Privacy Policy

Last updated: June 2026

Introduction

This Privacy Policy explains how crisp-root.com collects, uses, and protects your personal information when you use our vehicle rental services or interact with our website.

Information We Collect

Personal Information

When you make a reservation or contact us, we collect:

• Full name and contact details
• Email address
• Postal address
• Driving license information
• Payment card details
• Company name (if applicable)

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent on each page
• Referring website addresses
• Device information

How We Use Your Information

We use collected information for the following purposes:

• Processing vehicle rental reservations
• Verifying driver eligibility and insurance requirements
• Processing payments and managing accounts
• Communicating with you about your reservation
• Improving our services and website functionality
• Complying with legal obligations

Legal Basis for Processing

We process your personal data based on:

• Contract performance: to fulfill our rental agreement with you
• Legal obligation: to comply with UK and EU regulations
• Legitimate interest: to improve our services and prevent fraud
• Consent: where you have given explicit permission

Data Sharing and Disclosure

We may share your information with:

• Insurance providers for coverage verification
• Payment processors to complete transactions
• Legal authorities when required by law
• Service providers who assist our business operations

We do not sell or rent your personal information to third parties for marketing purposes.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy. Specifically:

• Reservation records: 7 years (for accounting and legal purposes)
• Payment information: as long as required by financial regulations
• Marketing communications: until you withdraw consent
• Website analytics: 26 months

Your Rights

Under UK GDPR, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to processing of your information
• Request restriction of processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at: [email protected]

Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use, please refer to our Cookies Policy.

Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted data transmission (SSL/TLS)
• Secure payment processing systems
• Access controls and authentication
• Regular security assessments

International Data Transfers

Your information is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection laws.

Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

For questions about this Privacy Policy or our data practices, contact us at:

crisp-root
47 Cromwell Road
Kensington, London SW7 2EF
United Kingdom
Email: [email protected]

Supervisory Authority

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.