Privacy Policy

Last updated: 22 June 2026  ·  Eagle Rent

1. Who We Are

Eagle Rent, based in the United Kingdom, is the data controller for the personal information you provide when using our website and services. If you have any questions about this policy or your data, you can contact us at [email protected].

2. What Data We Collect

  • Account data: name, email address, phone number, and password when you register on our portal.
  • Identity & licence data: driving licence number, licence expiry date, proof of address — required before a rental begins.
  • Rental data: dates, vehicle chosen, pick-up preferences, delivery address.
  • Payment data: payment is processed securely by Stripe. We store only transaction references and payment status — never your full card details.
  • Communications: messages and enquiries you send via our contact form or support tickets.
  • Usage data: IP address, browser type, pages visited, and device information, collected automatically to improve site performance.

3. Why We Use Your Data (Legal Bases)

  • Performance of a contract (Article 6(1)(b)): to process your booking, manage your rental, issue contracts, and handle your deposit and payments.
  • Legal obligation (Article 6(1)(c)): to verify your identity and driving licence as required for lawful vehicle rental, and to retain financial records for tax and accounting purposes.
  • Legitimate interests (Article 6(1)(f)): to improve our website, prevent fraud, send service-related updates, and maintain site security.
  • Consent (Article 6(1)(a)): to send optional marketing communications. You can withdraw consent at any time.

4. Cookies

Our site uses essential cookies to keep you signed in and protect against cross-site request forgery. We also use functional cookies to remember your preferences. We do not currently use third-party advertising cookies. You can manage cookie preferences using the banner shown on your first visit. For full details, see our Cookie section below.

5. Who We Share Your Data With

  • Stripe Inc. — payment processing. Stripe is PCI-DSS compliant. Data transferred under Standard Contractual Clauses.
  • Our hosting provider — your data is stored on servers located in the European Economic Area (EEA).
  • DVLA (Driver & Vehicle Licensing Agency) — we may check the validity of your driving licence.
  • No third-party marketing: we do not sell or rent your personal data to any third parties for marketing purposes.

6. How Long We Keep Your Data

  • Account data: retained for the duration of your account. You may request deletion at any time (subject to legal obligations).
  • Rental records & contracts: retained for 6 years as required by UK tax law (HMRC).
  • Driving licence copies: deleted within 12 months of your last rental.
  • Website usage logs: automatically purged after 90 days.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right to access — request a copy of the data we hold about you.
  • Right to rectification — correct inaccurate or incomplete data.
  • Right to erasure — request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
  • Right to restrict processing — ask us to pause processing your data in certain circumstances.
  • Right to data portability — receive your data in a machine-readable format.
  • Right to object — object to processing based on legitimate interests.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, and role-based access controls. No method of transmission over the internet is 100% secure — if you believe your data has been compromised, please contact us immediately.

9. Cookies (Detailed)

  • eagle-rent-session — essential. Keeps you signed in during your visit. Session cookie, deleted when you close your browser.
  • XSRF-TOKEN — essential. Protects against cross-site request forgery attacks. Session cookie.
  • remember_web_* — functional. Keeps you signed in across browser sessions if you tick "Remember me". Expires after 30 days.
  • cookie_consent — functional. Stores your cookie preference. Expires after 365 days.

10. Children

Our services are not directed at persons under the age of 18 and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. We will notify registered users of material changes by email.

12. Contact

For any privacy-related questions or to exercise your rights:

Eagle Rent
United Kingdom
Email: [email protected]