Privacy Policy
1. Data controller. Polo - Aluguer de Automóveis, Lda. (tax number 501788913), with registered offices at Rossio Grande, Lote B, Loja C, 8500 Alvor, Portimão, Portugal. For any question about personal data, or to exercise your rights, write to sara@polorentacar.com or call +351 964 017 703.
2. Data we collect. When you book, we collect identification and contact data (name, email, phone), booking data (dates, locations, driver age, flight number and accommodation address, where applicable) and, if you choose to speed up pick-up, the identification document number, driving licence and address.
3. Purposes. We use the data exclusively to manage the booking and the rental contract, prepare the contract before pick-up, send communications related to the booking and comply with legal and tax obligations. The legal basis is the performance of the contract and compliance with legal obligations.
4. Payments. Online payments are processed by Stripe. Card details are entered directly with Stripe and never pass through our servers.
5. Processors. We use providers that process data on our behalf, with adequate contractual safeguards: site hosting (Vercel), database (Supabase), payments (Stripe) and email delivery. We do not sell or share data with third parties for marketing. Some of these providers may process data outside the European Economic Area; where that happens, the transfer relies on standard contractual clauses approved by the European Commission or on an adequacy decision.
6. Retention. Contract data is kept for the applicable legal periods. The optional fast pick-up data (identification document, driving licence and address) is deleted automatically 30 days after the vehicle is returned.
7. Your rights. You can request access, rectification, erasure, restriction or portability of your data, or object to processing, through the contacts on this site. You also have the right to lodge a complaint with the Portuguese supervisory authority, CNPD (www.cnpd.pt).
8. Cookies. This site uses no advertising, analytics or tracking cookies, and does not share browsing data with third parties. We use only two strictly necessary cookies: a language preference cookie (NEXT_LOCALE), which stores the language you chose, and a session cookie in the administration area, which only exists for those who sign in to the backoffice. Because they are strictly necessary to provide the service you request, these cookies are exempt from prior consent under article 5(3) of Portuguese Law 41/2004 of 18 August, which is why this site shows no cookie consent banner. Should analytics cookies be introduced, this policy will be updated and consent will be requested before any such cookie is set.
9. Updates. This policy may be updated; the version in force is the one published on this page. Version of 5 September 2026.
