Privacy Policy | ash-cypress

Introduction

ash-cypress operates this website and provides vehicle rental services in London, United Kingdom. This Privacy Policy explains how we collect, use, and protect your personal information when you interact with our services.

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

Information You Provide

When you request a vehicle rental or contact us, we collect:

Full name and contact details
Email address
Driving licence information
Payment card details for security deposit
Vehicle selection and rental preferences
Any additional information you provide in communications

Information Collected Automatically

When you visit our website, we may collect:

Browser type and version
IP address and general location data
Pages visited and time spent on pages
Referring website addresses

How We Use Your Information

We use your personal data for the following purposes:

Processing and managing your vehicle rental bookings
Communicating with you about your rental arrangements
Verifying your identity and driving eligibility
Processing payments and managing security deposits
Providing customer support and responding to enquiries
Improving our services and website functionality
Complying with legal obligations

Legal Basis for Processing

We process your personal data under the following legal bases:

Contract Performance: Processing necessary to fulfil our rental agreement with you
Legitimate Interests: Improving our services and preventing fraud
Legal Obligation: Complying with financial and regulatory requirements
Consent: Where you have provided specific consent for marketing communications

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Payment processors for secure transaction handling
Insurance providers as required for coverage verification
Legal authorities when required by law
Professional advisors bound by confidentiality obligations

All third parties are required to maintain appropriate security measures and use your data only for specified purposes.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy. Specifically:

Booking and rental records: 7 years (for legal and accounting purposes)
Communication records: 3 years from last contact
Website analytics data: 26 months

After these periods, data is securely deleted or anonymised.

Your Rights

Under UK data protection law, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data in certain circumstances
Right to Restriction: Limit how we use your data
Right to Object: Object to processing based on legitimate interests
Right to Data Portability: Receive your data in a structured format

To exercise any of these rights, contact us at [email protected].

Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

Encrypted data transmission
Secure storage systems with access controls
Regular security assessments
Staff training on data protection

Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy regularly.

Contact Information

If you have questions about this Privacy Policy or our data practices, contact us at:

ash-cypress
15 Marylebone Lane
London W1U 2NE
United Kingdom
Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, at ico.org.uk.