securely delete or anonymise the relevant data so that it can no longer be linked to you.

7. Your Rights Under GDPR and Cypriot Law

As a data subject, you have the following rights regarding your personal data. You may exercise any of these rights by contacting us using the details in Section 10. We will respond within 30 days of receiving a valid request.

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.

7.2 Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request correction or completion without undue delay.

7.3 Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to legal retention obligations that may require us to retain certain records.

7.4 Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

7.5 Right to Object

You have the right to object to processing based on our legitimate interests, including profiling. You also have the absolute right to object to processing for direct marketing purposes at any time.

7.6 Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data, for example while you contest its accuracy or while an objection is being assessed.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7.8 Right to Lodge a Complaint

If you believe we have processed your data unlawfully or in breach of your rights, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus, which is the competent supervisory authority. Contact details are available at the Commissioner's official website.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission via HTTPS, access controls limiting staff access to personal data on a need-to-know basis, regular security assessments of our website infrastructure, contractual data security obligations imposed on all third-party processors, and procedures for detecting and responding to personal data breaches in accordance with GDPR Article 33 timelines.

While we take security seriously and apply industry-standard safeguards, no internet-based system can guarantee absolute security. You are responsible for keeping any login credentials or booking reference numbers confidential.

9. International Data Transfers

larcarrent.com operates primarily within Cyprus and the European Economic Area (EEA). If any personal data is transferred to a third country outside the EEA, we ensure such transfers are subject to appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or an adequacy decision, to provide an equivalent level of data protection.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, applicable law, or data processing practices. When we make material changes, we will update the effective date shown below and, where appropriate, notify you by email or by a prominent notice on our website. We encourage you to review this policy periodically. Your continued use of larcarrent.com after any update constitutes acceptance of the revised policy.

This policy was last reviewed and updated in 2025.

11. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to report a privacy concern, please contact us using the details below. We aim to acknowledge all privacy enquiries within 5 working days and resolve them within 30 days.

• [email protected]
• Larnaka, Larnaca, Cyprus

For general enquiries, helpful information, and our full range of car hire services in Larnaka, please visit our home page or Contact Us page.