FleetFetch

Privacy policy

Last updated: September 27, 2026

Provisional version, pending legal review.

This policy explains which personal data we collect, why, who we share it with and what your rights are. It follows the General Data Protection Regulation (GDPR).

1. Data controller

FleetFetch OÜ (en cours d'immatriculation), [adresse du siège], Tallinn, Estonie. For any question about your data: [contact@domaine].

2. Data we collect

Bookings: name, email, phone, flight number, dates, location and any message for the agency.

Accounts: name, email and password (stored encrypted).

Partner agencies: agency and user contact details, vehicle information.

Technical data: IP address and browser, used to keep sessions secure.

3. Why we use it

To carry out your booking and contact you about it (legal basis: performance of a contract).

To manage your account and keep the platform secure (contract and legitimate interest).

To meet our accounting and legal obligations (legal obligation).

We don't use your data for advertising and we don't sell it.

4. Sharing with the agency

For the rental to happen, we pass your name, phone, flight number and booking details to the chosen agency. The agency is located outside the European Union (for example in Algeria). This transfer is necessary to perform the contract you request (GDPR Article 49(1)(b)).

5. Our service providers

We use providers that process data on our behalf: website hosting (Vercel), database (Neon, servers in Frankfurt), file storage (Cloudflare or Vercel), email delivery and, once switched on, online payment (Stripe). They're bound by GDPR-compliant confidentiality and security commitments.

6. How long we keep it

Booking data is kept for as long as the rental requires, then for as long as accounting rules require (generally 7 years). Account data is kept until the account is deleted.

7. Your rights

You can ask to access, correct, delete or export your data, or object to some processing, by writing to [contact@domaine]. You can also complain to the data protection authority in your country or to the Estonian authority (Andmekaitse Inspektsioon).