PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the “Platform”).

By using the Platform, you consent to the practices described in this Policy.

2. INFORMATION WE COLLECT

2.1 Personal Information

We may collect:

• Full name, email address, phone number
• Home address and billing address
• Driver’s license information
• Date of birth
• Government-issued identification (if required)
• Payment information (processed via secure third-party providers)

2.2 Vehicle & Rental Data

• Reservation details
• Rental history
• Vehicle preferences
• Incident or claims information

2.3 Device & Technical Data

• IP address
• Browser type and device identifiers
• Operating system
• App usage data

2.4 Location Data

• Real-time or approximate location (if enabled)
• Vehicle GPS/telematics data (for safety, theft prevention, and compliance)

2.5 Cookies & Tracking Data

• See our Cookie Policy for details

3. HOW WE USE YOUR INFORMATION

We use your information to:

• Process bookings and payments
• Verify identity and eligibility to rent
• Provide customer support
• Improve platform functionality and user experience
• Prevent fraud and enhance security
• Comply with legal and regulatory requirements
• Send transactional and service-related communications

With your consent, we may also:

• Send marketing communications
• Offer promotions or recommendations

4. LEGAL BASIS FOR PROCESSING (GDPR APPLICABLE USERS)

If you are located in the EEA/UK, we process data based on:

• Contractual necessity (e.g., rental transactions)
• Legal obligations
• Legitimate interests (fraud prevention, platform security)
• Consent (marketing, cookies)

5. SHARING OF INFORMATION

We may share your information with:

5.1 Service Providers

• Payment processors (e.g., Stripe, PayPal)
• Identity verification services
• Cloud hosting providers (e.g., AWS)

5.2 Business Partners

• Vehicle owners (if peer-to-peer model)
• Insurance providers
• Roadside assistance providers

5.3 Legal Authorities

• Law enforcement or regulators when required by law
• To enforce our Terms or protect rights and safety

6. DATA RETENTION

We retain your information:

• As long as necessary for service delivery
• To comply with legal obligations
• To resolve disputes and enforce agreements

Retention periods may vary depending on:

• Regulatory requirements
• Fraud prevention needs

7. YOUR PRIVACY RIGHTS

7.1 U.S. (California – CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal data we collect
• Request deletion of your data
• Correct inaccurate data
• Opt-out of “sale” or “sharing” of personal data (if applicable)
• Limit use of sensitive personal information

To exercise rights: privacy@drifully.com

7.2 GDPR (EEA/UK Users)

You have the right to:

• Access your data
• Rectify inaccuracies
• Erase your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent

8. DATA SECURITY

We implement industry-standard safeguards, including:

• Encryption (in transit and at rest)
• Secure authentication controls
• Access restrictions

However, no system is 100% secure.

9. CHILDREN’S PRIVACY

Our services are not intended for individuals under 18. We do not knowingly collect data from minors.

10. THIRD-PARTY LINKS

Our Platform may contain links to third-party websites. We are not responsible for their privacy practices.

11. INTERNATIONAL DATA TRANSFERS

If you access our Platform outside the U.S., your data may be transferred and processed in the United States or other jurisdictions.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Changes will be posted with a revised “Effective Date.”

13. CONTACT US