Privacy Policy – Click & Steer

• Account & Booking Data: name, email, phone, address, rental details (vehicle, pickup/return dates, location), selections and preferences.
• Identity & Licence Data: images of government-issued ID and, where requested, a selfie; OCR'd text (licence number, class/category, issuing country, expiry). We may verify manually and/or via third-party services.
• Payment & Invoice Data: payment status and references, invoice/receipt numbers, tax/levy lines. Cardholder data is handled by our authorized payment processor and is not collected or stored on Click & Steer systems.
• Device & Usage: logs, IP address, browser/device info, cookies or similar technologies to operate and secure the service.
• Partner Garage Data: operator business details, payout preferences, accounting integrations (e.g., QuickBooks realm ID), and configuration.

• Provide and administer bookings, contracts, invoices, and support.
• Verify identity and driving eligibility; prevent fraud and abuse.
• Generate and submit required government reports (e.g., car rental levy at BBD$5/day, max BBD$35).
• Operate payments, commissions, and payouts; reconcile transactions.
• Improve, secure, and audit the platform; comply with legal obligations.

Depending on jurisdiction, we rely on one or more of: performance of a contract; legitimate interests (e.g., fraud prevention, security, business operations); compliance with legal obligations; and consent (e.g., where required for optional features).

• With garages/operators you book with, and their accounting systems where connected.
• With service providers performing services for us (hosting, storage, OCR/ID tools, email, analytics, payments), under contract.
• With authorities where required by law or to protect rights/safety.
• We may store/process data in Barbados, Canada, the United States, or other locations where providers operate; protections follow this Policy and applicable laws.

• ID images (front/back and selfie if collected): kept through the rental and up to 90 days after return, or longer if needed for disputes/claims or legal duties, then securely deleted.
• OCR'd licence details, contracts, invoices, and compliance reports: up to 7 years from the end of the financial year of the rental, or longer if law requires.

We use reasonable administrative, technical, and physical safeguards (encryption in transit/at rest, least-privilege access, logging, and reviews). No method is 100% secure.

Subject to local law, you may request access, correction, or deletion of personal information. Some data cannot be deleted where we have a legal duty to retain it.

Our services are not directed to children under 16, and we do not knowingly collect personal information from them.

Questions or requests? Email admin@clickandsteer.com.