Privacy Policy

Last updated: June 2025

Kutaisi Car Rental ("we", "us", "our") operates the vehicle rental comparison platform at kutaisicarrental.com. This Privacy Policy explains what personal information we collect from visitors and customers who use our website to search for, compare, and book vehicle rentals in Kutaisi, Imereti, Georgia - including pick-up locations such as Kutaisi International Airport, Bagrati Cathedral area, and delivery addresses across the city.

By using kutaisicarrental.com, you acknowledge you have read and understood this policy. If you do not agree with any part of these terms, please discontinue use of our platform. This policy applies to all users regardless of location, and specifically references the laws of Georgia and, where applicable, international data protection standards including the European Union General Data Protection Regulation (GDPR) for visitors accessing our site from the European Economic Area.

1. Who We Are and How to Reach Us

The data controller responsible for your personal information is Kutaisi Car Rental, a vehicle rental comparison service based in Kutaisi, Imereti, Georgia. For any privacy-related questions, requests, or concerns, you may contact us directly:

• Email: info@kutaisicarrental.com
• Phone: +1 (261) 847-5953
• Address: Kutaisi, Imereti, Georgia

We aim to respond to all privacy enquiries within 10 working days of receipt.

2. Information We Collect

When you use our platform to search for or book a vehicle rental in Kutaisi - whether for a short trip to Prometheus Cave Natural Monument, a one-way journey to Batumi, or a long-term monthly rental - we may collect the following categories of personal data:

2.1 Personal Identification Data

When you submit a booking enquiry or complete a reservation, we collect your full name, email address, telephone number, date of birth, and a copy or reference number of your driving licence. If you are a young driver renting under the age of 25, we may also collect supplementary identification to verify eligibility for vehicles in our comparison results.

2.2 Booking and Rental Data

We record the details of your vehicle rental request, including pick-up and drop-off locations (such as Kutaisi International Airport or hotel addresses within Imereti), rental dates and duration, selected vehicle category, any optional extras requested (child seats, GPS navigation, additional driver), and the total booking value.

2.3 Payment Information

We do not store full credit or debit card numbers on our servers. Payment processing is handled exclusively by certified third-party processors that comply with Payment Card Industry Data Security Standards (PCI-DSS). We retain only a transaction reference number, payment status, and partial card details for booking confirmation and dispute resolution purposes.

2.4 Browsing and Device Data

When you visit kutaisicarrental.com, we automatically collect certain technical data, including your IP address, browser type and version, operating system, referring URLs, pages viewed, time spent on each page, and the date and time of your visit. This data is collected via cookies and similar tracking technologies described in section 5 below.

2.5 Location Data

With your consent, we may access approximate location data from your device to pre-populate pick-up fields and surface the most relevant vehicle rental providers near your position in Kutaisi or surrounding Imereti towns. You may withdraw location consent at any time through your browser or device settings.

2.6 Communications Data

If you contact our support team by email or telephone, we retain records of that correspondence, including the content of messages, timestamps, and any documents you share. This helps us provide consistent customer support and resolve disputes fairly.

3. How We Use Your Personal Data

We process personal data only for clearly defined and lawful purposes. The legal bases we rely on under applicable Georgian data protection law and the GDPR include the performance of a contract, legitimate interests, legal compliance, and - for marketing - your explicit consent.

3.1 Processing Vehicle Rental Bookings

The primary use of your data is to facilitate your rental request. We transmit your booking details to the relevant vehicle rental provider in Kutaisi so they can prepare your reservation, verify your licence at collection, and process any applicable deposit or insurance agreement.

3.2 Customer Support and Dispute Resolution

Your contact and booking data enables us to assist you with modifications, cancellations, and complaints. If a dispute arises between you and a rental provider - for example, regarding damage assessments after a trip to Svaneti or a delayed return at Kutaisi airport - your records help us mediate fairly.

3.3 Service Improvement and Analytics

Aggregated, anonymised browsing data helps us understand which vehicle categories are most popular among visitors, which routes from Kutaisi generate the highest search volume, and how to improve the comparison experience. This analysis does not identify you individually.

3.4 Marketing Communications

Only where you have given explicit consent, we may send you promotional emails about seasonal rental deals in Kutaisi, early-booking discounts, or new vehicle categories added to our platform. You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly at info@kutaisicarrental.com.

3.5 Legal and Regulatory Compliance

We may process and retain your data where required to comply with Georgian law, court orders, tax obligations, or insurance regulatory requirements. In such cases, the legal obligation overrides your right to erasure for the relevant data and retention period.

4. Sharing Your Data with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share data only in the circumstances described below:

4.1 Vehicle Rental Providers

When you complete a booking, your personal and reservation details are shared with the relevant local or international rental company operating in Kutaisi or at Kutaisi International Airport. These providers are bound by their own privacy obligations and Georgian data protection laws.

4.2 Payment Processors

Billing information is handled by our PCI-DSS-compliant payment gateway partners. These processors act as data processors under a formal data processing agreement and are permitted to use your information only to complete and verify transactions on our behalf.

4.3 Insurance and Assistance Providers

Where your rental includes roadside assistance or additional coverage, your booking data may be shared with the insurance or assistance partner responsible for servicing claims. This ensures efficient handling if you encounter difficulties on routes such as the mountain roads toward Mestia.

