Privacy Policy
How we protect your personal data, aligned with KKTC Law 88/2024 (Kişisel Verileri Koruma Yasası) and GDPR principles.
Last updated: 1 November 2026
In short
We are a car rental company. We ask you only for what we need to hand you a car and to keep the record TRNC law requires, nothing more, and for nothing else.
We do not sell your data, we share it with nobody for marketing, we build no profiles, and we use no advertising cookies. Browsing the site, we ask you for nothing at all: the booking flow is the only place you tell us anything.
The rest of this page is the detail, for anyone who wants it. We kept it short.
1. Data Controller
- Company: Kipra Rent A Car
- Legal form: Limited liability company registered in TRNC (Northern Cyprus)
- Address: İsmet İnönü Bulvarı 117, Famagusta 99450, TRNC
- E-mail:info@kiprarent.com
- Phone:+90 546 996 10 04
2. What we ask you for
The standard details any car rental company needs before it can hand over a car:
- Your name and contact details: for the contract and the confirmation.
- Your driving licence and ID or passport: the check we are legally required to make at handover.
- Booking details: dates, pickup and return point, vehicle choice, and any extras such as a child seat.
- Your preferred payment method. Card details are never stored on this site. Payment goes through the POS terminal at handover.
As on every website, browsing produces standard technical records (IP address, browser details). We use those for security and for counting visits anonymously; they are not linked to your identity.
3. Why we ask
There is one answer: so we can rent you a car. In practice that means running the booking and the rental contract, making the identity check the law requires at handover, staying in touch with you, closing out an insurance, damage or traffic-fine case if one comes up, and keeping the records tax law tells us to keep. We use them for nothing else.
4. Legal basis
We process your details to enter into and perform the rental contract, and where TRNC law requires it of us (tax, insurance, traffic-fine reporting). Site security and anonymous visit counting rest on our legitimate interest, never on advertising or profiling, and theCookie Policy explains how to turn the measurement off.
5. Who we share with
We share your customer and booking records only with the parties below. Wenever sell your data, and we share it with nobody for advertising or profiling.
6. Where the servers are
The technical infrastructure behind the website and the booking system is partly hosted outside the TRNC (US / EU), as it is for almost every modern website. Every connection is encrypted (TLS), the infrastructure services act only on our behalf under contractually limited terms, and they carry compliance commitments aligned with the GDPR and equivalent frameworks. On damage files, the insurance process runs in the TRNC and Türkiye.
7. How long we keep it
8. How we protect it
- HTTPS/TLS encryption on every connection.
- No card data on the website: processed only via the physical POS terminal.
- Access control: only authorised Kipra staff can access personal data; every access is logged.
- Backups: daily, encrypted, used only for disaster recovery.
- Document photos live in separate secure object storage with restricted access.
9. Your rights
Under TRNC Law 88/2024 (and equivalent frameworks such as the GDPR) you cansee what we hold, ask for a copy, have itcorrected if it is wrong, have it deleted,object to the anonymous measurement, and take your data with you in a portable format.
To exercise any of these rights, contact us atinfo@kiprarent.com. We respond within 30 days of receiving your request. The one exception is records tax law obliges us to keep: those cannot be deleted before their retention period ends.
10. Complaints
Please contact us first. We work hard to resolve issues quickly. If you remain dissatisfied with our response, you have the right to lodge a complaint with the TRNC Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). EU/UK residents may additionally complain to their local supervisory authority.
11. Policy Changes
This privacy policy may be updated as our services and the legal landscape evolve. The current version always lives on this page; for significant changes we'll try to notify you by email. The "Last updated" date at the top of the page reflects the latest revision.
12. Kipra Staff app (our own staff only)
Kipra Staff is our internal Android app. Only Kipra Rent A Car's own staff use it, on company phones, and an account exists only when our admin invites someone. Customers and the public cannot sign up. It handles the following data about the staff member using it:
- Location. While location sharing is on, the app collects the phone's precise location about once a minute, including when the app is closed or not in use, so our admin can see where staff are on an internal map while cars are delivered and collected. A permanent notification shows on the phone the whole time. Only the admin sees it; the history is deleted automatically after 90 days.
- Account details (name, email address): for signing in; kept while the person works with us.
- Notification token: a device identifier so staff alerts (for example a new booking) reach the phone. Delivered through Google's Firebase Cloud Messaging; deleted when the app is removed.
- Voice assistant: only when the staff member uses it, what they say is sent to our AI service providers to produce the answer. Conversations are deleted after30 days.
- Error records: technical details of a failed screen or request, used only to fix it; deleted after 90 days.
Photos and documents taken in the app (vehicle handovers, receipts, contracts) belong to the rental records described above. None of this data is sold, used for advertising or shared with anyone outside the service providers who run the app for us. Staff can ask the admin or write to info@kiprarent.com to see or delete their data, as in section 9.
13. Related documents
- Cookie Policy: the full list of cookies we use
- Data Protection Notice: a short summary shown at form-fill points