This template does not certify GDPR/CCPA compliance or replace jurisdiction-specific legal review. Bracketed text is intentionally unfinished.
1. Who operates ROVARO
[Insert legal entity, registered address, privacy contact and applicable jurisdictions.] This is a draft notice. Confirm the actual business details and processing activities before launch.
2. Information collected
Describe account/contact details, vehicle listings, verification documents, booking records, payment references, pickup/return evidence and support correspondence. Do not collect raw card credentials in the app.
3. Purpose and lawful basis
[Specify the purposes and applicable lawful bases for account administration, rentals, fraud prevention, legal obligations and optional marketing. Explain where consent is used and how it can be withdrawn.]
4. Providers and international transfers
[Identify the actual hosting, database, email and payment processors; their roles; processing locations; and applicable transfer safeguards. Update this section before enabling a new provider.]
5. Retention and deletion
[Publish category-specific retention periods, transaction-record obligations, backup handling and deletion-request timelines.] Account deletion may require resolution of open bookings, refunds and disputes.
6. Your privacy choices
Explain access, correction, deletion, portability and marketing opt-out routes. [Insert the process for applicable GDPR/CCPA requests, verification, response timelines, appeals and authorised agents where required.]
7. Cookies and analytics
Essential storage supports the service. Optional analytics must remain disabled until consent. See the cookie preferences page to change your choice.
8. Security and contact
Use access controls and private storage for verification documents. [Publish the privacy contact, incident communication process and supervisory-authority/consumer complaint details applicable to the business.]