Privacy policy

M&D Rent a car SARL, BAT 24, ZI Cocotte Canal, 97224 Ducos, Martinique, France — 103 829 586 R.C.S. Fort-de-France. For any question about your data: mdrentacar97@gmail.com or +596 696 17 10 85.

• Identity and contact details: last name, first name, email address, phone number, postal address.
• Booking: vehicle, dates and times, extras, amounts, booking reference, acceptance of the terms and the time at which it was given.
• Customer account (optional): email address and password, the latter stored in encrypted form and never accessible in the clear. If you sign in with Google, only your email address and your name are passed to us.
• Payment: transaction and refund identifiers. No card details are received or kept by us: they are entered directly with our payment provider.
• Performance of the rental: handover and return of the vehicle, additional charges recorded, correspondence about the booking.
• Technical data: connection and security logs produced by the hosting platform.

No copy of a driving licence or of an identity document is collected online. These documents are shown to our representative on collection and simply checked.

Booking and rental

Performance of the contract and of pre-contractual measures (art. 6(1)(b) GDPR).

Confirmation, reminder and cancellation emails

Performance of the contract: these are service messages, not marketing.

Invoicing and accounting

Legal obligation of the controller (art. 6(1)(c)).

Security, fraud prevention and proof of transactions

Legitimate interest of the controller (art. 6(1)(f)).

Handling complaints and disputes

Legitimate interest, and performance of the contract.

Your data is not used for any marketing, is never sold, and is subject to no automated decision producing legal effects concerning you.

The data is accessible to our staff, and to the providers strictly necessary for the service to work:

Vercel Inc.

Site hosting. United States.

Supabase

Database and account management. Data hosted in the European Union, in Paris.

Stripe

Processing of card payments and refunds.

Resend

Delivery of transactional emails. Processing in Ireland.

Sentry

Detection of technical failures on the site. Processing in Germany. Reports contain the error message, the page concerned and the browser; they contain neither your IP address, nor your credentials, nor the contents of your forms.

Google

Only if you choose to sign in with a Google account.

Some of these providers are established outside the European Union. The corresponding transfers are governed by the European Commission’s standard contractual clauses. Booking and account data is stored within the Union.

Data may also be passed to the rental company’s insurer in the event of a claim, and to administrative or judicial authorities that lawfully request it.

Bookings, invoices and payments

10 years from the end of the financial year, under accounting obligations.

Customer account

Until you ask for it to be deleted, and at the latest 3 years after your last rental or login.

Prospects and enquiries with no follow-up

3 years from the last contact.

Emails sent and operations log

Kept with the booking file, as evidence.

Technical security logs

12 months at most.

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give directions as to what becomes of it after your death.

These rights are exercised by email at mdrentacar97@gmail.com or by post to our office address, with proof of your identity. We reply within one month.

Deleting an account deletes the data attached to it, apart from what the law requires us to keep — in particular the accounting records for rentals already carried out, which are kept until the statutory period has run.

If our answer does not satisfy you, you may lodge a complaint with the French data protection authority: Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.

This site sets no advertising cookies and no analytics trackers. No consent is therefore required, and no banner is forced upon you.

Only cookies strictly necessary to the service are used:

• keeping your session open while you are logged in to your account;
• holding your booking in progress while you go through payment;
• security cookies set by the payment provider on its own page.

Exchanges with the site are encrypted. Passwords are hashed. Access to booking data is restricted to the customer concerned and to authorised staff, and that control is applied by the database itself rather than by the interface alone. Sensitive operations — cancellation, refund, changes to a booking — are logged together with who performed them.

This policy may be updated to reflect legal or technical developments. The date of the last update appears at the top of the page. The conditions applicable to your booking are those in force on the day you made it, as set out in the rental terms and conditions.