REal auto rentals PRIVACY POLICY
Privacy Policy
Last updated: 17-Jun-2026
This Privacy Policy explains how Real Auto Rentals ("Company", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit our website, create an account, make a reservation, submit an enquiry, or make an online payment.
We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.
1. WHO WE ARE
The data controller responsible for your personal data is:
Company name: Real Auto Rentals
Address: Cleverly Hill, Sandy Point Town, St. Kitts & Nevis
Email: info@realautorentals.com
Phone/WhatsApp: +1 (869) 663-1120
Website: www.realautorentals.com
If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at: info@realautorentals.com.
2. PERSONAL DATA WE COLLECT
We may collect and process the following categories of personal data:
a) Contact details
Full name
Email address
Phone number
Address
Country
Company name, if applicable
b) Reservation details
Reservation dates and times
Pick-up and return location
Selected vehicle, rental item, service, booking option, or add-on
Number of passengers, drivers, or participants
Special requests or notes added by you
Reservation history
Booking status and communication history
c) Account information
Username or login email
Password in encrypted form
Account preferences
Saved customer details
Previous reservations
d) Payment and billing information
Billing name and address
Payment amount
Currency
Payment status
Transaction reference
Invoice details
Partial card details, such as last four digits, card brand, or expiry month/year, where provided by the payment processor
We do not store full card numbers, CVV codes, or complete payment card details on our own servers. Online payments are processed securely through NMI Hosted Checkout and our merchant services provider, St. Kitts-Nevis-Anguilla National Bank Limited (SKNANB). Payment providers process payment data according to their own security and privacy standards.
e) Identity verification or reservation documents, where required
Depending on the type of reservation, we may collect:
ID document details
Driver's licence details
Passport details
Proof of insurance, where applicable
Signed rental agreement or booking contract
Uploaded files or photos
We only collect these details where necessary for the reservation, legal compliance, fraud prevention, insurance, security, or contractual purposes.
f) Technical and website usage data
IP address
Browser type and version
Device type
Operating system
Pages visited
Date and time of visit
Referring website
Cookie identifiers
Website interaction data
g) Communication data
Emails, messages, support requests, contact form submissions, chat messages, and other communication you send to us.
3. HOW WE COLLECT YOUR DATA
We collect personal data when you:
Visit our website
Submit a contact form
Make an online reservation
Create or use a customer account
Make an online payment
Sign a rental agreement or booking contract
Upload documents or images
Contact us by email, phone, chat, WhatsApp, or social media
Subscribe to newsletters or marketing messages
Use our services
We may also receive limited personal data from third parties, such as payment processors, booking partners, travel agents, fraud prevention tools, analytics providers, or business partners involved in completing your reservation.
4. PURPOSES AND LEGAL BASES FOR PROCESSING
We process your personal data for the following purposes:
a) To manage reservations and provide our services
We use your personal data to create, confirm, modify, cancel, and manage reservations, provide the requested service, communicate with you, and perform our contract with you.
Legal basis: Performance of a contract or steps taken before entering into a contract.
b) To process online payments
We process billing and transaction information to accept payments, confirm payment status, issue receipts, prevent payment fraud, and manage refunds or deposits.
Legal basis: Performance of a contract, legal obligation, and legitimate interests.
c) To communicate with you
We may contact you about your reservation, payment, service updates, support requests, documents, reminders, or important operational information.
Legal basis: Performance of a contract and legitimate interests.
d) To comply with legal and tax obligations
We may process and retain certain data for accounting, invoicing, tax, consumer protection, anti-fraud, regulatory, legal claim, and compliance purposes.
Legal basis: Legal obligation.
e) To prevent fraud and protect our business
We may use personal data to verify reservations, prevent misuse, detect fraudulent transactions, protect our website, enforce our terms, and maintain business security.
Legal basis: Legitimate interests.
f) To improve our website and services
We may analyse website usage, customer feedback, booking trends, and technical performance to improve our website, reservation process, customer experience, and services.
Legal basis: Legitimate interests or consent, where required.
g) To send marketing communications
If you have subscribed, requested information, or where otherwise permitted by law, we may send you offers, updates, promotions, or newsletters.
Legal basis: Consent or legitimate interests, depending on applicable law and the type of communication.
You can unsubscribe from marketing messages at any time by using the unsubscribe link or contacting us.
5. PAYMENT PROCESSING
Online payments are processed securely through NMI Hosted Checkout and our merchant services provider, St. Kitts-Nevis-Anguilla National Bank Limited (SKNANB).
When you make a payment, your payment details are submitted directly to the payment provider or processed through secure payment technology. We may receive payment confirmation, transaction ID, amount paid, billing details, card brand, card expiry month/year, and the last four digits of the card.
We do not store full payment card numbers or CVV codes.
Payment processors may act as independent controllers or processors depending on the payment service used. Please review the privacy policy of the relevant payment provider for more information about how they process your payment data.
