Privacy & cookies

This explains what happens to your information when you enquire about a car, join our mailing list, or just read the site. It is meant to be read, so it is in plain English.

Who is responsible for your data

What we collect, and why

When you request a booking

The booking form asks for your first and last name, email address, phone number and the age of the driver. You can also add a flight number and a note. We need these to quote for the right dates, to know the car is going to someone who is allowed to drive it, and to reach you about the booking. Without them we cannot answer an enquiry, so the lawful basis is taking steps at your request before entering into a contract.

When you contact us

The contact form takes your name, email and message. We use them to reply, and for nothing else.

When you join the mailing list

Just your email address, on the basis of your consent. Every email we send has an unsubscribe link, and unsubscribing removes you from the list.

When you browse

Our host records standard server logs — IP address, browser, the pages fetched — which is a security and reliability measure and our legitimate interest. If you allow it, we also use the measurement cookies described below.

How a booking request reaches us

This is worth being direct about. When you submit the booking form, the site opens WhatsApp with your request written out, and you send it. That means the contents of the message pass through WhatsApp, which is operated by Meta, under Meta's own terms and privacy policy rather than ours. If you would rather not use WhatsApp, the same page offers an email link, and you can always phone us instead.

We do not take payment on this site

There is no checkout here and no card details are entered on these pages. The security deposit is a pre-authorisation taken on your card in person at collection — held, not charged, and released when the car comes back.

Cookies and measurement

Nothing that identifies you is stored on your device until you agree to it. When you first arrive, a banner asks whether we may use measurement cookies. Choosing Only what's needed means no advertising or analytics cookies are set, and the site works exactly the same.

If you agree, we use:

• Google Analytics and Google Ads — to see which pages people read and which adverts led them here, so we are not paying for adverts that do not work.
• Meta Pixel — the same measurement for adverts shown on Facebook and Instagram.

You can change your mind whenever you like: the Cookie settings link at the bottom of every page reopens the banner, and your browser settings can clear or block cookies entirely.

Who else sees your information

• Vercel, which hosts the website and keeps the server logs.
• Meta, where you send a booking request over WhatsApp, or where you have allowed advertising cookies.
• Google, where you have allowed measurement cookies.
• Our email provider, so that we can reply to you.

We do not sell your information, and we do not pass it to anyone else for their own marketing.

Where your data goes

Some of these providers are based outside the European Economic Area, mainly in the United States. Where that happens, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.

How long we keep it

• Booking enquiries that do not become rentals — 12 months, in case you come back to us.
• Completed rentals — as long as tax and accounting law requires, currently ten years in Malta.
• Mailing list — until you unsubscribe.
• Server logs — a short rolling window kept by our host.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or hand it over in a portable format. You can object to processing we base on legitimate interests, and you can withdraw consent at any time without that affecting anything done beforehand.

Email hello@luxedrivemalta.com and we will answer within one month. If you are not satisfied, you can complain to the Office of the Information and Data Protection Commissioner in Malta, at idpc.org.mt.

Changes

If this policy changes we will update the date at the top of the page.