Privacy Policy – Click & Steer

• Account & Booking Data: name, email, phone, address, rental details (vehicle, pickup/return dates, location), selections and preferences.
• Identity & Licence Data: images of government-issued ID and, where requested, a selfie; OCR'd text (licence number, class/category, issuing country, expiry). We may verify manually and/or via third-party services.
• Verification & Compliance Records: verification status and decisions; references to third-party verification sessions (such as Veriff session identifiers); structured licence fields extracted from documents or verification providers; manual review notes and audit metadata where admin review applies.
• Payment & Invoice Data: payment status and references, invoice/receipt numbers, tax/levy lines. Cardholder data is handled by our authorized payment processor and is not collected or stored on Click & Steer systems.
• Device & Usage: logs, IP address, browser/device info, cookies or similar technologies to operate and secure the service.
• Partner Garage Data: operator business details, payout preferences, accounting integrations (e.g., QuickBooks realm ID), and configuration.

• Provide and administer bookings, contracts, invoices, and support.
• Verify identity and driving eligibility; prevent fraud and abuse.
• For returning renters, where permitted by law and our verification rules, we may match your contact details and a prior approved licence verification to offer a streamlined check when your licence remains valid and you confirm it has not changed.
• Generate and submit required government reports (e.g., car rental levy at BBD$5/day, max BBD$35).
• Operate payments, commissions, and payouts; reconcile transactions.
• Improve, secure, and audit the platform; comply with legal obligations.

Depending on jurisdiction, we rely on one or more of: performance of a contract; legitimate interests (e.g., fraud prevention, security, business operations); compliance with legal obligations; and consent (e.g., where required for optional features).

• With garages/operators you book with, and their accounting systems where connected.
• With service providers performing services for us (hosting, storage, OCR/ID tools, email, analytics, payments), under contract.
• With authorities where required by law or to protect rights/safety.
• We may store/process data in Barbados, Canada, the United States, or other locations where providers operate; protections follow this Policy and applicable laws.

• ID images (front/back and selfie if collected): through the rental and up to 90 days after return, unless a dispute, claim, or legal obligation requires longer retention.
• Structured licence and verification records (including licence number, country, expiry, verification status, OCR output, and verification-provider references): up to 7 years from the end of the financial year of the rental, or longer if law requires. This category also includes contracts, invoices, and compliance reports.
• Prior verification used for repeat bookings: we may retain the minimum fields needed to evidence a prior approved check for up to 12 months from the date of that approval, or until licence expiry if sooner.
• Veriff: Veriff also processes verification data under its own privacy terms. Click & Steer retains booking-linked outcomes and references needed to operate the platform.

We use reasonable administrative, technical, and physical safeguards (encryption in transit/at rest, least-privilege access, logging, and reviews). No method is 100% secure.

Click & Steer uses optional analytics cookies to understand how visitors use the site. Analytics is not required to search for vehicles, complete a booking, or use essential site features.

Where applicable, we ask for your consent before enabling analytics. You can accept or decline analytics cookies and change your choice at any time using the Cookie settings control in the site footer or below.

Cookie settings

Subject to local law, you may request access, correction, or deletion of personal information. Some data cannot be deleted where we have a legal duty to retain it.

Our services are not directed to children under 16, and we do not knowingly collect personal information from them.

Questions or requests? Email admin@clickandsteer.com.