Privacy Policy

1. Who we are

Empire Cars (“we”, “us”, “our”) is a car rental company based in Sosua, Dominican Republic. We operate the website empirerentcar.com and the associated booking platform. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

For any privacy-related questions, please contact us at [email protected].

2. Data we collect

When you make a reservation or interact with our platform, we collect:

• Identity data: first name, last name
• Contact data: email address, phone number
• Booking data: vehicle selected, pick-up and return dates, rental duration, drop-off location preference
• Payment data: payment is processed entirely by Stripe — we never store your card number or CVV. We retain only the Stripe session ID for record-keeping.
• Usage data: pages visited, browser type, and IP address (via standard server logs)

3. How we use your data

We use your personal data to:

• Process and manage your reservation
• Send booking confirmation and receipt emails
• Contact you 24 hours before pickup to coordinate handoff details
• Respond to customer service enquiries
• Improve the website and booking experience
• Comply with legal obligations

We do not sell your personal data to third parties or use it for advertising.

4. Third-party processors

We share data only with the processors necessary to deliver our service:

• Stripe (stripe.com) — secure payment processing. Stripe’s privacy policy is available at stripe.com/privacy.
• Resend (resend.com) — transactional email delivery for booking confirmations. Resend’s privacy policy is at resend.com/legal/privacy-policy.

5. Data retention

We retain reservation records (including personal data) for 3 years from the date of the booking. This period allows us to address disputes, comply with accounting requirements, and respond to legal requests. After this period, records are permanently deleted.

6. Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — request that we delete your data, subject to legal retention obligations
• Objection — object to processing of your data in certain circumstances

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. Security

We use industry-standard technical measures to protect your data, including HTTPS encryption for all data in transit and secure, access-controlled database storage. Payment data is handled exclusively by Stripe and never passes through our servers.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of our service after changes constitutes acceptance of the updated policy.