GDPR Compliance Statement

Last updated: July 14, 2026

Our Commitment to Data Protection

While we are an Australian-based company primarily operating under Australian Privacy Principles, we recognize that some of our customers may be residents of the European Union. For these customers, we are committed to complying with the General Data Protection Regulation.

Legal Basis for Processing

We process personal data based on the following legal grounds:

Your GDPR Rights

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You can request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.

Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format and transmit it to another controller.

Right to Object

You can object to processing of your personal data for direct marketing purposes at any time.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Data Transfers

Your personal data is primarily stored and processed in Australia. If data is transferred outside Australia or the EU, we ensure appropriate safeguards are in place through standard contractual clauses or other legally approved mechanisms.

Data Protection Officer

For GDPR-related inquiries, please contact our data protection representative at [email protected]

Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local supervisory authority or the Office of the Australian Information Commissioner.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach, as required by GDPR Article 33.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. All drivers must meet minimum age requirements as specified in rental terms.