Privacy Policy

1. Who Uprising Ltd Are

Uprising Ltd (Company No. HE 443754) is a car rental company based in Cyprus. For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Uprising Ltd are the Data Controller for the personal data Uprising Ltd collect and process.

Our contact details are:

• Company Name: Uprising Ltd
• Registered Address: Archiepiskopou Makariou III, 107 Flat/Office 103, Konia, 8300, Paphos, Cyprus
• Telephone: +357 26322888
• Email: contact@uprisingcarrental.com

Uprising Ltd is committed to protecting your privacy and handling your personal data in a transparent, lawful, and secure manner.

2. What Personal Data Uprising Ltd Collect

To provide you with our car rental services and meet our legal obligations, Uprising Ltd may collect and process the following categories of personal data:

• Identity and Contact Information: Full name, date of birth, residential address, email address, and phone number.
• Identification Documents: Passport or national ID card number, and driving license details (including number and issue date).
• Rental and Transaction Information: Booking history, rental contracts, vehicle usage details, pick-up/drop-off locations, payment information (credit/debit card details), and transaction records.
• Vehicle-Related Information: Information obtained from GPS tracking systems (where applicable, see Section 3 below) and vehicle accident reports.
• Technical Data: IP address, browser type, device information, and cookies when you visit our website.
• Special Category Data: Uprising Ltd may collect information about health conditions if you inform us of any special requirements, strictly on a voluntary basis.

3. How and Why, Uprising Ltd Use Your Data

Uprising Ltd process your personal data only for specified, explicit, and legitimate purposes. Uprising Ltd relies on the following legal bases for processing:

• Performance of a Contract: To process your rental booking, verify your identity and driving eligibility, manage your rental agreement, and provide customer support.
• Compliance with Legal Obligations: To fulfil obligations under Cypriot and EU law, including accounting and tax requirements (retaining contracts for up to 7 years for tax purposes), insurance requirements, and responding to lawful requests from government or regulatory authorities.
• Legitimate Interests: To protect our business interests, such as fraud prevention, debt collection, enforcing the terms of our rental contract, ensuring the safety and security of our vehicles (including the use of GPS tracking systems for vehicle theft prevention), and to improve our services. Uprising Ltd only relies on legitimate interests where they are not overridden by your fundamental rights.
• Consent: To send you marketing communications about our offers and promotions. You can withdraw this consent at any time.

GPS & Monitoring: In some vehicles, Uprising Ltd may have a GPS tracking system installed. Uprising Ltd will inform you in writing about this feature before you rent a vehicle. The system is typically activated only in cases of theft, to protect our legitimate business interests, and you will be notified accordingly.

4. Who Uprising Ltd Share Your Data With

Uprising Ltd does not sell your personal data. Uprising Ltd may share your data with trusted third parties to operate our business and provide services to you. These recipients include:

• Insurance Providers: To cover you and our vehicles under our insurance policies.
• Payment Processors: To securely handle your payments.
• Professional Advisors: Accountants, legal advisors, and IT service providers who assist us in running our business and are bound by confidentiality agreements.
• Law Enforcement and Public Authorities: When required by law or to protect our legal rights and property.

All third parties with whom Uprising Ltd share data are required to process it securely and in accordance with the GDPR.

5. Data Transfers to Third Countries

Uprising Ltd aim to store and process your data within the European Economic Area (EEA). If it becomes necessary to transfer your personal data to a third country outside the EEA, Uprising Ltd will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data.

6. Data Security

Uprising Ltd implements appropriate technical and organisational measures to protect your personal data against accidental loss, alteration, unauthorised access, or unlawful processing. This includes the use of secure servers, encryption of data in transit (TLS/SSL), and strict access controls.

7. Data Retention

Uprising Ltd retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

• Rental Agreements & Transactions: Retained for 7 years to comply with Cypriot tax legislation (for audit purposes).
• Marketing Data: Retained for up to 3 years after your last interaction with us or until you withdraw your consent.
• Complaints & Disputes: Data related to complaints or potential litigation will be retained for the duration of the dispute and for a period after its resolution.

8. Your Rights

Under the GDPR, you have the following rights concerning your personal data:

• Right of Access: To obtain confirmation that Uprising Ltd process your data and request a copy of it.
• Right to Rectification: To have inaccurate or incomplete data corrected.
• Right to Erasure (“Right to be Forgotten”): To request the deletion of your personal data, subject to certain legal exceptions (e.g., tax retention requirements).
• Right to Restrict Processing: To restrict how Uprising Ltd process your data in certain circumstances.
• Right to Data Portability: To receive your data in a structured, machine-readable format and request that it be transferred to another controller.
• Right to Object: To object to processing based on our legitimate interests.
• Right to Withdraw Consent: To withdraw your consent for marketing communications at any time.
• Right to Lodge a Complaint: To lodge a complaint with the Cyprus Commissioner for Personal Data Protection if you believe your rights have been infringed. You can contact them at: commissioner@dataprotection.gov.cy.

To exercise any of these rights, please contact us at: contact@uprisingcarrental.com

9. Changes to This Privacy Policy

Uprising Ltd may update this Privacy Policy periodically. Any changes will be posted on this page with an updated “Last Updated” date. Uprising Ltd encourages you to review this policy regularly.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or how Uprising Ltd handle your data, please do not hesitate to contact us: