BestCarRentalDeal, a wholly owned subsidiary of Dream World Network LLC, doing business as BestCarRentalDeal, serves as an online intermediary platform designed to connect users with independent third-party car rental providers (“Providers”). We emphasize that we do not own, operate, control, or directly supply rental vehicles. Instead, our role is limited to facilitating bookings, where your reservation creates a direct contractual relationship with the chosen Provider. To enable the completion of such reservations, it is essential for us to share certain elements of your personal information with these Providers.

By accessing or utilizing our Services, you explicitly consent to the collection, use, storage, and sharing of your personal information as outlined in this Privacy Policy. If you do not agree with any aspect of this policy, we advise you to refrain from using the Services. At BestCarRentalDeal, we are deeply committed to safeguarding your privacy rights while delivering a user-friendly experience for car rental bookings worldwide.

1. Our Role and Data Controller Identification

BestCarRentalDeal functions as the data controller for the personal information we collect and process through our platform. This means we determine the purposes and means of processing your data in accordance with this policy. We are dedicated to ensuring full compliance with relevant data protection regulations, including key U.S. state privacy laws such as the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Utah Consumer Privacy Act (UCPA), the Connecticut Data Privacy Act (CTDPA), and any analogous laws in other jurisdictions (collectively referred to as “U.S. State Privacy Laws”).

It is important to note that once your personal information is transmitted to a Provider to fulfill a booking, that Provider assumes the role of an independent data controller. As such, they will handle your data pursuant to their own privacy policies and applicable legal requirements. We recommend reviewing the Provider's privacy policy at the time of booking or vehicle pickup to understand their specific practices.

2. Categories of Personal Information We Collect

To provide our Services effectively, we collect various types of personal information from multiple sources: directly from you (e.g., during booking or account creation), automatically through your interactions with our platform, and from third-party sources. Personal information refers to data that identifies, relates to, describes, or could reasonably be linked to you or your household. Below, we elaborate on the categories and examples of data we may collect, ensuring transparency about our practices.

A. Information You Provide Directly

This includes data you voluntarily submit when using our Services, such as during the booking process or when contacting support. Examples include:

  • Identifiers: Your full name, email address, phone number, postal address, IP address, and unique online or device identifiers (e.g., for session tracking).
  • Customer Records: Details such as your driver’s license number, passport or national ID (required for identity verification during rentals), date of birth (to confirm eligibility, e.g., minimum age requirements), and signature (if needed for electronic agreements).
  • Financial/Payment Information: Credit or debit card details, expiration dates, security codes (CVV), billing address, and other payment-related data necessary for processing transactions securely.
  • Reservation & Travel Details: Specifics about your rental, including pickup and drop-off locations, dates and times, preferred vehicle type or class, flight numbers (especially for airport pickups to accommodate delays), insurance preferences, and membership or loyalty program IDs (e.g., for frequent renter discounts).
  • Sensitive Personal Information (SPI): In limited cases, we may collect precise geolocation data (only with your explicit opt-in consent, e.g., for real-time tracking during pickup), account login credentials combined with passwords (for secure account access), financial information combined with access codes, or minimal health-related data (e.g., requests for vehicle modifications like hand controls for accessibility needs, or in the context of accident claims processed through Providers).

We only collect SPI when it is strictly necessary and with appropriate safeguards, and we limit its use to the purposes disclosed.

B. Information Collected Automatically

As you interact with our website or apps, we use technologies like cookies, pixels, and server logs to gather data passively. This helps us enhance functionality and user experience. Examples include:

  • Internet/Network Activity: Browsing history on our site (e.g., pages viewed, search queries for rentals), clickstream data (e.g., navigation paths), IP address, operating system, browser type, device-identifying information (e.g., MAC address), and device manufacturer/model (to optimize display across devices).
  • Geolocation Data: Approximate location inferred from your IP address (for regional pricing or availability), or precise real-time geolocation from your mobile device (only if you opt-in, such as for mapping rental locations or curbside assistance).
  • Connected Car Data (if shared by Providers): In some cases, Providers may relay telematics data from rented vehicles, including mileage, fuel levels, vehicle diagnostics, and location tracking. We process this only as needed for booking support and in line with Provider agreements.