4.4 Booking Technology Integrators

We use third-party booking engine technology to power our search and reservation functionality. These integrators operate under strict data processing agreements and are not permitted to use your data for any purpose beyond delivering the service we have contracted them to provide.

4.5 Legal Authorities

We may disclose personal data to law enforcement, courts, or regulatory bodies in Georgia or other jurisdictions when required to do so by law or when we believe disclosure is necessary to protect our legal rights, your safety, or the safety of others.

5. Cookies and Tracking Technologies

Kutaisicarrental.com uses cookies and similar technologies to improve your browsing experience, remember your search preferences (such as a saved pick-up location near Bagrati Cathedral or a preferred automatic transmission filter), and measure site performance.

The types of cookies we use include:

• Essential cookies - required for the website to function correctly. These cannot be disabled without affecting core features such as the booking search.
• Analytics cookies - help us understand visitor behaviour in aggregate and improve our platform. We use third-party analytics providers under data processing agreements.
• Preference cookies - store your language selection and filter preferences between sessions.
• Marketing cookies - used only with your consent to serve relevant advertisements about vehicle hire deals in Kutaisi and across Georgia.

You can manage cookie preferences through our cookie consent banner displayed on your first visit, or through your browser settings at any time. Withdrawing consent for non-essential cookies does not affect bookings you have already completed.

6. Data Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by Georgian law. Our standard retention periods are as follows:

• Active booking and customer account data - retained for the duration of the rental period plus 24 months thereafter, to allow for dispute resolution and insurance claims.
• Financial transaction records - retained for 7 years in compliance with Georgian tax and accounting legislation.
• Customer support correspondence - retained for 36 months from the date of the last communication.
• Marketing consent records - retained until you withdraw consent, plus 12 months as proof of compliance.
• Anonymised analytics data - retained indefinitely as it cannot be used to identify any individual.

When retention periods expire, data is securely deleted or irreversibly anonymised.

7. Your Rights as a Data Subject

Under applicable data protection law in Georgia and, for EEA residents, the GDPR, you have the following rights in relation to your personal data held by Kutaisi Car Rental:

7.1 Right of Access

You may request a copy of the personal data we hold about you at any time. We will provide this within 30 days of receiving a verified request, free of charge for the first copy.

7.2 Right to Rectification

If any personal data we hold is inaccurate or incomplete - for example, a misspelled name on a booking or an outdated phone number - you may request correction at any time by contacting info@kutaisicarrental.com.

7.3 Right to Erasure

You may request deletion of your personal data where we no longer have a lawful basis to retain it - for example, if you did not complete a booking and wish to have your enquiry data removed. Requests will be fulfilled within 30 days except where retention is required by law.

7.4 Right to Data Portability

Where your data is processed by automated means on the basis of consent or contract, you may request a structured, machine-readable copy of the data you have provided, suitable for transfer to another service provider.

7.5 Right to Object

You have the right to object to processing based on legitimate interests, including profiling for service improvement purposes. You also have an absolute right to object to direct marketing at any time, and we will cease such processing immediately upon receipt of a valid objection.

7.6 Right to Restrict Processing

In certain circumstances - for example, while you contest the accuracy of data we hold - you may request that we restrict processing to storage only, until the matter is resolved.

To exercise any of the above rights, please contact us at info@kutaisicarrental.com with the subject line "Data Rights Request". We may ask you to verify your identity before processing the request to protect against unauthorised access.

8. Data Security Measures

We apply appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data transmitted between your browser and our servers
• Access controls limiting internal access to personal data on a strict need-to-know basis
• Regular security assessments and vulnerability testing of our platform
• PCI-DSS-compliant payment processing with no cardholder data stored on our systems
• Staff training on data protection responsibilities and incident response procedures

While we apply industry-standard security, no internet-based platform can guarantee absolute protection. We encourage you to use strong, unique passwords and to contact us immediately at info@kutaisicarrental.com if you suspect unauthorised access to your account or booking data.

9. International Data Transfers

Kutaisi Car Rental is based in Georgia. If you access our platform from within the European Economic Area, your data may be transferred to and processed in Georgia, which is outside the EEA. In such cases, we rely on appropriate safeguards - including standard contractual clauses approved by the European Commission - to ensure your data receives an equivalent level of protection.

Where our third-party service providers process data in jurisdictions outside Georgia, we ensure they are contractually bound by data protection obligations consistent with those described in this policy.

10. Children's Privacy

Our vehicle rental comparison platform is intended for use by adults aged 18 and over. We do not knowingly collect personal data from children under the age of 16. If you believe a child has submitted personal data to us, please contact info@kutaisicarrental.com and we will delete the relevant information promptly.

11. Changes to This Privacy Policy

We review and update this Privacy Policy periodically to reflect changes in our services, applicable law, or best practices. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users by email.

We encourage you to revisit this page before completing any new vehicle rental booking in Kutaisi. Your continued use of kutaisicarrental.com after changes are published constitutes acceptance of the updated policy.

12. Contact for Privacy Enquiries

If you have any questions, concerns, or complaints about how we handle your personal data, or if you wish to exercise any of your data rights, please reach out to us through any of the following channels:

• Email: info@kutaisicarrental.com
• Phone: +1 (261) 847-5953
• Postal address: Kutaisi, Imereti, Georgia

If you are not satisfied with our response and are located in the European Economic Area, you have the right to lodge a complaint with the supervisory authority in your country of residence. For users based in Georgia, complaints may be directed to the Personal Data Protection Service of Georgia.