Privacy Policy

1. Who we are

SIXT RENT A CAR SL LTD (trading as sixtrentcar), company number 17561835, registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ, is the controller of your personal data.

For any privacy question or request, contact us at privacy@sixtrentcar.co.uk or by post at our registered office, marked "Data Protection".

2. The data we collect

We obtain information directly from you, from a person making a booking for you, and where relevant from DVLA/DVA, insurers, payment services and authorities. We do not ask you to send medical diagnoses or full card details through our website or email. Before collecting criminal-offence information or health data, we must identify and document the applicable additional legal condition and safeguards, and explain the specific processing to you. A general contractual purpose alone does not authorise processing of that data.

3. How we use your data and our legal basis

Identity, contact and driving-entitlement information is necessary to assess and fulfil a rental; without it we may be unable to accept a booking. Marketing consent is optional and has no effect on rental eligibility. Where we rely on legitimate interests, you may object and ask us to explain our balancing assessment. We use human review for booking eligibility and disputed charges; this website does not make solely automated decisions with legal or similarly significant effects.

4. Who we share your data with

We share only what each recipient needs:

• Payment provider: processes card payments, deposit holds and refunds, and carries out fraud screening.
• Insurers and claims handlers: to provide cover and deal with accidents and claims.
• DVLA / DVA: to check driving licence records, using the check code you give us.
• Identity verification and fraud prevention services: to confirm your identity and prevent fraud.
• Police, local authorities, Transport for London and other enforcement bodies: where we are required to by law, or to transfer liability for penalty charges and fines to the hirer.
• Breakdown and repair providers: to help you during your rental.
• IT, email, hosting and booking system providers: who process data on our behalf under contract.
• Professional advisers (lawyers, accountants), and debt recovery agents where an amount owed is not paid.

We never sell your personal data.

5. International transfers

Some of our service providers may process data outside the UK. When they do, we make sure there is an adequacy decision or appropriate safeguards in place, such as the UK International Data Transfer Agreement or Addendum.

You can contact our privacy email to request details of the safeguards and a copy, subject to necessary redactions. Any vehicle tracking will be disclosed before handover, including its purpose and access arrangements.

6. How long we keep your data

• Rental agreements, invoices and payment records: 6 years after the end of the rental (tax and limitation periods).
• Copies of licences, ID and proof of address: 12 months after the end of the rental, unless needed for an open claim or penalty notice.
• Accident and claim records: 6 years after the claim is closed, or longer where an injury claim may still be brought.
• Telematics data: 90 days, unless needed for an incident or theft.
• Enquiries from people who don't book: 12 months.
• Marketing preferences: until you unsubscribe, and then a suppression record so we don't contact you again.

7. Your rights

Under UK data protection law you have the right to:

• get a copy of your personal data;
• have inaccurate data corrected;
• have your data deleted, where we don't need to keep it;
• restrict or object to how we use your data, including objecting to marketing at any time;
• receive your data in a portable format;
• withdraw consent where we rely on it.

To make a request, email privacy@sixtrentcar.co.uk. We normally respond within one month. Where a lawful extension or pause applies, we explain the reason and relevant deadline. We may ask for proportionate identity verification. Withdrawing consent does not affect processing already carried out lawfully. We don't charge a fee unless a request is clearly unfounded or excessive.

8. Security

We use encrypted connections (HTTPS) on our website, limit access to personal data to staff who need it, and require our service providers to keep data secure. Do not send full card numbers or security codes by email or through our enquiry forms. Payment processing arrangements and accepted methods are disclosed before payment.

9. Cookies and website data

Our website uses only the storage it needs to work. Our Cookie Policy has details. Our website loads its typeface from Google Fonts. When it does, Google receives your IP address, as with any website request.

10. Complaints

If you're unhappy with how we've handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint. You do not have to exhaust our complaints process before contacting the regulator.

11. Changes to this policy

We may update this policy. The latest version is always on this page, with the date it was last updated.