Privacy Policy & UK GDPR Compliance Statement

1. Introduction & Data Controller Information

Flexii Car and Van Rental Limited ("Flexii", "we", "us", or "our") is dedicated to safeguarding and respecting your personal privacy. We operate as a registered Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Registered Address: 141 Horninglow Street, Burton on Trent, Staffordshire, DE14 1PG.
Email Contact: enquiries@flexiicarhire.co.uk | Telephone: 01283 563999

2. Lawful Bases for Processing Your Personal Data

Under UK GDPR Article 6, we process your personal information under the following lawful bases:

• Performance of a Contract: Processing booking reservations, executing legally binding rental agreements, vehicle handover, and processing rental payments and security deposits.
• Legal Obligation: Complying with Section 66 of the Road Traffic Act 1988 (transfer of liability for road traffic contraventions and penalty charge notices), DVLA driving licence verification, and HMRC accounting and tax audits.
• Legitimate Interests: Protecting our 54-vehicle fleet from fraud, theft, and mechanical abuse through onboard GPS telematics systems; resolving insurance claims; and improving customer booking service.

3. Information We Collect

• Identity Data: Full legal name, date of birth, photocard driving licence number, and DVLA online check share code.
• Contact Data: Residential billing address, collection address, email address, and mobile phone number.
• Financial Data: Encrypted payment card identifiers and security deposit transaction references (we do not store raw CVV codes).
• Telematics & Fleet Data: GPS vehicle coordinates, speed, odometer readings, and incident accelerometer data recorded for fleet management and theft recovery.

4. Retention Schedule & Security

In accordance with UK statutory limitation periods, customer rental agreements, verification logs, and associated Section 66 traffic records are retained for a maximum period of 6 years following hire completion, after which they are securely purged.

5. Your Statutory Rights

Under the UK GDPR, you hold the right to request access to your data, request rectification of inaccurate records, request erasure where lawful bases no longer apply, and object to processing. You also retain the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) (ico.org.uk).