PRIVACY POLICY

How We Protect Your Data & Respect Your Privacy

Last Updated: 27 Jul 2026

Rento Pro, the cloud platform specialized in managing car rental companies, attaches the utmost importance to protecting the privacy of its users and the security of their data. This Policy has been prepared in accordance with the provisions of Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data applicable in the United Arab Emirates.

For privacy-related inquiries: info@rentopro.net

We adopt a multi-layered protection framework that includes:

Encryption of all data in transit and at rest via SSL/TLS protocols
Complete and independent isolation of each company's database (Database-per-Tenant)
Access privileges restricted exclusively to authorized employees
Automatic and regular data backups
Round-the-clock monitoring systems to detect any potential threats

In the event of any personal data breach that may compromise its privacy or confidentiality, we are committed to notifying the competent supervisory authorities, and the affected individuals where required, in accordance with the provisions of Decree-Law No. 45 of 2021.

While acknowledging that no technical framework can guarantee absolute 100% protection.

We collect and process the following categories of data:

Identity data: name, address, contact numbers, email address
Financial data: billing information and payment methods once activated; electronic payments will be processed through a licensed payment provider without full card numbers being stored on our side
Operational data: records of contracts, vehicles, customers, documents, and attachments entered into the platform
Technical data: Internet Protocol (IP) address, browser type, session duration
Communication records: conversations with the technical support team

With respect to the data of the Subscriber's customers (such as renters and their drivers) entered by the Subscriber into the platform, the Subscriber is the "Controller" of such data and bears responsibility for the lawfulness of its collection and for obtaining the necessary consents relating to it, while Rento Pro acts as its "Processor" in accordance with the Subscriber's instructions and solely for the purposes of operating the platform.

Under the UAE Personal Data Protection Law, you have the right to:

Access: obtain a full copy of your data held with us
Rectification: update or correct any inaccurate information
Erasure: request the deletion of your data within the applicable legal framework
Objection: refuse specific types of processing
Data portability: receive your data in an exportable digital format
Withdrawal: withdraw your consent to processing at any time

If you are a customer of one of the platform's subscribers (such as a renter or driver), please direct your request to the establishment you contracted with directly, in its capacity as the Controller of your data, and we will cooperate with it in fulfilling the request in accordance with our role as Processor.

To submit any request, contact us at info@rentopro.net and we will respond within 30 days.

Your data is used exclusively for:

Operating the platform and providing the contracted services
Completing financial transactions and billing
Sending technical notifications and necessary updates
Developing the platform and improving service quality
Maintaining platform security and combating unlawful use
Fulfilling legal and regulatory obligations

Authorized technical support staff may access the Subscriber's account and data, upon a support request from the Subscriber or where necessary to diagnose and resolve issues, strictly within the limits required for this purpose, subject to their obligation of full confidentiality and to access operations being logged and audited, in compliance with the provisions of Federal Decree-Law No. 45 of 2021.

Your data is not used for marketing or advertising purposes without your prior consent.

We do not sell your data or share it for marketing purposes. Sharing is limited to:

Infrastructure and operations providers: cloud hosting companies and email and messaging delivery services
Payment service providers: banks and accredited payment gateways to complete transactions
Optional integrations: the providers of integrations the Subscriber chooses to activate (such as messaging channels and official authorities' systems), and only to the extent required by the activated integration
Official authorities: where a legal request is issued in accordance with the applicable procedures
Merger cases: in the event of a transfer of company ownership, with prior notice to you

We are committed to contracting with service providers that offer an appropriate level of data protection, under agreements binding them to do so. External services that you deal with directly or choose to activate yourself are governed by their providers' own privacy policies, for which we bear no responsibility.

Platform data is hosted on secure cloud servers with global hosting service providers. The Subscriber acknowledges that this involves processing and storing data outside the United Arab Emirates, and that such transfer is carried out in accordance with the cross-border data transfer controls set out in Articles (22) and (23) of Federal Decree-Law No. 45 of 2021, being necessary for the performance of the contract concluded with the Subscriber, and under a data processing agreement with the hosting provider obliging it to implement appropriate technical and organizational protection measures, including encryption and access restriction. Acceptance of this Policy constitutes express consent thereto.

Account data: throughout the active subscription period, with a 30-day period after its expiry to export your data, after which we retain a copy for a maximum of one year for the purposes of dispute resolution and legal obligations before final deletion

Financial records: 5 years in accordance with the requirements of UAE commercial and tax legislation
Technical logs: 90 days for security and troubleshooting purposes

Upon expiry of the aforementioned periods, the data is permanently deleted or anonymized so that it can no longer be linked to its subjects.

The Subscriber's customers' data entered into the platform is treated as part of the Subscriber's account and in accordance with their instructions in their capacity as its Controller.

We use cookies to operate the platform and improve the user experience. Some of these cookies are essential for sessions and login to function, and the platform cannot operate without them; you can control non-essential cookies through your browser settings. Should we use third-party analytics tools in the future, we will update this Policy to disclose them before their activation.

Our services are intended for commercial establishments and adult individuals (18 years and above). We do not knowingly collect minors' data. If it comes to our attention that data relating to a minor has been collected without a legal basis, we will promptly delete it upon becoming aware of this.

البند كاملاً بالخمس لغات:

العربية: تُقدَّم خدمات المنصة وفق شروط الاستخدام المتفق عليها. لا نتحمل المسؤولية عن:

الأضرار غير المباشرة الناتجة عن استخدام الخدمة أو تعطلها
فقدان البيانات الناجم عن سوء الاستخدام من جانب المشترك أو مستخدميه
الاختراقات الأمنية الناجمة عن إهمال المشترك أو مستخدميه في حماية بيانات الدخول
الأضرار الناشئة عن الخدمات أو التكاملات الخارجية التي يختار المشترك تفعيلها
الأضرار المترتبة على ظروف القوة القاهرة

ولا يخلّ ما تقدّم بأي التزامات مقررة علينا بموجب القانون لا يجوز الإعفاء منها. وتخضع حدود المسؤولية وتفاصيلها لما ورد في شروط وأحكام استخدام المنصة.

English: The platform's services are provided in accordance with the agreed terms of use. We bear no responsibility for:

Indirect damages resulting from the use of the service or its interruption
Data loss caused by misuse on the part of the Subscriber or their users
Security breaches caused by the negligence of the Subscriber or their users in protecting login credentials
Damages arising from external services or integrations that the Subscriber chooses to activate
Damages resulting from force majeure circumstances

The foregoing is without prejudice to any obligations imposed on us by law from which no exemption is permitted. The limits of liability and their details are governed by the platform's Terms and Conditions of use.

If you have concerns about the handling of your data:

Contact us first at: info@rentopro.net and we will handle your complaint and respond to you within 30 days
You also have the right to file a complaint with the UAE Data Office as the supervisory authority competent for data protection in the country

We reserve the right to update this Policy when necessary. You will be informed of any material amendments by email or through an in-platform notice. Your continued use of the service after the amendments take effect constitutes acceptance of the updated Policy.

This Policy is governed by the laws of the United Arab Emirates, and any dispute arising from it shall fall under the jurisdiction of the competent courts of the Emirate of Dubai.