Privacy Policy

ALKA Investment - FZCO (trading as ALKA Rent A Car), licence No. 70829 issued by IFZA, Dubai, registered at IFZA Business Park, DDP A2, Dubai Silicon Oasis, Dubai, United Arab Emirates, is the controller of the personal data described in this policy.

You can reach us about any privacy matter at business@alkarentacar.com or by writing to ALKA Investment - FZCO, IFZA Business Park, DDP A2, Dubai Silicon Oasis, Dubai, United Arab Emirates.

Where a booking is fulfilled by a licensed partner fleet operator, that operator processes certain data as an independent controller for its own regulatory duties (vehicle registration, traffic authorities, insurance). We identify the operator in your booking confirmation.

This policy applies to alkarentacar.com, to our booking, verification, payment and customer service processes, and to all communication channels we operate (email, telephone, WhatsApp, SMS).

It does not apply to third-party websites we link to. Those services publish their own privacy notices and we are not responsible for them.

We collect only what we need to quote, verify, rent, invoice and support. In practice this means:

• Identity and contact data: full name, date of birth, nationality, email address, telephone number, correspondence address, preferred language.
• Identity documents and verification data: passport, visa or residence permit, Emirates ID, national driving licence and International Driving Permit, together with the verification result and any document images or selfie captured during the identity check.
• Booking and rental data: vehicle selected, pickup and return dates and locations, additional drivers, mileage, fuel level, handover and return inspection records and photographs, extensions and returns.
• Payment data: billing details, transaction and refund records, the security deposit hold, the last four digits and expiry of the card and its payment token. We never receive or store your full card number or security code; those go directly to the payment provider.
• Compliance data: traffic fines, Salik toll crossings, accident and damage records, insurance claims and correspondence with authorities.
• Communication data: your messages to us and our replies, call and chat records, service notes and complaint history.
• Technical data: IP address, device and browser type, approximate location derived from IP, pages viewed and, where you have consented, analytics identifiers.
• Preference data: marketing consents, language and communication channel choices.

We do not seek special categories of data. Please do not send us health, biometric, religious or similar information unless we specifically ask for it in connection with an insurance or accident matter.

Where we rely on consent you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal, and without affecting processing we carry out on another basis.

Renting a high value vehicle requires us to establish that you are who you say you are and that you hold a valid entitlement to drive in the United Arab Emirates. We therefore ask you to upload identity and licence documents before handover and we use a specialist verification provider to check them.

The check may include automated comparison of your selfie against your document photograph and automated document authenticity tests. A negative automated result is always reviewed by a member of our team before a booking is refused, and you may ask us to review any decision by writing to us.

Documents are stored encrypted, are visible only to authorised staff who need them, and are never published, sold or used for marketing.

We share personal data only where it is necessary, and only with the categories of recipient listed below.

• Partner fleet operators supplying the vehicle you booked, so that they can register the rental, insure the vehicle and complete the handover.
• Payment service providers, for authorisation, capture, refunds and the security deposit hold.
• The identity verification provider that performs the document and biometric checks described above.
• Communication providers that deliver our email, SMS and messaging notifications.
• Insurers, loss adjusters and repairers, in connection with damage or an accident.
• Government and enforcement bodies, including the Roads and Transport Authority, Dubai Police, Salik and the Federal Tax Authority, where the law requires it or where a fine, toll or investigation concerns your rental.
• Professional advisers such as lawyers, auditors and debt recovery agents, where necessary to establish, exercise or defend legal claims.
• A buyer or successor, if our business or part of it is transferred, subject to the same protections.

Our service providers act on documented instructions under a written data processing agreement. We do not sell personal data and we do not share it for third-party advertising.

Our systems are operated so that customer data is stored in facilities we control. Some service providers may process data outside the United Arab Emirates.

Where that happens we transfer data only to a country recognised as providing an adequate level of protection, or under a contract that imposes protections equivalent to those required by the PDPL, or where another lawful ground under the PDPL applies. You may ask us for details of the safeguards used for a specific transfer.

We keep personal data only as long as we need it, then delete it or irreversibly anonymise it.

Where a legal claim, audit or investigation is open we keep the relevant records until it is finally resolved.

We apply organisational and technical measures appropriate to the sensitivity of the data: encryption in transit and at rest for identity documents, role based access control with least privilege, multi factor authentication for staff accounts, audit logging of access to customer records, segregated production environments, and regular review of our providers.

No system can be guaranteed absolutely secure. If a personal data breach occurs that is likely to prejudice your privacy or confidentiality, we will notify the competent authority and, where the law requires, you, without undue delay.

Subject to the conditions and exceptions in the PDPL, you have the right to:

• be informed how your data is processed and to obtain a copy of it;
• have inaccurate or incomplete data corrected;
• request deletion of data we no longer have a lawful reason to keep;
• restrict or object to certain processing, including profiling used for risk scoring;
• receive data you gave us in a structured, machine readable format and have it transmitted to another controller where technically feasible;
• withdraw consent at any time where processing is based on consent;
• object to direct marketing at any time, with no cost or explanation required.

To exercise a right, write to business@alkarentacar.com from the address registered on your booking, or use the privacy tools in your ALKA account. We may ask for proof of identity before acting, to make sure we do not disclose your data to someone else.

We answer within 30 days of receiving a complete request, or sooner where the law requires it. If a request is manifestly unfounded or excessive we may decline it and will explain why.

Some rights are limited. For example, we cannot delete records we are required by tax, traffic or insurance law to retain, and we cannot delete records needed to establish, exercise or defend a legal claim.

We use a small number of cookies. Anything that is not strictly necessary loads only after you consent through the cookie banner. Full details, including a table of every cookie we set, are in our Cookie Policy.

Our services are for adults. The minimum age to rent is 23 and certain vehicle classes require a higher minimum age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy to reflect changes in our services or in the law. The version and effective date are shown at the top of this page. If a change materially affects how we use your data we will tell you before it takes effect, by email or through a notice on the website.

Privacy enquiries, requests and complaints: business@alkarentacar.com, or by post to ALKA Investment - FZCO, IFZA Business Park, DDP A2, Dubai Silicon Oasis, Dubai, United Arab Emirates.

We would like the chance to resolve any concern first. You also have the right to complain to the UAE Data Office, the federal authority responsible for personal data protection.