Data Privacy Policy

1. Introduction and Scope

Car Rental Baku ("we", "us", or "our") operates at carrentalbaku.com and provides vehicle hire services in Baku City, Azerbaijan. This Data Privacy Policy explains how we collect, use, store, share, and protect personal information about customers, website visitors, and anyone who interacts with our booking platform.

This policy applies to all personal data processed in connection with our services, whether you are booking a vehicle for airport pickup at Heydar Aliyev International Airport (GYD), arranging hotel delivery in the Nizami or Sahil districts, or simply browsing our fleet. By using our website or services, you agree to the practices described in this policy.

We are committed to handling your personal data in accordance with applicable data protection legislation, including the relevant laws of Azerbaijan and, where applicable, international standards recognized in the jurisdictions from which our customers travel.

2. Information We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal information:

2.1 Personal Identification Details

• Full name and date of birth
• Email address and telephone number
• Driver's license number, issuing country, and expiry date
• Passport or national ID number (required for vehicle handover in Baku)
• Residential or billing address

2.2 Booking and Rental Data

• Pickup and drop-off locations (e.g., Heydar Aliyev Airport, Fountains Square, Old City)
• Rental dates, vehicle category, and add-on preferences (child seat, GPS, insurance)
• Booking confirmation references and rental agreement records
• One-way trip routes (e.g., Baku to Ganja or Sheki)

2.3 Payment Information

We do not store full card numbers or sensitive payment credentials on our servers. Payment transactions are handled by certified third-party payment processors who operate under their own PCI-DSS compliant security standards. We retain only transaction reference numbers and partial billing details necessary for booking records. Our no-deposit, debit-card-friendly booking model means we do not place authorization holds on your card at the time of booking.

2.4 Browsing and Technical Data

• IP address and approximate geographic location
• Browser type, operating system, and device identifiers
• Pages visited, referral source, and session duration
• Cookie data and similar tracking technologies (see our Cookies Policy)

2.5 Location Data

If you use our mobile interface or allow location permissions in your browser, we may collect approximate location data to help suggest nearby pickup points across Baku City, including locations near the Baku Boulevard, Yasamal district, and the H-1 airport highway corridor.

3. How We Use Your Information

We use the personal data we collect for the following purposes:

• Processing bookings: To confirm reservations, assign vehicles, and coordinate pickup arrangements at your chosen Baku location.
• Customer support: To respond to inquiries, assist with modifications or cancellations, and resolve any issues during your rental period.
• Service improvement: To analyze booking patterns, optimize our fleet offerings, and improve the website experience for travelers arriving in Baku.
• Marketing communications: With your explicit consent only, we may send promotional emails about seasonal deals, new vehicle categories, or discounts on long-term rental in Baku City, Azerbaijan. You may opt out at any time.
• Legal and regulatory compliance: To meet obligations under Azerbaijani law, including traffic authority requirements, insurance reporting, and tax administration.
• Fraud prevention and security: To detect unusual booking patterns and protect the integrity of our platform and customer accounts.

4. Data Sharing with Third Parties

We do not sell your personal data. We share information only with trusted partners who are necessary to deliver your car rental experience:

4.1 Payment Processors

Secure, PCI-DSS certified processors handle all card transactions. They receive only the data needed to complete or record a payment. No full card details pass through our servers.

4.2 Insurance Providers

Where rental insurance is included or purchased, relevant driver and booking details are shared with our licensed insurance partners operating within Azerbaijan's regulatory framework.

4.3 Booking and Technology Integrators

We use booking engine partners, analytics platforms, and CRM tools to power the reservation workflow. These vendors process data on our behalf under data processing agreements and may not use your data for their own purposes.

4.4 Legal and Regulatory Authorities

We may disclose personal information to Azerbaijani law enforcement, traffic authorities, courts, or regulators when required by law or valid legal process, including traffic incident reporting on routes such as the H-1 highway or within the Absheron Peninsula.

5. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law:

• Booking and rental records: Retained for 7 years to comply with Azerbaijani tax and commercial record-keeping obligations.
• Customer account data: Retained while your account is active and for 2 years following your last interaction with our services.
• Marketing consent records: Retained until you withdraw consent, plus 1 year for audit purposes.
• Browsing and analytics data: Aggregated or anonymized within 13 months of collection.
• Driver's license and ID copies: Retained for the duration of the rental agreement and deleted within 30 days of rental completion, unless required for a dispute or legal claim.

6. Your Rights as a Data Subject

Depending on your country of residence, you may hold some or all of the following rights with regard to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to correction: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where we no longer have a lawful basis to retain it.
• Right to data portability: Receive your data in a structured, machine-readable format where technically feasible.
• Right to object: Object to processing for direct marketing purposes. You may also object to other forms of processing based on legitimate interests.
• Right to restrict processing: Ask us to pause processing your data in certain circumstances, such as during a dispute about accuracy.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. Identity verification may be required before we action your request.

7. Data Security Measures

We take reasonable and appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These include:

• HTTPS encryption across all pages of carrentalbaku.com
• Restricted internal access to personal data on a need-to-know basis
• Regular security reviews of our booking and data systems
• Vendor due diligence for all third-party integrations handling customer data
• Secure deletion processes for data that has reached the end of its retention period

No system can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights or freedoms, we will notify affected individuals and relevant authorities in accordance with applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enable core website functionality, remember your preferences, and analyze traffic patterns. Our booking widget uses session cookies to maintain your search parameters (pickup location, dates, vehicle category) as you navigate our site. For full details on cookie types, durations, and opt-out options, please read our Cookies Policy.

9. Policy Updates

We review and update this Data Privacy Policy periodically to reflect changes in our services, applicable law, or data processing practices. When we make material changes, we will update the "Last Revised" date below and, where appropriate, notify active customers by email.

We encourage you to review this page before making a new booking. Continued use of our services after an update constitutes acceptance of the revised policy.

Last Revised: June 2025

10. Contact Us About Privacy

If you have questions, concerns, or requests related to this Data Privacy Policy or how we handle your personal information, please reach out to our privacy team:

• Email: [email protected]
• Address: Baku City, Azerbaijan
• Phone: +1 (977) 980-2786

You also have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence if you believe your data has been processed unlawfully.