Privacy Policy

The controller is Super Car Drive Club, the brand under which the website supercardriveclub.com is operated. Through this single site we bring together a network of local rental partners in 39 cities, so that travellers can compare luxury, sports and supercar options across several destinations.

All privacy questions, booking questions and requests concerning your data can be sent to [email protected]. We do not publish a company registration number, VAT number or street address, and this email address is the channel through which we deal with every request.

Most of the data we hold comes directly from you. We collect it in the following ways:

• Enquiry form: your name, email address, telephone number (optional), the car you chose (optional), start and finish location, pick-up and drop-off dates, your flight number (airport delivery form only) and any free-text message you write. The form also transmits the URL of the page you were on and the referring page.
• Email and telephone: the content of your messages, your contact details and any information you choose to share with us.
• WhatsApp button clicks: when you tap a WhatsApp button, we record the page URL, the referrer, your language and the prefilled message text in our booking system, and then WhatsApp opens.
• Visit measurement: pages viewed, time on page, referring website, campaign parameters in the link (UTM or ad click identifier), device type, browser, operating system, screen size, browser language and the country derived from your IP address. The IP address itself is not stored.
• Server logs: the IP address, time, requested page and browser, recorded by our hosting provider.

When you send an enquiry or tap a WhatsApp or telephone link, that action is linked to your visit, so that we know which channel brought the request to us.

We use your enquiry details only to answer your request and to manage the booking that may follow. Your enquiry is stored in our own booking system and forwarded to our team through an internal messaging tool so that we can reply quickly. We then send you a written quote, and any booking is confirmed in writing. The legal basis is Article 6(1)(b) GDPR: steps taken at your request before entering into a contract, and the performance of that contract once it exists.

We rely on our legitimate interest under Article 6(1)(f) GDPR for three purposes: keeping the website and our systems secure through server logs, delivering the pages you request, and understanding which channels bring us enquiries through our own visit measurement. We have weighed these interests against your rights; visit measurement uses no third-party trackers, sets no cookies and does not store your IP address. You may object at any time, as described below.

Where a booking is confirmed, we keep booking and accounting records because tax and accounting law obliges us to. The legal basis is Article 6(1)(c) GDPR.

We do not sell personal data, we make no automated decisions about you, and we send no marketing emails unless you ask us to.

The website does not ask for your driving licence or identity document, and bookings are not paid online. Once a rental is confirmed, however, we also need driving-licence and ID details at handover. We need them to verify who is collecting the car, to confirm that the driver is entitled to drive the category of vehicle rented, and to complete the rental contract. This follows from the nature of renting a high-value vehicle and, in many cases, from legal obligations that apply to rental businesses in the country of rental.

The handover takes place with the local partner in your chosen city, and these details are used for that rental only. The legal bases are Article 6(1)(b) GDPR (performance of the rental contract) and, where the law of the country of rental requires the check, Article 6(1)(c) GDPR.

Your data is received only by those who need it for the purposes above:

• Our team, who read and answer enquiries, including through our internal messaging tool.
• The local partner in the chosen city, which receives the enquiry details needed to perform the service once a booking is confirmed. Enquiries that do not lead to a booking are not passed to a partner.
• Our hosting provider, which serves the static website and keeps standard server logs.
• The third-party services the site loads, listed in the next section, which receive your IP address when your browser requests their files.
• WhatsApp and Meta, for conversations you start by tapping a WhatsApp button. That conversation runs on WhatsApp and is governed by WhatsApp's own privacy policy, which applies in addition to this one.

We may also disclose data where a court, tax authority or other public body lawfully requires it.

The site itself sets no cookies, and no third-party analytics, advertising or social-media trackers are installed. Your browser does, however, request a few resources from other providers, each of which receives your IP address in the process and none of which sets cookies for us:

• Web fonts from Google Fonts, where Google receives your IP address.
• The intl-tel-input library, used by the phone-number field in enquiry forms, loaded from the jsDelivr CDN.
• The Leaflet library, loaded from unpkg.com, and map tiles from CARTO based on OpenStreetMap data, for the destinations map on the homepage.

The site also uses your browser's storage:

• One local-storage entry remembers that you closed the cookie notice.
• One session-storage entry remembers which car you clicked so that the enquiry form can be prefilled. It is deleted when you close the tab or send the form.
• One local-storage entry holds random visitor and session identifiers for visit measurement. It expires 30 days after your last visit, and you can clear it in your browser at any time.

None of these entries contains contact details.

In some cases, yes. Our network includes partners in the United Arab Emirates, and if you confirm a rental there, the enquiry details needed for that rental are shared with the local partner in that country. This transfer is necessary for the performance of the contract you have asked us to conclude, which is permitted by Article 49(1)(b) GDPR. Likewise, Switzerland and Monaco are served through local partners, and their handling of your data is limited to the rental concerned.

The providers named in this policy, including Google, jsDelivr, unpkg.com, CARTO and WhatsApp/Meta, may process data outside the European Economic Area. Where they do, the transfer depends on the safeguards required by Chapter V GDPR, such as an adequacy decision or standard contractual clauses. We do not name our hosting provider or its country in this policy; you may ask us about it at [email protected].

Enquiries that do not lead to a booking are deleted after 12 months. A visit record that has been linked to such an enquiry is deleted together with it.

Booking records are kept for as long as tax and accounting law requires, and are then deleted. Server logs are kept for security purposes for a short period only. The visitor and session identifiers held in your browser expire 30 days after your last visit, and the session entry for prefilling the form disappears when the tab is closed or the form is sent.

WhatsApp conversations are retained by WhatsApp according to its own policy and settings, not by this website.

Access to enquiries and booking records is limited to the members of our team who handle them. Partners receive only the details needed to perform the rental in their city. Because bookings are not paid online, the site does not collect payment card details. The website is a static site, which means it has no user accounts and no customer database exposed to visitors, and our hosting provider keeps server logs only for a short period for security purposes.

No method of transmission or storage is entirely free of risk. If a personal data breach were likely to result in a risk to your rights and freedoms, we would notify the competent supervisory authority and, where required by Articles 33 and 34 GDPR, you as well.

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• rectification of inaccurate or incomplete data;
• erasure of your data where there is no longer a reason to keep it;
• restriction of processing in the cases set out in Article 18 GDPR;
• data portability for data you provided to us and which we process under a contract or steps preceding one;
• object to processing based on our legitimate interest, on grounds relating to your situation.

To exercise any of these rights, write to [email protected]. We answer within one month, and we may ask you to confirm your identity first so that your data is not disclosed to someone else. Because we use no automated decision-making, there is no such decision to contest.

You also have the right to lodge a complaint with the data protection authority of the EU country where you live. You may equally complain to the authority of the country where you work or where the alleged infringement took place. We would nevertheless welcome the chance to resolve your concern first.

Our rental services are intended for adults who hold a valid driving licence. We do not knowingly collect personal data from children. If you believe a child has sent us an enquiry, please write to [email protected] and we will delete it.

If we change how we process personal data, we will amend this page so that it always reflects our current practice. Where a change materially affects how your data is used, we will make that clear on this page.