6. SHARING YOUR PERSONAL DATA
We may share your personal data with:
Payment processors
Reservation software providers
Hosting providers
Email and SMS service providers
Accounting and invoicing providers
Customer support tools
Analytics providers
Fraud prevention and security providers
Insurance or verification partners, where relevant
Delivery, transport, rental, travel, or service partners involved in fulfilling your reservation
Professional advisers, such as lawyers, accountants, or auditors
Public authorities, regulators, courts, or law enforcement bodies, where legally required
We only share personal data where necessary and only with parties that are required to protect it appropriately.
7. INTERNATIONAL DATA TRANSFERS
Some of our service providers may be located outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we take appropriate safeguards to protect your data, such as using countries with adequacy decisions, Standard Contractual Clauses, contractual protections, or other lawful transfer mechanisms under GDPR.
8. HOW LONG WE KEEP YOUR DATA
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
Typical retention periods include:
Reservation records: for the duration of the customer relationship and for the period required for legal, tax, accounting, or dispute purposes.
Payment and invoice records: retained according to applicable accounting and tax laws.
Customer account data: kept while your account remains active, unless deletion is requested and no legal reason requires further retention.
Contact form messages and support communication: kept for as long as necessary to respond and manage the relationship.
Marketing data: kept until you unsubscribe or withdraw consent.
Website analytics data: kept according to the retention settings of the analytics provider.
Security logs: kept for a limited period unless needed to investigate misuse, fraud, or security incidents.
When personal data is no longer needed, we will delete, anonymise, or securely archive it.
9. COOKIES AND TRACKING TECHNOLOGIES
Our website may use cookies and similar technologies to:
Make the website work properly
Remember user preferences
Enable reservation and checkout functions
Improve website performance
Analyse website traffic
Support marketing and advertising, where applicable
Some cookies are necessary for the website to function. Other cookies, such as analytics or marketing cookies, may require your consent depending on applicable law.
You can manage cookies through your browser settings or through our cookie consent tool, where available.
10. SECURITY OF YOUR DATA
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
These measures may include:
Secure hosting
SSL/TLS encryption
Restricted access to personal data
Password protection
Encrypted passwords
Access controls
Regular software updates
Payment processing through secure third-party providers
Staff confidentiality obligations
Monitoring and security procedures
However, no online system is completely secure. You are responsible for keeping your account login details confidential.
11. YOUR GDPR RIGHTS
If you are located in the European Union, European Economic Area, or another region with similar data protection rights, you may have the following rights:
a) Right of access
You can request a copy of the personal data we hold about you.
b) Right to rectification
You can ask us to correct inaccurate or incomplete personal data.
c) Right to erasure
You can ask us to delete your personal data, where legally possible.
d) Right to restriction of processing
You can ask us to limit how we process your personal data in certain circumstances.
e) Right to data portability
You can request your personal data in a structured, commonly used, machine-readable format, where applicable.
f) Right to object
You can object to processing based on legitimate interests or direct marketing.
g) Right to withdraw consent
Where processing is based on consent, you can withdraw your consent at any time.
h) Right to lodge a complaint
You have the right to lodge a complaint with your local data protection authority if you believe your data protection rights have been violated.
To exercise your rights, contact us at: info@realautorentals.com.
We may need to verify your identity before responding to your request.
12. MARKETING COMMUNICATIONS
We may send you marketing emails, newsletters, offers, or service updates if you have subscribed, requested information, or where we are otherwise permitted to do so.
You can opt out at any time by:
Clicking the unsubscribe link in our emails
Contacting us at info@realautorentals.com
Even if you unsubscribe from marketing, we may still send you important service-related messages about your reservations, payments, account, safety, or legal matters.
13. CHILDREN'S PRIVACY
Our services are not intended for children under the age of 18. We do not knowingly collect personal data from children without appropriate consent.
If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
14. THIRD-PARTY LINKS
Our website may contain links to third-party websites, payment pages, booking partners, social media pages, or external services.
We are not responsible for the privacy practices, content, or security of third-party websites. You should review their privacy policies before providing personal data.
15. AUTOMATED DECISION-MAKING
We do not use personal data for automated decision-making that produces legal or similarly significant effects on you, unless clearly stated at the time of collection.
We may use automated tools for fraud prevention, payment security, spam protection, analytics, pricing, availability checks, or reservation management, but these are used to support business operations and protect our services.
16. DATA ACCURACY
You are responsible for providing accurate and up-to-date information when making a reservation, creating an account, submitting documents, or making a payment.
If your information changes, please update your account or contact us.
17. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, payment providers, reservation processes, or data protection practices.
The updated version will be published on this page with a new "Last updated" date.
18. CONTACT US
If you have any questions about this Privacy Policy, your personal data, or your GDPR rights, please contact us:
Company name: Real Auto Rentals
Address: Cleverly Hill, Sandy Point Town, St. Kitts & Nevis
Email: info@realautorentals.com
Phone/WhatsApp: +1 (869) 663-1120
Website: https://www.realautorentals.com
19. DATA PROTECTION AUTHORITY
If you are located in the EU or EEA, you may contact your local data protection authority.
You may contact the data protection authority in the EU country where you live, work, or believe a data protection issue has occurred.