Privacy Policy

This Privacy Policy explains how LuxeClub Rentals (“LuxeClub”, “we”, “us”, “our”) collects, uses, shares, and protects your personal data when you visit luxeclubrentals.com, book a vehicle, or otherwise interact with our services. We operate in the United Arab Emirates and comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”), its executive regulations, and applicable sector rules issued by Dubai RTA and the UAE Central Bank for payment processing.

1. Who we are

LuxeClub Rentals is a luxury and sports car rental service based in Dubai, UAE. For the purposes of UAE PDPL, we are the data controller of the personal data we collect through our website, booking flow, WhatsApp and email channels, and vehicle rental operations.

2. Data we collect

We collect personal data in three ways: information you give us, information created when you use our services, and information we receive from third parties.

2.1 Information you give us

• Identity & contact: full name, date of birth, nationality, email address, phone number, WhatsApp number.
• Identity verification documents: passport, Emirates ID, visa page, driving licence (UAE, GCC, or international permit). Required under UAE RTA rental rules.
• Booking details: pickup and return dates, delivery / collection address, selected vehicle, special requests.
• Payment data: handled by our payment processors (see Section 5). We do not store full card numbers on our servers.
• Correspondence: enquiry messages, WhatsApp chats, emails, and any content you share with our concierge team.

2.2 Information created when you use our site

• Device & technical data: IP address, browser type, operating system, referring URL, pages viewed, session duration.
• Analytics & cookies: identifiers set by Google Analytics, Umami, and Ahrefs Analytics (see Section 7).
• Booking session data: items saved to your cart, forms partially completed, account preferences.

2.3 Information from third parties

• ID verification results from our KYC partner (Veriff) confirming authenticity of submitted documents.
• Payment confirmations from Stripe and NowPayments.
• Traffic fine and Salik toll data from Dubai Police, RTA, and Salik for any violations or tolls incurred during your rental.

3. How we use your data

We process personal data only for the purposes listed below, and only to the extent necessary for each purpose.

• Provide the rental service: process your booking, prepare the rental agreement, deliver and collect the vehicle, handle any incident during the rental.
• Verify your identity and eligibility to drive the vehicle, as required by RTA and our insurers.
• Take payment and issue invoices, including security deposit authorisations and refunds.
• Communicate with you about your booking, respond to questions, send booking confirmations, delivery windows, and concierge updates via email and WhatsApp.
• Meet legal obligations including RTA rental registration, traffic fine reconciliation, Salik toll reconciliation, anti-money-laundering (AML) checks, and tax / VAT record-keeping.
• Protect the vehicle and third parties: report accidents, pursue damage or fine recovery, enforce rental terms.
• Improve our site and service: analytics, A/B testing, fraud prevention.
• Marketing (opt-in only): send promotions or new-vehicle announcements, but only if you have agreed. You can withdraw consent at any time.

4. Legal bases for processing

Under UAE PDPL we rely on one or more of the following legal bases for each processing activity:

• Performance of a contract — to fulfil your rental booking.
• Legal obligation — RTA, tax, AML, and traffic-enforcement requirements.
• Legitimate interests — to operate, secure, and improve our services, prevent fraud, and recover debts — provided this is not overridden by your rights.
• Your consent — for marketing communications and non-essential cookies. You may withdraw consent at any time.

5. Who we share your data with

We do not sell your personal data. We share it only with the following categories of recipients, and only to the extent each needs to perform its role:

We may also disclose personal data to insurers handling a claim, legal or tax advisors, debt-recovery agents, or law-enforcement bodies where legally required.

6. International data transfers

Some of the processors listed above store or process personal data outside the UAE. When we transfer data internationally, we rely on the mechanisms permitted under UAE PDPL Article 22, including transfers to jurisdictions with an adequate level of protection and the use of standard contractual clauses or equivalent safeguards. If you want details of the specific safeguards in place for a given transfer, email privacy@luxeclubrentals.com.

7. Cookies and tracking

We use cookies and similar technologies for three purposes:

• Strictly necessary — to keep you signed in, remember your selected currency / language, secure the booking flow. These cannot be switched off.
• Analytics — Google Analytics 4, Umami, Ahrefs Analytics. These help us understand which pages are useful and which are broken.
• Marketing / attribution — identifiers set by ad platforms if you arrive from a paid campaign, so we can measure campaign effectiveness.

You can block or clear cookies at any time from your browser settings. Blocking strictly necessary cookies will break parts of the booking flow.

8. Data retention

We keep personal data only as long as we need it. Our default periods are:

• Booking & rental agreement records: 7 years after the end of the rental, in line with UAE tax and commercial record-keeping obligations.
• Identity verification records: 5 years from the last rental, for AML and RTA audit purposes.
• Payment records: retained by our payment processors per their own schedules, and referenced by us for 7 years for tax purposes.
• WhatsApp and email correspondence: up to 3 years, or longer if an issue, claim, or fine is still open.
• Website analytics: up to 26 months (Google Analytics default).
• Marketing preferences: until you unsubscribe, plus 12 months for proof of consent.

After the retention period ends we delete or anonymise the data unless we are required by law to keep it longer.

9. Your rights under UAE PDPL

Subject to the conditions and limitations in UAE PDPL, you have the following rights:

• Access — ask what personal data we hold about you and obtain a copy.
• Rectification — ask us to correct data that is inaccurate or incomplete.
• Erasure — ask us to delete your data, where we do not need to keep it for a legal reason.
• Restriction & objection — ask us to stop or limit processing, especially for marketing.
• Withdraw consent — at any time where we rely on consent (e.g. marketing, optional cookies).
• Data portability — receive the data you have provided in a structured, machine-readable format.
• Stop automated decision-making — we do not currently use automated decisions that produce legal effects, but if that changes you have the right to request human review.
• Complain — lodge a complaint with the UAE Data Office if you believe we have not handled your data correctly.

To exercise any of these rights, email privacy@luxeclubrentals.com. We will respond within 30 days. We may need to verify your identity before releasing any data.

10. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. These include TLS encryption in transit, encryption at rest for our booking database, access controls, least-privilege API keys, and regular review of who can see customer data. No system is perfectly secure, so we also maintain an incident-response process and will notify you and the UAE Data Office of any personal data breach that is likely to affect your rights.

11. Children

Our services are directed at adults aged 21 and over (25 for supercar categories). We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at this URL, and the “Last updated” date at the top will change. Material changes will be highlighted on the homepage or in an email where we have your address.

13. Contact us

Questions, requests, or complaints about this Privacy Policy or how we handle your personal data: