Data Protection Notice

A short, form-fill-moment summary of which data we collect and why — under KKTC Law 88/2024 (Kişisel Verileri Koruma Yasası).

Last updated: 25 May 2026

Data Controller

Ağrı ve Toros Turizm Ltd (Kipra Rent A Car)
İsmet İnönü Bulvarı 117, Famagusta 99450, TRNC
info@kiprarent.com · +90 546 996 10 04

What we collect

We collect personal data when you fill in the following forms:

Booking form: first name, surname, phone, email, rental dates, pickup/return location, vehicle choice.
KYC upload: driving licence (front + back); passport or ID card (front + back); date of birth.
Contact form: name, email, your message.
Technical data: IP address, browser info, cookie data (full details in our Cookie Policy).

Why we collect it

To create your booking and prepare the rental contract.
Identity and licence verification — legal and insurance requirement.
To communicate with you (confirmation, reminders, support).
To handle traffic fines and insurance processes.
To meet legal obligations (tax, insurance).
Site analytics — only with your explicit consent.

Legal basis

Performance of a contract (for booking and KYC data).
Legal obligation (tax, insurance, traffic-fine records).
Explicit consent (for analytics cookies and optional disclosures).
Legitimate interest (security, fraud prevention).

Who we share with

We share with a small number of third parties strictly to deliver the service:

Cloudflare (US/EU) — site hosting, document storage.
Clerk (US) — authentication.
Resend (US) — transactional email delivery.
Google Gemini (US) — for OCR on documents you upload (only at processing time).
Google Analytics (US) — only with your consent; anonymous usage measurement.
TRNC competent authorities — on lawful request.
Insurance provider — during damage/accident processing.

All transfers happen over TLS-encrypted connections. Full list and details: Privacy Policy.

How long we keep it

KYC document photos: deleted 1 year after the rental ends.
Booking and invoice data: 5 years (per TRNC tax law).
Communication logs: 1 year.
Anonymous analytics data: indefinite.

Your rights (summary)

Under KKTC Law 88/2024 (Kişisel Verileri Koruma Yasası) and equivalent frameworks (GDPR, UK GDPR), you have the rights of information, access, rectification, erasure, objection, and data portability. To exercise any of these rights, email info@kiprarent.com — we respond within 30 days.

Detailed explanation: Privacy Policy — Data Subject Rights.