Privacy Notice

trac.mt is a car hire and airport transfer service in Gozo, Malta, operated by Trust Rent a Car Gozo, of J.M Court Flt 3, Triq Patri Anton Debono, Victoria, Gozo, Malta VCT2253 — VAT No. MT 1817 6101. We are the data controller for the personal information described here. You can reach us about anything on this page at bookings.trac.mt@gmail.com or +356 9982 6339.

When you book a transfer or hire a car, we collect what the booking needs: your name, email, phone number, pick-up and drop-off details, flight numbers and travel dates, the number and ages of passengers, and any notes you give us (for example a child seat, or who we are meeting). We use this to perform the contract with you — getting you and your car where they need to be.

For car hire, we also collect a photo of each driver's driving licence, and a Blue Badge photo where you ask for accessible arrangements. We need these to hire you the vehicle lawfully and to meet our insurance requirements.

If you create an account, we keep your details and, if you choose to save them, your documents, so your next booking is faster. Saving a document is always your choice.

Payments are handled by Viva.com, our payment provider; card details go directly to them and never touch our systems.

When you simply visit the site, our own system records basic visit information — such as which pages were viewed — to run and improve the site. We use no third-party analytics and no advertising trackers of any kind. Our booking and sign-in forms use Google's reCAPTCHA and Google sign-in, which operate under Google's own privacy policy.

We keep personal data only as long as it has a job to do:

• Photos attached to a booking (licences, Blue Badges) are deleted 90 days after the hire ends.
• Vehicle condition photos taken at handover and return document the car itself, not you — they are our business records and are kept as long as we need them. If a person happens to be identifiable in one, tell us and we will delete or blur it.
• Documents saved to your account are kept for 24 months from their last use, then deleted. We email you one month before anything is deleted, and nothing saved is deleted sooner than 30 days after that email.
• If you remove a saved document yourself, it is deleted immediately — the file included, not just the listing.
• Deleting your account removes your profile and your saved documents — but not the records and photos of bookings you made. Those are business records of hires that happened, and they follow the booking timescales on this page, account or no account.
• Booking records (who travelled, when, what was paid) are kept for 10 years to meet tax and accounting law.
• If a booking request is refused, the driver details attached to it are deleted when the matter is closed.
• Where an accident, damage, traffic fine, insurance claim or other dispute involves a booking, we keep everything related to that booking — photos included — until the matter is fully closed and any legal limitation period has passed, whatever the timescales above say. A deletion request cannot shorten this: the law allows us to keep records we need to handle or defend a claim.

Fewer people than you might think:

• Us — the people who drive you and manage your booking.
• A trusted transport partner, only when one performs your transfer instead of us, and only the details they need for that job (names, pick-up, flight, passengers — never your documents).
• Our accommodation and booking agents, only for bookings they placed for you.
• Service providers that make the site run: our server host, Google (email, sign-in, reCAPTCHA) and our payment provider.
• Nobody else. We do not sell, rent or trade your information, and we run no advertising trackers.

Under the GDPR you can ask us at any time to: see the information we hold about you; correct it; delete it (where no law requires us to keep it); restrict or object to its use; or receive a copy in a portable format. Write to bookings.trac.mt@gmail.com and we will answer within one month.

If you believe we have handled your information badly, you can complain to the Information and Data Protection Commissioner (IDPC), Malta — idpc.org.mt — though we would appreciate the chance to put it right first.

Our systems run on a server within the EU.

Our office is a home office. We are happy to meet you — by appointment only, please: unless you let us know in advance, we may simply not be there to see you.

If we change how we handle your information, we will update this page and change the date at the top. Significant changes will be flagged on the booking pages.