Privacy Policy
Effective date: January 1, 2025 • Rimaar Car Rental, Takoma Park, MD 20912
1. Information We Collect
To provide our car rental services, we collect the following categories of information:
Account Information
Name, email address, phone number, date of birth, and account password (hashed — never stored in plain text).
Sensitive Identity Information
Driver's license number. This field is encrypted at rest using AES-256 encryption and is never stored in plain text in our database.
Rental Agreement Information
Insurance provider, insurance policy number (encrypted at rest), policy expiry date, emergency contact name and phone, and any additional driver details (license number encrypted at rest).
Reservation and Transaction Records
Pickup and return dates, vehicle selected, location, total charges, and reservation status history.
2. How We Use Your Information
We use the information we collect to:
- Process and manage your vehicle reservations.
- Verify your identity and eligibility to rent (age, license validity).
- Generate and maintain your rental agreement.
- Send booking confirmations and transactional emails.
- Contact your emergency contact if required during an incident.
- Comply with legal obligations, including insurance and liability requirements.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. Encryption and Data Security
We take the security of sensitive information seriously:
- Driver's license numbers and insurance policy numbers are encrypted at the application layer before being written to our database. The encryption key is stored separately from the database and is never logged or exposed.
- Passwords are hashed using Django's PBKDF2 algorithm with a per-user salt.
- All data in transit is encrypted via HTTPS/TLS.
- Database backups are GPG-encrypted before being written to disk.
- Sessions expire after 8 hours of inactivity and immediately on browser close.
4. Data Retention
We retain your personal information for as long as your account is active and for a reasonable period afterward for legal and business record-keeping purposes (typically 7 years, in accordance with Maryland business records requirements).
You may request deletion of your account and associated data by contacting us at rimaarcarrental@gmail.com. Note that we may be required to retain certain transaction records for legal compliance.
5. Cookies and Sessions
We use a single session cookie to keep you logged in during your visit. This cookie:
- Is set only when you log in.
- Expires after 8 hours or when you close your browser, whichever comes first.
- Is marked
HttpOnlyandSecure— it cannot be read by JavaScript and is only transmitted over HTTPS.
We do not use tracking cookies, analytics cookies, or third-party advertising cookies.
6. Third-Party Services
We use the following third-party services in the operation of this website:
- Email delivery: Transactional emails (booking confirmations, password resets) are sent via SMTP. Your email address is transmitted to our email provider solely for delivery.
- File storage: Vehicle photos are stored in a cloud object storage service. These are publicly accessible images only — no personal information is stored there.
No personal information is shared with payment processors — our current booking flow uses a payment stub. When a real payment processor is integrated, this policy will be updated accordingly.
7. Your Rights
You have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information in your account.
- Request deletion of your account, subject to legal retention obligations.
- Withdraw consent for non-essential data use at any time.
To exercise any of these rights, contact us at rimaarcarrental@gmail.com. We will respond within 30 days.
8. Children's Privacy
Our services are not directed at individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. If you believe we have inadvertently collected such information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy periodically. The effective date at the top of this page reflects the most recent revision. We will notify registered customers of material changes by email.