Privacy Policy

Privacy Policy for XRENTIT

Effective Date: 23 March 2026
Last Updated: 23 March 2026

1. Introduction

Welcome to XRENTIT (“we,” “our,” or “us”), accessible via www.xrentit.com and the XRENTIT mobile application (the “Platform”).

We are committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform in accordance with:

• The General Data Protection Regulation (GDPR) (EU) 2016/679
• Applicable laws of the Republic of Cyprus
   

By using XRENTIT, you agree to the terms of this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

XRENTIT
Email: support@xrentit.com
Address: Eleftherias, 17, Dromolaxia, 7020, Larnaca, Cyprus

3. Information We Collect

We collect the following categories of data:

3.1 Personal Information

• Full name
• Email address
• Phone number
• Date of birth
• Profile photo (optional)

3.2 Identity & Verification Data

• Driver’s license details
• National ID / Passport (if required)
• Selfie verification (if applicable)

3.3 Booking & Transaction Data

• Rental history
• Payment details (processed securely via third-party providers)
• Booking dates, locations, and preferences

3.4 Location Data

• Real-time GPS location (only when using the app and with permission)

3.5 Device & Technical Data

• IP address
• Device type
• Operating system
• App usage data

3.6 Communication Data

• Messages between users (renters and vendors)
• Customer support communications

 

4. How We Use Your Information

We process your data for the following purposes:

• To create and manage your account
• To facilitate car rentals and bookings
• To verify your identity and eligibility to rent
• To process payments and transactions
• To improve our services and user experience
• To provide customer support
• To send important updates and notifications
• To prevent fraud and ensure platform security
• To comply with legal obligations

 

5. Legal Basis for Processing (GDPR)

We rely on the following legal bases:

• Contractual necessity – to provide rental services
• Legal obligation – compliance with laws and regulations
• Legitimate interests – fraud prevention, service improvement
• Consent – for marketing and location tracking (where required)

 

6. Sharing Your Information

We may share your data with:

6.1 Service Providers

• Payment processors (e.g., Stripe, Apple Pay, Google Pay)
• Cloud hosting providers (e.g., AWS, Cloudflare)
• SMS/email providers

6.2 Rental Partners / Vendors

• To enable booking and vehicle delivery

6.3 Legal Authorities

• When required by law or to protect rights and safety

6.4 Business Transfers

• In case of merger, acquisition, or sale of assets

We do NOT sell your personal data.

7. Data Retention

We retain your data only as long as necessary:

• Account data: while your account is active
• Transaction data: up to 7 years (for legal/tax purposes)
• Verification documents: as required by law

After this period, data will be securely deleted or anonymized.

8. Your Rights (GDPR)

As a user in the EU/Cyprus, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“Right to be Forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise your rights, contact: [Insert Email]

9. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Improve user experience
• Analyze traffic and usage
• Store preferences

You can manage cookies through your browser settings.

10. Data Security

We implement industry-standard security measures, including:

• Encryption (SSL/TLS)
• Secure cloud storage
• Access control and authentication
• Regular security monitoring

However, no system is 100% secure.

11. International Data Transfers

Your data may be transferred outside the EU (e.g., AWS servers).
We ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• GDPR-compliant providers

 

12. Children’s Privacy

XRENTIT is not intended for users under 18 years old.
We do not knowingly collect data from minors.

13. Third-Party Links

Our platform may contain links to third-party websites.
We are not responsible for their privacy practices.

14. Account Deletion

You may delete your account at any time via the app or by contacting us.
We will process deletion in accordance with legal obligations.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
We will notify users of significant changes via:

• App notifications
• Email
• Website updates

 

16. Contact Us

For any privacy-related inquiries:

Email: support@xrentit.com
Address: Eleftherias, 17, Dromolaxia, 7020, Larnaca, Cyprus

17. Supervisory Authority

If you believe your data is mishandled, you can contact:

Office of the Commissioner for Personal Data Protection (Cyprus)