Last Updated: July 2026
Our Commitment to Data Protection
We are committed to protecting your personal data and respecting your privacy rights in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we comply with data protection legislation and explains your rights as a data subject.
Data Controller Information
We act as the data controller for the personal information we collect and process. Our contact details are:
Business Name: nowheoftal
Address: 47 Whiteladies Road, Clifton, Bristol BS8 2LS, United Kingdom
Email: [email protected]
What Personal Data We Collect
We collect and process the following categories of personal data:
- Identity Data: Full name, date of birth, driving license number
- Contact Data: Email address, postal address, billing address
- Financial Data: Payment card details, billing information
- Transaction Data: Rental history, booking details, payment records
- Technical Data: IP address, browser type, device information, website usage data
- Usage Data: Information about how you use our website and services
- Marketing and Communications Data: Your preferences for receiving communications
Legal Basis for Processing
We only process your personal data when we have a legal basis to do so. Our legal bases include:
- Performance of Contract: Processing necessary to provide rental services and fulfill our contractual obligations
- Legal Obligation: Processing required to comply with legal and regulatory requirements, including tax obligations and insurance regulations
- Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, improving services, and business operations
- Consent: Where you have provided explicit consent for specific processing activities, such as marketing communications
How We Use Your Personal Data
We use your personal data for the following purposes:
- Processing and managing vehicle rental bookings
- Verifying your identity and eligibility to rent vehicles
- Processing payments and maintaining financial records
- Communicating with you about your rentals and inquiries
- Complying with legal and regulatory obligations
- Preventing fraud and ensuring the security of our services
- Improving our website and services
- Analyzing usage patterns and service performance
Data Sharing and Transfers
We may share your personal data with the following categories of recipients:
- Insurance Providers: To process coverage and verify eligibility for vehicle rental insurance
- Payment Service Providers: To process secure payment transactions
- IT Service Providers: For website hosting, data storage, and technical support
- Legal and Regulatory Authorities: When required by law or to protect our legal rights
- Professional Advisors: Including lawyers, accountants, and auditors
We do not transfer personal data outside the United Kingdom. If we need to do so in the future, we will ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements. Our standard retention periods are:
- Rental Records: 7 years from the end of the rental period (required for tax and insurance purposes)
- Financial Records: 7 years (required by UK tax legislation)
- Marketing Consent Records: Until consent is withdrawn or 3 years from last interaction
- Website Usage Data: 26 months from collection
After the retention period expires, we securely delete or anonymize your personal data.
Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request." We will provide this information free of charge within one month of receiving your request.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to your request within one month.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when:
- The data is no longer necessary for the purposes for which it was collected
- You withdraw consent (where processing is based on consent)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
This right is not absolute and may be limited by legal obligations to retain certain data.
Right to Restriction of Processing
You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. This right applies to data you have provided to us where processing is based on consent or contract performance.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will stop processing your data for this purpose immediately.
Right to Withdraw Consent
Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently engage in automated decision making.
How to Exercise Your Rights
To exercise any of your data protection rights, please contact us at:
Email: [email protected]
Address: 47 Whiteladies Road, Clifton, Bristol BS8 2LS, United Kingdom
When making a request, please provide sufficient information to allow us to verify your identity and locate your personal data. We will respond to your request within one month, although this period may be extended by two additional months for complex requests.
Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data in transit and at rest
- Regular security assessments and vulnerability testing
- Access controls limiting data access to authorized personnel only
- Employee training on data protection and security practices
- Secure backup procedures and disaster recovery plans
Despite our security measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. We cannot guarantee absolute security of your personal data.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report relevant breaches to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR.
Children's Data
Our services are not intended for individuals under the age of 18. We do not knowingly collect or process personal data from children. If we become aware that we have inadvertently collected data from a child, we will take immediate steps to delete that information.
Complaints and Supervisory Authority
If you have concerns about how we handle your personal data or believe we have not complied with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: www.ico.org.uk
We encourage you to contact us first so we have the opportunity to address your concerns directly.
Updates to This Information
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised date. We encourage you to review this page regularly to stay informed about how we protect your data.
Contact Us
If you have questions about our GDPR compliance or data protection practices, please contact us at [email protected].