Privacy Policy
How we protect your personal data — aligned with KKTC Law 88/2024 (Kişisel Verileri Koruma Yasası) and GDPR principles.
Last updated: 8 August 2026
In short
We are a car rental company. We ask you only for what we need to hand you a car and to keep the record TRNC law requires — nothing more, and for nothing else.
We do not sell your data, we share it with nobody for marketing, we build no profiles, and we use no advertising cookies. Browsing the site, we ask you for nothing at all: the booking flow is the only place you tell us anything.
The rest of this page is the detail, for anyone who wants it. We kept it short.
1. Data Controller
- Company: Kipra Rent A Car
- Legal form: Limited liability company registered in TRNC (Northern Cyprus)
- Address: İsmet İnönü Bulvarı 117, Famagusta 99450, TRNC
- E-mail:info@kiprarent.com
- Phone:+90 546 996 10 04
2. What we ask you for
The standard details any car rental company needs before it can hand over a car:
- Your name and contact details — for the contract and the confirmation.
- Your driving licence and ID or passport — the check we are legally required to make at handover.
- Booking details — dates, pickup and return point, vehicle choice, and any extras such as a child seat.
- Your preferred payment method. Card details are never stored on this site — payment goes through the POS terminal at handover.
As on every website, browsing produces standard technical records (IP address, browser details). We use those for security and for counting visits anonymously; they are not linked to your identity.
3. Why we ask
There is one answer: so we can rent you a car. In practice that means running the booking and the rental contract, making the identity check the law requires at handover, staying in touch with you, closing out an insurance, damage or traffic-fine case if one comes up, and keeping the records tax law tells us to keep. We use them for nothing else.
4. Legal basis
We process your details to enter into and perform the rental contract, and where TRNC law requires it of us (tax, insurance, traffic-fine reporting). Site security and anonymous visit counting rest on our legitimate interest — never on advertising or profiling, and theCookie Policy explains how to turn the measurement off.
5. Who we share with
We share your customer and booking records only with the parties below. Wenever sell your data, and we share it with nobody for advertising or profiling.
6. Where the servers are
The technical infrastructure behind the website and the booking system is partly hosted outside the TRNC (US / EU) — as it is for almost every modern website. Every connection is encrypted (TLS), the infrastructure services act only on our behalf under contractually limited terms, and they carry compliance commitments aligned with the GDPR and equivalent frameworks. On damage files, the insurance process runs in the TRNC and Türkiye.
7. How long we keep it
8. How we protect it
- HTTPS/TLS encryption on every connection.
- No card data on the website — processed only via the physical POS terminal.
- Access control: only authorised Kipra staff can access personal data; every access is logged.
- Backups: daily, encrypted, used only for disaster recovery.
- Document photos live in separate secure object storage with restricted access.
9. Your rights
Under TRNC Law 88/2024 (and equivalent frameworks such as the GDPR) you cansee what we hold, ask for a copy, have itcorrected if it is wrong, have it deleted,object to the anonymous measurement, and take your data with you in a portable format.
To exercise any of these rights, contact us atinfo@kiprarent.com. We respond within 30 days of receiving your request. The one exception is records tax law obliges us to keep: those cannot be deleted before their retention period ends.
10. Complaints
Please contact us first — we work hard to resolve issues quickly. If you remain dissatisfied with our response, you have the right to lodge a complaint with the TRNC Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). EU/UK residents may additionally complain to their local supervisory authority.
11. Policy Changes
This privacy policy may be updated as our services and the legal landscape evolve. The current version always lives on this page; for significant changes we'll try to notify you by email. The "Last updated" date at the top of the page reflects the latest revision.
12. Related documents
- Cookie Policy — the full list of cookies we use
- Data Protection Notice — a short summary shown at form-fill points