Privacy Policy

Roadrunner Rent-A-Car ("we", "us", or "our"), operating from 1/F, 28 Queen's Road Central, Central, Hong Kong, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, make a booking, or otherwise interact with us.

This Policy is governed by the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") of Hong Kong.

1. Who We Are

The data controller responsible for your personal data is:

• Company Name: Roadrunner Rent-A-Car
• Address: 1/F, 28 Queen's Road Central, Central, Hong Kong
• Phone: +852 2525 5599
• Email: [email protected]

2. Data We Collect

2.1 Information You Provide

• Full name, email address, phone number
• Driving licence number and identity document
• Payment card details (processed via secure third-party processor)
• Pick-up/return dates and vehicle preferences
• Messages and enquiries submitted via our contact form

2.2 Information Collected Automatically

• IP address and browser type
• Pages visited, time and duration of visit
• Cookie identifiers (see our Cookie Policy)
• Referring website or search engine

2.3 Information from Third Parties

• Fraud prevention and credit check providers
• Insurance partners
• Government licensing authorities (for driving licence verification)

3. How We Use Your Data

We use your personal data for the following purposes:

• Booking fulfilment: To process reservations, issue rental agreements, and charge for services.
• Customer support: To respond to enquiries, complaints, and service requests.
• Legal compliance: To verify identity, check licences, and comply with Hong Kong law.
• Safety & fraud prevention: To detect and prevent fraudulent bookings or misuse of vehicles.
• Marketing communications: Where you have given consent, to send promotional offers, newsletters, and service updates. You may opt out at any time.
• Website improvement: To analyse usage patterns and improve our online experience.

4. Legal Basis for Processing

Under the PDPO, we process your data on the following bases:

• Contractual necessity: To fulfil your rental agreement.
• Legal obligation: To comply with applicable laws and regulations.
• Legitimate interests: For fraud prevention and improving our services.
• Consent: For marketing communications and non-essential cookies.

5. Sharing Your Data

We may share your personal data with:

• Insurance providers to administer cover on your rental.
• Payment processors (e.g., Stripe, PayMe) for transaction processing.
• Government authorities when required by law or regulation.
• Service providers who assist in operating our website and business (bound by data processing agreements).

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Policy, and in any event for a minimum of 7 years in respect of financial records to comply with Hong Kong accounting and tax law. Marketing data is retained until you withdraw consent.

7. Your Rights

Under the PDPO, you have the right to:

• Access the personal data we hold about you (subject to a HK$100 administration fee as permitted by the PDPO).
• Correct inaccurate or incomplete data.
• Withdraw consent to marketing at any time.
• Complain to the Office of the Privacy Commissioner for Personal Data Hong Kong.

To exercise these rights, contact us at [email protected] or call +852 2525 5599.

8. Cookies

Our website uses cookies to improve your experience. For full details, please see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. All payment data is transmitted using SSL encryption. Access to personal data is restricted to staff with a legitimate need.

10. International Transfers

Your data is primarily stored and processed in Hong Kong. Where data is transferred outside Hong Kong (e.g., to cloud service providers), we ensure adequate safeguards are in place in accordance with the PDPO.

11. Children's Privacy

Our services are not directed at persons under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Policy on our website and updating the "Last Updated" date above. Continued use of our services after such notice constitutes acceptance.