Can I Share My Passport Online? Remote ID Verification

Most ALKA clients arrange their rental before they fly and verify their identity remotely, so the first thing many of them send us is a passport. Hesitating over that is sensible. This guide explains, citing the Privacy Policy or rental terms each time, why the documents are requested, where they go, who sees them, how long they are kept and what you can ask us to do. Which documents apply to you is in the documents guide; the booking sequence is in how to rent a luxury car in Dubai before you arrive.

Why does a car rental company ask for your passport before you arrive?

Two reasons. The first is ALKA's own rental condition: section 2 of the rental terms requires every renter and driver to pass identity verification before handover, because renting a high value vehicle requires us to establish that you are who you say you are and that you hold a valid entitlement to drive in the UAE (Privacy Policy, section 5). The second is legal: section 4 of the Privacy Policy records the basis as a legal obligation and a legitimate interest in preventing fraud, and section 16 of the rental terms adds that where an authority requires the identity of the driver at a given time, we are obliged to provide it. There is no office visit: you upload the documents in advance and present the originals at handover.

What happens to your passport after you upload it?

Section 5 of the Privacy Policy describes the check. A specialist verification provider examines the documents you upload; the check may include an automated comparison of your selfie against your document photograph and automated document authenticity tests. A negative automated result is always reviewed by a member of our team before a booking is refused, and you may ask us to review any decision in writing. The provider acts on ALKA's documented instructions under a written data processing agreement (section 6); ALKA Investment - FZCO remains the controller.

Who can see your documents, and who cannot?

Section 6 of the Privacy Policy lists the categories of recipient, on the principle that data is shared only where necessary. For identity documents these are the verification provider, the partner fleet operator supplying your vehicle, insurers, loss adjusters and repairers after damage or an accident, and government and enforcement bodies where the law requires it. Who cannot see them is just as clear: ALKA does not sell personal data and does not share it for third-party advertising. Section 7 adds that customer data is stored in facilities we control, and that any transfer outside the UAE rests on an adequacy finding, a contract with PDPL-equivalent protections, or another lawful ground.

How is the data protected?

Section 9 names the measures: encryption in transit and at rest for identity documents, role based access control with least privilege, multi factor authentication for staff accounts, audit logging of access to customer records, segregated production environments, and regular review of our providers. It is also honest about limits: no system can be guaranteed absolutely secure, and a breach likely to prejudice your privacy is notified to the competent authority and, where the law requires, to you. Payment data is held more narrowly still (section 3): ALKA never receives or stores your full card number or security code.

How long are identity documents kept?

Section 8 sets the rule: personal data is kept only as long as we need it, then deleted or irreversibly anonymised. For identity and licence documents and verification results, the stated retention is the customer relationship plus the period required to answer regulatory, insurance and enforcement queries. Where a legal claim, audit or investigation is open, the records are kept until it is resolved. The policy gives no fixed number of months, so none is quoted here.

What are your rights over the data you shared?

Section 10 lists your rights under the PDPL, subject to its conditions. You can:

• be informed how your data is processed and obtain a copy of it;
• have inaccurate or incomplete data corrected;
• request deletion of data we no longer have a lawful reason to keep;
• restrict or object to certain processing, including profiling used for risk scoring;
• receive the data you gave us in a machine readable format, transmitted to another controller where feasible;
• withdraw consent at any time where processing is based on consent;
• object to direct marketing at any time, with no cost or explanation required.

To exercise a right, write to business@alkarentacar.com from the address registered on your booking, or use the privacy tools in your ALKA account. We may ask for proof of identity first, and we answer within 30 days of a complete request. Records that tax, traffic or insurance law requires us to retain, or that a legal claim needs, cannot be deleted. You may also complain to the UAE Data Office.

How do you tell a genuine verification request from a fake one?

A passport scan is valuable to a fraudster, so check before you answer. The published facts are your reference point: ALKA's canonical domain is alkarentacar.com, reservations are handled at reservations@alkarentacar.com, and alkarent.com redirects there. ALKA never asks for your full card number or security code, and the Privacy Policy asks you not to send health, biometric or similar information unless we specifically request it.

What if verification fails or the documents do not match?

Section 13 of the rental terms allows ALKA to cancel a booking where identity verification fails, where the deposit cannot be secured, where the documents presented do not match the booking, or where we reasonably suspect fraud or a risk to the vehicle or people. Without fault on your part, amounts paid are refunded. Check that the name on passport, licence and booking agrees before you upload, and send any question through our contact page.