Privacy Policy

The data controller is St. Tropez Luxury Car, the brand operating sainttropezluxurycarrental.fr for luxury, sports and wedding car rental and airport delivery services in and around Saint-Tropez. For any question about this policy, about a specific enquiry, or to exercise your rights, contact us at [email protected]. This is the single point of contact for all privacy matters, whichever car from our fleet of ninety you were looking at when you got in touch.

We collect information directly from you and, to a limited extent, automatically from your browser when you visit the site.

• Enquiry form: name, email address, phone number if you choose to give it, the car you are interested in if you select one, your requested pick-up and drop-off dates, a flight number if you use the airport delivery form, and any message you write. The form also silently records the page you submitted it from and the page that referred you to us, so we understand which part of the site prompted your request.
• Direct contact: anything you tell us by email, phone or WhatsApp when you reach out to discuss a rental.
• WhatsApp click records: when you tap a WhatsApp button on the site, we log the page URL, the referring page, the language of the site and the prefilled message text in our own booking system before WhatsApp opens on your device.
• Server logs: standard technical records generated automatically by our hosting provider whenever a page is requested, consisting of IP address, time of the request, the page requested and browser information.

We use your information for clear, specific purposes, each resting on a defined legal basis.

• To answer your enquiry and prepare a quote, based on the steps you take before a contract is formed.
• To manage a confirmed booking, including arranging the vehicle and, where relevant, the driver, based on the performance of the rental contract.
• To keep our website and booking system secure and to detect misuse, based on our legitimate interest in protecting our business and our clients.
• To issue invoices and keep accounting records, based on our legal obligations under French tax and commercial law.

We do not use your information to make automated decisions that produce legal effects on you, we do not sell personal data to anyone, and we do not send marketing emails unless you have specifically asked us to.

Once a booking is confirmed in writing, we need to see and record your driving licence and identity document details at the time you collect the vehicle in Saint-Tropez. This is necessary to verify that you are legally entitled to drive the car, to complete the rental contract, and to meet our insurance and legal obligations as a rental operator. These details are collected at handover rather than at enquiry stage, because not every enquiry turns into a confirmed booking.

Access to your information is limited to people and services that genuinely need it to make your rental happen.

• Our own team, who read and respond to enquiries through an internal messaging tool connected to our booking system.
• The captain or driver who actually performs the service, when a booking includes a chauffeured car or airport delivery, so that the right person turns up at the right place and time.
• Our hosting provider, which stores the website and the booking system on our behalf.
• Google, through the Google Fonts service used to display the site's typefaces; loading a font causes your browser to contact Google's servers, which receive your IP address.
• jsDelivr, the content delivery network from which we load the intl-tel-input library used for the phone number field in our forms.

None of these third-party services sets cookies on your device for our purposes.

If you choose to tap the WhatsApp button, the conversation that follows takes place on WhatsApp, which is operated by Meta. We only record the click itself, as described above, in our own booking system. The content of the conversation is handled by WhatsApp under its own privacy policy, which we encourage you to review before you start chatting, since Meta is itself a separate controller for that exchange.

Our booking system and internal tools are used within the normal course of operating a car rental business in Saint-Tropez. Google Fonts and the jsDelivr CDN are global services that may process requests from servers located outside France; where this results in a transfer of your IP address outside the European Economic Area, it happens only because your browser contacts these services directly to load a font or a script, not because we hand your data to them.

Enquiries that do not turn into a booking are kept for twelve months from the date of the enquiry, then deleted. Records relating to confirmed bookings, including invoices and the identity details collected at handover, are kept for as long as French tax and accounting law requires us to retain them. Server logs are kept for a short period for security purposes only and are not used for any other reason.

We store enquiry and booking data in our own booking system rather than on the public website, and access is limited to the team members and drivers who need it to fulfil your rental. The site itself is a static website with no payment pages and no login area, which limits the data held on the public-facing part of the service. We review who has access to our booking system and keep technical records such as server logs only for the time needed to protect the site against misuse.

Under the GDPR and the French Data Protection Act, you have the right to access the personal data we hold about you, to have it corrected if it is inaccurate, to have it deleted, to restrict or object to certain processing, and to receive a copy of the data you provided to us in a portable format. To exercise any of these rights, write to [email protected]; we may ask you to confirm your identity before acting on your request, and we will respond within one month.

This site is addressed to adults arranging car rentals and is not intended for children. We do not knowingly collect personal data from children, and if we become aware that we have done so, we will delete it.

If you believe your data protection rights have not been respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) at www.cnil.fr, the French supervisory authority for data protection. We would, however, appreciate the chance to resolve any concern directly first, so do reach out to [email protected] before escalating.

We may update this policy as our services or our obligations evolve. The version published on sainttropezluxurycarrental.fr is always the one that applies, and we encourage you to check it before sending us your details if you want to know exactly how they will be used.