Airport Cars

Data Protection

Privacy Policy

Your privacy matters to us. Learn how we collect, use, and protect your personal information

Last Updated: February 18, 2026



Privacy at a Glance

We are committed to protecting your personal data. Here`s a quick overview of how we handle your information:

Secure Storage

Your data is encrypted and stored securely using industry-standard protocols

No Selling

We never sell your personal information to third parties

Your Rights

You have full control over your data and can request access or deletion anytime

Our Commitment: At Airport Cars, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1 Information We Collect

We collect various types of information to provide and improve our services. The information we collect includes:

1.1 Personal Information

When you rent a vehicle or create an account, we collect:

  • Full name and date of birth
  • Email address and phone number
  • Physical address (residential/billing)
  • Driver`s license details and number
  • Passport or national ID information
  • Payment card information
  • Emergency contact details

1.2 Booking & Rental Information

  • Rental dates, times, and locations
  • Vehicle preferences and selections
  • Additional services requested (GPS, child seats, etc.)
  • Insurance coverage selections
  • Special requirements or requests

1.3 Usage & Technical Data

  • IP address and browser type
  • Device information and operating system
  • Pages visited and time spent on site
  • Referring/exit pages and URLs
  • Clickstream data and navigation patterns

1.4 Location Data

  • GPS data from rental vehicles (if applicable)
  • Pickup and drop-off locations
  • General geographic location from IP address
Data Category Purpose Legal Basis
Personal Identification Identity verification, rental agreement Contract Performance
Payment Information Process transactions, prevent fraud Contract Performance
Contact Details Communication, support, notifications Legitimate Interest
Usage Data Improve services, analytics Legitimate Interest

2 How We Use Your Data

We use the collected information for the following purposes:

2.1 Service Delivery

  • Process and manage your vehicle rental bookings
  • Verify your identity and driver`s license
  • Provide customer support and respond to inquiries
  • Send booking confirmations and rental reminders
  • Process payments and refunds

2.2 Business Operations

  • Maintain and improve our website and services
  • Conduct data analysis and research
  • Monitor and prevent fraud and security threats
  • Enforce our terms and conditions
  • Manage insurance claims and incidents

2.3 Marketing & Communication

  • Send promotional offers and special deals (with your consent)
  • Provide personalized recommendations
  • Conduct customer satisfaction surveys
  • Send newsletters and updates about our services

Opt-Out: You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

2.4 Legal Compliance

  • Comply with legal obligations and regulations
  • Respond to law enforcement requests
  • Protect our rights and legal interests
  • Report to government authorities as required

3 Data Sharing & Disclosure

We may share your information with third parties under the following circumstances:

3.1 Service Providers

We share data with trusted third-party service providers who assist us in:

  • Payment processing (payment gateways, banks)
  • Background and license verification services
  • Cloud storage and hosting providers
  • Email and SMS communication services
  • Analytics and marketing platforms
  • Insurance companies (for claims processing)

3.2 Legal Requirements

We may disclose your information when required by law or to:

  • Comply with court orders or legal processes
  • Respond to government or law enforcement requests
  • Enforce our terms and conditions
  • Protect our rights, property, or safety
  • Investigate fraud or security issues

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you of any such changes.

Important: We never sell your personal data to third parties for their marketing purposes. All third-party service providers are contractually bound to protect your data.

4 Data Security Measures

We implement robust security measures to protect your personal information:

4.1 Technical Security

  • SSL/TLS encryption for all data transmissions
  • Secure data centers with 24/7 monitoring
  • Regular security audits and vulnerability assessments
  • Firewall protection and intrusion detection systems
  • Encrypted storage of sensitive information
  • Secure backup and disaster recovery systems

4.2 Organizational Security

  • Access controls and authentication requirements
  • Staff training on data protection and privacy
  • Confidentiality agreements with employees
  • Regular policy reviews and updates
  • Incident response and breach notification procedures

4.3 Payment Security

  • PCI DSS compliant payment processing
  • Tokenization of credit card information
  • Secure payment gateways
  • Fraud detection and prevention systems

Your Role: While we implement strong security measures, please also protect your account by using strong passwords and not sharing your login credentials.

5 Your Privacy Rights

You have the following rights regarding your personal data:

 

Right to Access

Request a copy of all personal data we hold about you, free of charge.

 

Right to Rectification

Request correction of inaccurate or incomplete personal information.

 

Right to Erasure

Request deletion of your personal data in certain circumstances.

 

Right to Object

Object to processing of your data for direct marketing or other purposes.

 

Right to Restriction

Request restriction of processing your personal data in certain cases.

 

Right to Portability

Receive your data in a structured, machine-readable format.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided at the end of this policy. We will respond to your request within 30 days.

Note: Some rights may be limited by legal obligations or legitimate business interests. We will inform you if we cannot fulfill your request.

6 Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website:

6.1 Types of Cookies We Use

  • Essential Cookies: Required for website functionality and security
  • Performance Cookies: Help us understand how visitors use our site
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Track your activity to provide relevant ads

6.2 Third-Party Cookies

We may use third-party services that set cookies, including:

  • Google Analytics for website analytics
  • Social media platforms for sharing features
  • Advertising networks for targeted marketing

6.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

7 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

7.1 Retention Periods

  • Active Customers: Duration of business relationship + 7 years
  • Rental Records: 7 years for legal and tax compliance
  • Payment Information: As required by financial regulations
  • Marketing Data: Until you withdraw consent or 2 years of inactivity
  • Website Logs: 12 months for security and analytics

7.2 Deletion Process

After the retention period, we securely delete or anonymize your data. You can request earlier deletion by contacting us, subject to legal obligations.

8 Children`s Privacy

Our services are not intended for individuals under 21 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

9 International Data Transfers

Your data is primarily stored and processed in Sri Lanka. If we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Standard contractual clauses
  • Adequacy decisions by relevant authorities
  • Certification schemes (e.g., Privacy Shield)

10 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending an email notification to registered users
  • Displaying a prominent notice on our website

Your continued use of our services after changes constitutes acceptance of the updated policy.

By using Airport Cars services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described.

Privacy Questions or Concerns?

If you have questions about this Privacy Policy or how we handle your data, please contact our Data Protection Officer:

Visit: AirportCars Katunayake Airport