C. Information from Third Parties

We may receive data from external sources to verify or enhance our records. This includes:

  • Providers (e.g., rental companies confirming booking details or reporting issues like fines).
  • Payment processors and fraud prevention services (e.g., to validate transactions and detect suspicious activity).
  • Marketing partners and data enhancement providers (e.g., to update contact details or tailor offers).
  • Booking channels such as affiliate sites or corporate travel managers.

We ensure third-party data is obtained lawfully and integrated securely.

3. Purposes of Collection and Use

We collect and process personal information solely for legitimate business and operational purposes, always aiming to provide value while respecting your privacy. Below, we expand on these purposes to clarify how your data supports our Services:

  • Processing Bookings and Fulfillments: To handle reservations, facilitate secure payments, manage transactions with Providers, and send confirmations, modifications, reminders, or updates (e.g., via email or SMS about pickup instructions or delays).
  • Identity Verification and Fraud Prevention: To confirm your eligibility (e.g., age and license checks), detect and mitigate fraudulent activities (e.g., unauthorized bookings), and ensure compliance with rental terms (including handling fines, tolls, or violations reported by Providers).
  • Customer Support and Issue Resolution: To respond to inquiries, provide assistance (e.g., troubleshooting booking errors), and address complaints or disputes efficiently.
  • Service Improvement and Analytics: To analyze usage patterns, conduct internal research, monitor trends (e.g., popular vehicle types or locations), and personalize the platform (e.g., recommending rentals based on past searches). This helps us refine features like search algorithms or mobile app interfaces.
  • Marketing and Personalization: To deliver targeted offers, promotions, newsletters, or interest-based advertising (e.g., via email about deals in your preferred locations), always with options to opt out. We may use aggregated data for broader market insights.
  • Account Management: To create, maintain, and secure user accounts, enabling features like saved preferences, faster checkouts, and access to rental history.
  • Legal and Security Compliance: To meet regulatory requirements, respond to legal processes (e.g., subpoenas), enforce our terms, and protect against security threats (e.g., data breaches or unauthorized access).

(e.g., data breaches or unauthorized access). We do not use your data for unrelated purposes without your consent.

4. Disclosure and Sharing of Personal Information

Transparency in sharing is key to our policy. We disclose personal information only when necessary and with appropriate protections. Categories of recipients include:

  • Car Rental Providers: Sharing is essential for booking fulfillment (e.g., your name, contact details, ID, and reservation specifics). Upon transfer, Providers act as independent controllers and may use the data for their operations, such as vehicle release or post-rental billing. We advise checking their policies for details.
  • Service Providers: Trusted vendors under contract, including payment processors (e.g., for transaction handling), IT hosting companies (for data storage), analytics firms (for usage insights), marketing agencies (for campaigns), and fraud detection services (for security checks). These entities are bound by confidentiality and data protection agreements.
  • Business Partners and Affiliates: For collaborative services, such as integrated travel options with airlines or hotels, loyalty program integrations, or joint marketing initiatives. Sharing is limited to what's needed for these purposes.
  • Legal and Regulatory Authorities: When compelled by law, court orders, or government requests (e.g., for audits or investigations), or to defend our rights, prevent harm, or address fraud.
  • Corporate Transactions: In the event of a merger, acquisition, reorganization, or asset sale, your data may be transferred to a successor entity, with notice provided where required.

Regarding “sales” or “sharing” under CCPA/CPRA: In the preceding 12 months, we may have shared or sold (as defined by these laws) identifiers, internet activity data, and geolocation information for cross-context behavioral advertising or targeted marketing. You have the absolute right to opt out of such activities through our dedicated “Do Not Sell or Share My Personal Information” link on our website. We also honor browser-based Global Privacy Control (GPC) signals automatically for opt-outs.

We explicitly do not sell personal information for monetary or other valuable consideration outside of advertising contexts, nor do we rent it to unrelated third parties.

5. Your Privacy Rights (U.S. State Privacy Laws)

If you reside in California, Virginia, Colorado, Utah, Connecticut, or another state with comprehensive privacy protections, you are entitled to specific rights regarding your personal information. We elaborate on these below to ensure you understand how to exercise them:

  • Right to Know/Access: You can request details about the categories of personal information we collect, the sources, purposes, and recipients, as well as specific pieces of your data (up to twice per 12-month period).
  • Right to Delete: Request erasure of your personal information, subject to exceptions (e.g., if needed for ongoing transactions, legal compliance, or security).
  • Right to Correct: If we hold inaccurate data about you, you can request updates or corrections to maintain accuracy.
  • Right to Opt-Out of Sale/Sharing: Instruct us to stop selling or sharing your data for behavioral advertising or other cross-context purposes.
  • Right to Limit Use of Sensitive Personal Information: Restrict processing of SPI to only what's necessary for providing Services (e.g., no secondary uses without consent).
  • Right to Non-Discrimination: We will not penalize you (e.g., by denying Services or charging higher prices) for exercising these rights.

