Auto Reservation Plus logo

Privacy Policy

Last updated: April 2026

This policy explains how Auto Reservation Plus Limited collects, uses and protects your personal data. We are committed to handling your information responsibly and in accordance with UK data protection law.

1. Who We Are

Auto Reservation Plus Limited ("we", "us", "our") is a car rental booking service registered in England and Wales (Company No. 05040025). We operate the websites auto-reservation-plus.com and auto-reservation-plus.co.uk.

We are the data controller for the personal information collected through our websites. For questions about how we handle your data, see Section 13.

2. Data We Collect

Information you provide directly

  • Booking details — your name, email address, phone number, pick-up and drop-off locations, dates and times, and vehicle preferences when you make or enquire about a booking.
  • Payment information — credit or debit card details and billing address when completing a reservation. Payment data is processed securely by our payment partners and we do not store full card numbers on our systems.
  • Communications — messages, enquiries or complaints you send us by email, WhatsApp or any other channel, along with any information you include in those communications.
  • Driver information — driving licence details and date of birth when required by the rental supplier.

Information collected automatically

  • Usage data — pages visited, search queries entered, links clicked, session duration and referral source.
  • Device and browser data — IP address, browser type and version, operating system, screen resolution and device type.
  • Location data — approximate country or region derived from your IP address, used to display relevant currency and language preferences.
  • Cookies and similar technologies — see Section 9 for full details.

Information from third parties

We may receive information about you from car rental suppliers (for example, confirmation of a completed rental), payment processors, and fraud prevention services in order to fulfil your booking and keep our records accurate.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Fulfilling your booking — processing reservations, issuing booking confirmations and vouchers, and communicating changes or cancellations.
  • Customer support — responding to your enquiries, resolving complaints and providing assistance before, during and after your rental.
  • Payments — processing transactions, issuing refunds and handling payment disputes.
  • Account and preferences — remembering your language and currency preferences across visits.
  • Improving our service — analysing usage patterns to identify and fix issues, optimise the booking flow and develop new features.
  • Legal and compliance — meeting our obligations under applicable law, preventing fraud and resolving disputes.
  • Marketing — sending you promotional offers or travel inspiration by email where you have given consent or where we have a legitimate interest and you have not opted out. You can unsubscribe at any time.

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following legal bases:

  • Contract — processing necessary to enter into or perform the contract with you (e.g. fulfilling a booking).
  • Legitimate interests — improving our website, preventing fraud, sending direct marketing to existing customers (where you have not opted out), and communicating service updates.
  • Legal obligation — retaining transaction records and complying with tax, accounting and other regulatory requirements.
  • Consent — where we have asked for and you have given your agreement, for example for non-essential cookies or certain marketing communications. You may withdraw consent at any time.

5. Sharing Your Data

We do not sell your personal data. We share it only as described below:

  • Car rental suppliers — your booking details are passed to the supplier you choose in order to prepare and fulfil your rental reservation.
  • CarTrawler — our search and booking engine is powered by CarTrawler (registered in Ireland). CarTrawler processes search queries and booking transactions on our behalf and operates under its own privacy policy.
  • Payment processors — card transactions are handled by regulated payment service providers who are contractually bound to protect your data and process it only on our instructions.
  • Analytics providers — we use Google Analytics to understand how visitors use our website. Data is pseudonymised and aggregated; Google may process this data on servers outside the UK (see Section 6).
  • Professional advisers — lawyers, accountants, insurers and auditors who require access to your data in the course of providing services to us, under strict confidentiality obligations.
  • Law enforcement and regulators — where we are required to do so by law, court order, or in connection with legal proceedings.

6. International Transfers

Some of our suppliers and service providers are based outside the United Kingdom. Where we transfer personal data outside the UK, we ensure that an appropriate level of protection is in place, such as:

  • An adequacy decision by the UK Government confirming that the destination country provides an equivalent level of protection; or
  • UK International Data Transfer Agreements (IDTAs) or equivalent contractual safeguards; or
  • Another lawful transfer mechanism permitted under UK data protection law.

You can request further information about the safeguards we have in place by contacting us using the details in Section 13.

7. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law:

  • Booking records — retained for 7 years after the rental date to comply with HMRC record-keeping requirements.
  • Customer support records — retained for 3 years from the date of the enquiry or complaint.
  • Marketing preferences — retained until you unsubscribe or withdraw consent, after which your opt-out record is kept indefinitely to prevent accidental re-contact.
  • Website analytics — aggregated and pseudonymised; individual-level data is retained for up to 26 months by default.

When data is no longer required it is securely deleted or anonymised.

8. Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

  • Access — to request a copy of the personal data we hold about you (a Subject Access Request).
  • Rectification — to ask us to correct inaccurate or incomplete data.
  • Erasure — to ask us to delete your data where there is no compelling reason for us to continue processing it.
  • Restriction — to ask us to restrict processing of your data in certain circumstances.
  • Portability — to receive your data in a structured, machine-readable format where processing is based on consent or contract.
  • Object — to object to processing based on legitimate interests, including direct marketing (which we will always honour).
  • Withdraw consent — where processing is based on your consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us as described in Section 13. We will respond within one month. There is no charge for most requests, although we may charge a reasonable fee for manifestly unfounded or excessive requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK supervisory authority for data protection:

9. Cookies

We use cookies and similar technologies to make our website work, remember your preferences, and understand how visitors use it.

Essential cookies

These are necessary for the website to function and cannot be disabled. They include cookies that remember your language and currency preferences (arp_lang, arp_currency) and your country for localisation (arp_country).

Analytics cookies

We use Google Analytics to collect anonymous statistics about how visitors use our website (pages viewed, session duration, traffic sources). Google Analytics sets cookies such as _ga and _gid. This data is pseudonymised and does not identify you personally. You can opt out using the Google Analytics opt-out browser add-on.

Third-party cookies

Our booking engine (powered by CarTrawler) may set its own cookies to maintain your search session and display available vehicles. These are governed by CarTrawler's privacy policy.

Managing cookies

You can control or delete cookies through your browser settings. Note that disabling certain cookies may affect the functionality of this website. For more information, visit aboutcookies.org.

10. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. These include:

  • TLS encryption for all data transmitted between your browser and our websites.
  • Access controls limiting who within our organisation can view personal data.
  • Regular security reviews and updates to our systems.

Where we share data with third parties, we require them to maintain equivalent security standards through contractual obligations.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals where required by law.

11. Children

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data about a child, please contact us immediately and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Your continued use of our website after any changes constitutes your acknowledgement of the updated policy.

13. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

We aim to respond to all data protection enquiries within 5 business days and to any formal rights requests within one calendar month.