SmartCar
Privacy Policy
Version 2.0 — Effective June 1, 2026
1. Who We Are
SmartCar ("the Company") operates car rental and leasing services in Israel. We are a registered "database holder" under the Israeli Privacy Protection Law, 5741-1981. Contact our Privacy Officer at office@smartcar.co.il.
2. Data We Collect, Legal Basis & Retention
| Data Type | Purpose | Legal Basis | Retention Period |
|---|---|---|---|
| Name, email, phone | Processing bookings, contact | Contract performance | 7 years (statutory) |
| ID / Passport number | Identity verification | Legal obligation | 7 years |
| Driving licence details | Eligibility verification | Contract / legitimate interest | 7 years |
| Payment token (no card numbers stored) | Charging & deposit | Contract performance | Deleted 90 days after transaction close |
| Browsing data (IP, browser) | Security, analytics | Legitimate interest | 90 days |
| Marketing email address | Offers & updates (consent only) | Consent | Until consent is withdrawn |
We do not collect biometric data, health data, racial data, political opinions, or data from persons under 18.
3. Third-Party Data Sharing
We never sell, rent or trade personal data. Data may be shared only with the following parties for the stated purposes:
| Third Party | Purpose | Country | Safeguards |
|---|---|---|---|
| Supabase Inc. | Database hosting | USA / AWS | DPA + SOC 2 Type II |
| Vercel Inc. | Website hosting, CDN, analytics | USA / Global | DPA + SOC 2 |
| EmailJS | Confirmation emails | USA | DPA |
| Insurance companies | Accident insurance coverage | Israel | Israeli law |
| Government authorities | Legal obligation only | Israel | Court order / statutory |
4. Your Rights
- Right of access: Receive a copy of data held about you within 30 days.
- Right of rectification: Have inaccurate, incomplete or misleading data corrected.
- Right to erasure: Request deletion of data where no statutory retention obligation applies.
- Right to restriction: Restrict processing while a complaint is under review.
- Right to portability: Receive your data in machine-readable format (CSV/JSON).
- Right to object: Object to direct marketing processing — no conditions apply.
To exercise any right, send a written request to office@smartcar.co.il. We will respond within 30 days.
5. Security
- All communications are encrypted using TLS 1.3.
- No payment card numbers are stored on our servers — handled directly by our payment processor.
- Data access is limited to authorised personnel on a need-to-know basis.
- In case of a material security breach, we will notify affected individuals and the Israeli Privacy Protection Authority within 72 hours of discovery.
6. Contact — Privacy Officer
- 📧 office@smartcar.co.il
- 📞 09-9509757
- 📍 122 Ramat Yam St, Herzliya 46851, Israel