Legal

Privacy notice

Version 2026.1 · This notice explains what CaRR processes, why, and your rights.

What CaRR is

CaRR (Car Rental Risk & Reputation) is a rental-history and risk-management service used by participating vehicle rental companies to verify customers and assess vehicle-rental risk.

Information we process

Identity details: name, date of birth, NRC, passport and driving licence numbers, phone number and email address, provided by a rental company with your consent. Identity numbers are encrypted at rest.
Rental events: rentals, pick-up and return times, vehicle inspections, amounts owed to rental companies, and incidents such as vehicle damage, accidents or non-return.
Consent and audit records: when, why and by whom a check was performed.

Why we process it

To help rental companies verify who they are renting to and assess vehicle-rental risk, to maintain accurate rental records, and to operate the dispute process. We do not use this information for marketing, and we do not sell it.

Who can see it

The rental company you rent from sees the records it created. Other participating providers — only with your consent at the time of a check — see a privacy-filtered summary of your rental history and CaRR score. They do not see other companies' vehicle registrations, amounts, staff details or incident descriptions.

Fairness safeguards

Incident reports do not affect your score until reviewed and confirmed by the reporting company.
Allegations such as fraud, false information or theft require supporting evidence and independent review.
Records you dispute are clearly marked and excluded from scoring until the dispute is decided.

Your rights

You can view the records held about you and dispute anything you believe is inaccurate through the CaRR customer portal. You may also contact the rental company directly, or CaRR support, to request correction.

Retention & security

Records are retained only as long as needed for rental-risk purposes and legal obligations. Access is role-based, logged in a tamper-evident audit trail, and protected by encryption, rate limiting and secure file handling.