Privacy Policy

1. Who is responsible for your information

Need a Vehicle is operated by Need a Vehicle (contact: [email protected]). We are responsible for the information described here when you use our websites and services. Where a booking exists, the Owner of the vehicle and you the Renter are also each other's counterparties: some details are shared between you because arranging a rental requires it, not because we decided to.

2. What we collect

Account information. Your name, email address, and — where you provide it — phone number. Your password is stored as a salted hash (Argon2id); we do not keep the password itself.

Booking and financial records. The vehicle you booked, the dates, the amounts, the ledger entries and payment records needed to pay an Owner, settle a dispute, and meet accounting and tax obligations.

Messages. Messages you exchange with the other party through the Services, so a dispute can be reviewed against what was actually said.

Photos and documents. Vehicle photos and trip photos you upload; and, for Owners, identity and insurance documents (KYC) used to verify that a listing is who and what it claims to be.

Location data. The pick-up and return locations of your trip, and any saved home location you choose to add. Trip photos you upload are re-encoded on the way in, which removes embedded metadata including GPS coordinates — we keep the location you told us about, not whatever a phone camera happened to record.

Technical information. Log entries needed to run and debug the service (request identifiers, RPC method, timing, error classes). We log that a request happened, not what you typed into it.

3. Why we collect it

To create and administer bookings and payments between an Owner and a Renters; to verify Owners and their documents; to allow staff to review listings, documents, and disputes; to send transactional email you asked for (sign-in and password help, booking status); and to keep the service running and secure.

We do not use your information for advertising, we do not build a behavioural profile of you, and we do not sell your personal information.

4. Who else sees it

The other party to your booking. A Renting user sees the Owner's first name and the listing details; an Owner sees the Renting user's name and the details needed to hand the vehicle over. This is inherent to a rental between two people.

Once a booking is confirmed, we show each party the other's name and phone number, and show the Renter the pickup point, until the trip closes.

Our processors. Hosting and object storage for the service; an email provider for transactional messages; a payment provider (Stripe) to move money — the payment provider receives the information a payment legally requires, under its own privacy terms, and we do not receive or store your full card number.

Need a Vehicle staff, who can see account, booking, document and ledger records in order to operate the marketplace and answer support requests.

Where required by law, to a competent authority responding to a valid request.

5. How long we keep it

Account, booking, ledger and audit records are kept while an account exists and afterwards as long as we have a legal or accounting reason to keep them — a completed rental is a financial record, and deleting it does not delete the fact that it happened.

KYC document objects (the uploaded identity and insurance files) for rejected or expired applications are purged automatically after 90 days by default; what remains is the record that a document existed and what we decided about it, not the file itself.

Trip photos are kept with the booking they document, because they are how damage and condition disputes are settled.

When you ask us to delete your account, the identifying fields in your account are removed or anonymised, the sessions on your devices are revoked, and your KYC document objects are deleted — while the booking, ledger and audit rows that record your rentals are retained for the reasons above.

6. Your choices

Take your data with you. Settings offers a download of your account data as a JSON file: your profile, bookings, messages, reviews, ledger entries and the metadata of documents you uploaded (the metadata, not the uploaded files themselves).

Ask us to delete your account. This blocks while a booking of yours is still active, then removes your identifying details, revokes your sessions everywhere, and deletes your document objects. Staff can see that a deletion was requested.

Correct it. You can update most profile fields yourself in Settings.

You can also email us at [email protected] to ask what we hold, to correct it, or to object to a specific processing activity. We do not use automated decision-making that legally affects you, and we do not sell or share your information for cross-context advertising.

7. Cookies and sign-in

Signing in stores a session token in an HttpOnly cookie — the browser's JavaScript cannot read it, which limits what a script-injection bug can do with it. That cookie is used to keep you signed in; it is not used to track you across other companies' websites.

A vehicle can be browsed without an account, so a first visit does not require you to sign anything.

8. Children, and where your data is processed

The Services are for adults arranging a private vehicle rental; we do not knowingly collect information from children.

Need a Vehicle is operated from Jamaica and the service runs in our own infrastructure, with the processors named above. If you use the Services from another country, you understand that your information is processed where we and those processors operate.

9. Changes to this policy

We may update this policy. The version date at the top of this page is the date of the current text; a material change will be reflected in that date before it takes effect.