To submit a request, please contact us using the details in Section 11. We will verify your identity (e.g., via email confirmation or account details) to prevent unauthorized access, and respond within the legally mandated timeframe (e.g., 45 days under CCPA, with possible 45-day extension). If we deny a request (e.g., due to exemptions), we will explain why and provide appeal instructions. Authorized agents may submit on your behalf with proper verification.

6. Data Retention

We retain personal information only for the duration necessary to achieve the purposes for which it was collected, or as required by law. For example:

  • Booking-related data (e.g., reservation details) is kept during the active rental period plus up to 3 years for accounting, dispute resolution, or legal purposes.
  • Account information persists until you request deletion, with a short buffer (e.g., 30 days) for reactivation or compliance.
  • Marketing data is retained until opt-out, then anonymized.

Retention periods are influenced by factors like data sensitivity, volume, potential risks, and obligations under tax, audit, or consumer protection laws. Once no longer needed, data is securely deleted or anonymized.

7. Security

Protecting your personal information is a top priority. We implement a multi-layered approach with commercially reasonable administrative, technical, and physical safeguards, including:

  • Encryption for data in transit (e.g., SSL/TLS protocols) and at rest (e.g., for stored payment details).
  • Access controls, such as role-based permissions and multi-factor authentication for our staff.
  • Regular security audits, vulnerability scans, and employee training on data protection.
  • Firewalls, intrusion detection systems, and monitoring for unauthorized access attempts.

Despite these measures, no online system or transmission method is entirely impervious to risks. We cannot guarantee absolute security against sophisticated threats like cyberattacks. Therefore, any submission of personal information is at your own risk, and we encourage you to use strong passwords, avoid public Wi-Fi for sensitive transactions, and promptly report any suspected breaches to us.

8. Children’s Privacy

Our Services are intended for adults and are not directed at children under the age of 18. We do not knowingly collect, use, or disclose personal information from minors under 18, and we strictly prohibit the collection of data from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA).

If we become aware that we have inadvertently collected personal information from a child under 13 (e.g., through a parent’s booking), we will take immediate steps to delete it and prevent further processing. Parents or guardians who suspect their child has provided such information should contact us promptly using the details in Section 11 for assistance in removal.

9. Cookies and Similar Technologies

To enhance functionality, analyze performance, and deliver personalized content, we employ cookies, web beacons, pixels, and similar tracking technologies. These tools help us remember preferences, track interactions, and support advertising. Categories include:

  • Necessary/Essential Cookies: Required for core site operations, like maintaining sessions or enabling secure logins (based on legitimate interests).
  • Performance/Analytics Cookies: To measure visitor behavior and improve site speed/efficiency (requires consent).
  • Functionality/Optimization Cookies: For remembering user choices, such as language or region settings (requires consent).
  • Advertising/Targeting Cookies: To show relevant ads based on your browsing (requires consent; opt-out available).

You can manage preferences anytime via our “Cookie Settings” banner or link on the site, or by adjusting your browser settings (e.g., blocking third-party cookies). Note that disabling cookies may limit some features. For advertising cookies, we may share limited data with partners for targeted campaigns, but you can opt out as described in Section 5.

10. Changes to This Policy

We may revise this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Services. Updates will be posted on this page with a revised effective date at the top. For material changes (e.g., new data uses or sharing practices), we will provide prominent notice on our website homepage or via email to registered users, giving you time to review and, if needed, adjust your account or discontinue use.

Your continued access or use of the Services after the effective date of changes constitutes your acceptance of the updated policy. We recommend checking this page regularly to stay informed.

11. Contact Us

For questions, concerns, rights requests, or feedback about this Privacy Policy or our data practices, please reach out to our dedicated privacy team:

  • Email: privacy@bestcarrentaldeal.com
  • Phone: +1-888-320-8421

We aim to respond to all inquiries within 30 days, or sooner as required by law. If you are unsatisfied with our response, you may escalate to the relevant data protection authorities.