Privacy Policy

business 1. Who We Are

This Privacy Policy applies to the website portocarhub.com, operated by Porto Car Hub (hereinafter "we", "us" or "our"). Porto Car Hub is a car rental aggregator specifically focused on Porto and the north of Portugal. We connect travellers with trusted local car rental companies to facilitate no-deposit, no-credit-card vehicle rentals.

We act as a data controller for personal data you provide directly to us (e.g. via email enquiries). For bookings processed through our affiliate partner (LocalRent), they act as the data processor for booking-related personal data. For questions about our data practices, please contact us at book@portocarhub.com.

data_object 2. What Data We Collect

We collect the minimum personal data necessary to provide our services. The types of data we may collect include:

• Contact data: Name, email address — when you contact us directly by email.
• Booking data: Name, email, driving licence details, payment information, pickup/drop-off details — collected by our booking partner LocalRent during the reservation process. We do not store full payment card details on our servers.
• Usage data: IP address, browser type, device information, pages visited, time spent on site — collected automatically via analytics tools (see Section 4).
• Communication data: The content of emails you send to us.

We do not collect sensitive personal data (special category data under GDPR) such as health information, racial or ethnic origin, or political opinions.

manage_accounts 3. How We Use Your Data

We use the data we collect for the following purposes:

• Service delivery: To process car rental bookings and communicate booking confirmations, updates and changes.
• Customer support: To respond to enquiries, requests and complaints sent to us by email.
• Website improvement: To analyse how visitors use our website and improve our content and user experience.
• Marketing (where consented): We do not send unsolicited marketing emails. We do not sell your data to third parties.
• Legal compliance: To comply with applicable laws, regulations and legal processes.

Our legal basis for processing your personal data is: (a) performance of a contract for booking-related data; (b) legitimate interests for website analytics; (c) legal obligation where required by law.

cookie 4. Cookies and Tracking

Our website uses cookies to improve your browsing experience and analyse website traffic. We use the following types of cookies:

• Essential cookies: Required for the website to function properly. These cannot be disabled.
• Analytics cookies: We use Yandex Metrika to collect anonymised statistics on website usage (pages viewed, session duration, browser type). This data helps us improve the website.
• Third-party cookies: The LocalRent booking widget may set its own cookies required for the booking functionality.

You can control cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the website or complete a booking.

handshake 5. Third-Party Services

We use the following third-party services that may process your personal data:

• LocalRent (localrent.com): Our affiliate booking partner. They process your booking details, payment information and car rental agreement. LocalRent operates under their own privacy policy.
• Yandex Metrika: Website analytics service operated by Yandex. Collects anonymised usage data. Governed by Yandex's privacy policy.
• Google Maps: Embedded map on our contacts page. Google may collect data via the embedded map widget. Governed by Google's privacy policy.

We do not sell, trade or rent your personal data to any third parties beyond those listed above and necessary for service delivery.

security 6. Data Storage and Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. These measures include:

• HTTPS encryption for all data transmitted via our website
• Secure email communications for customer enquiries
• Limited access to personal data — only staff who need it for their work
• Regular review of data retention policies

We retain personal data only as long as necessary for the purposes described in this policy, and in accordance with applicable legal requirements. Email correspondence is typically retained for up to 2 years.

gavel 7. Your Rights under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights with respect to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Request your data in a machine-readable format.
• Right to object: Object to processing of your data for certain purposes.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us at book@portocarhub.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at cnpd.pt.

contact_mail 8. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact us:

• Email: book@portocarhub.com
• Website: portocarhub.com
• Location: Porto, Portugal

We aim to respond to all data-related enquiries within 30 days.