Privacy Policy
Last updated: May 2026
Bama Cars Rental ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we handle it when you use our website and rental services.
1. Information We Collect
When you create an account or make a booking, we collect personal information including your name, email address, phone number, driver's licence details, and payment information. We also collect usage data such as pages visited, booking history, and device information to improve our service.
2. How We Use Your Information
Your information is used to process and manage bookings, verify driver eligibility, communicate booking confirmations and updates (including via WhatsApp where you have opted in), prevent fraud, and improve our platform. We do not sell your personal data to third parties.
3. Data Sharing
We share your data only with service providers necessary to operate our business — including our payment processor, cloud infrastructure provider (Convex), and communication platform (Twilio for WhatsApp notifications). All third parties are bound by data processing agreements and may not use your data for their own purposes.
4. Cookies & Tracking
We use essential cookies to maintain your session and remember your booking preferences. We do not use advertising or cross-site tracking cookies. You can clear cookies via your browser settings at any time; doing so will sign you out of your account.
5. Data Retention
We retain your account and booking data for as long as your account is active or as required by law. Booking records are kept for a minimum of 5 years for regulatory and insurance purposes. You may request deletion of your account data at any time; legally required records will be retained for the minimum period required.
6. Your Rights
You have the right to access, correct, or delete the personal data we hold about you. You may also request a portable copy of your data or object to certain processing. To exercise any of these rights, contact us at the email address below. We will respond within 30 days.
7. Security
We implement industry-standard security measures including encrypted data storage, secure HTTPS connections, and access controls. While we take every reasonable precaution, no system is completely immune to breaches. We will notify you promptly in the unlikely event that your data is compromised.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page and, where changes are significant, notify you by email. Continued use of our service after changes take effect constitutes acceptance of the revised policy.