Privacy notice

Usage statistics

With your analytics consent, we record page and listing viewing times, estimated active viewing duration, language, device class and approximate country from Cloudflare IP geolocation. We use a random browser identifier; new views while signed in are linked to your account. Only administrators can see these records and per-user history to improve the service. Analytics does not store IP addresses, precise locations, URL query parameters, message content or passwords.

Analytics is off by default and relies on consent. Refusing does not limit the service. Withdraw consent in Cookie settings to stop collection and remove viewing history associated with that browser identifier. Contact us to erase records from other devices or previously expired identifiers. Individual viewing and sign-in events are retained for up to 180 days; the cleanup job runs at least hourly.

The server log of successful sign-ins retains the account link, time, account role, sign-in method, approximate country and device class. It supports account security and authentication reliability on the basis of legitimate interests. Administrators can see sign-in history and summaries. Reading a session is not a new sign-in; this log is not used for ad targeting.

Customer support

When you contact support, we store your message, email, language and submission time, plus the account link and name if you are signed in. The message and administrator reply are stored encrypted and are visible only to administrators. An administrator receives a new-request email notification and replies to your email address. To limit abuse, we use a one-way identifier calculated from the connection IP address. An email entered by a visitor is not treated as verified identity.

Messaging

Registered users can message owners and reply in YourCamper messages. Messages are visible only to conversation participants and are stored encrypted. Before full booking payment, detected phone numbers, email addresses and contact links are hidden in messages. New-message email notifications contain neither message content nor the sender’s contact details.

Which data do we use?

After a completed rental, participants can optionally leave a star rating and comment. The owner’s average star rating is public; comments are visible to the other participant after they submit their own review. Please omit contact details and sensitive personal information.

For accounts, we use email, name, account type, language and sign-in data. Email/password registration stores a password hash, not a readable password. Google sign-in supplies permitted profile information and technical identifiers.

For owners, we use contact and address details, personal or business profile information, vehicles, listings, photos, rental terms and the Stripe account identifier. To check account details match, we store the individual or company representative name supplied to Stripe, company name and the check result. For renters, we use contact details and user-confirmed licence information with a front photo.

Bookings record dates, participants, price breakdowns, terms, messages to owners, payments and cancellation states. Pickup and return record reports, photos, comments, readings and confirmations. Sessions, IP addresses, technical logs and audit records support security.

Purposes and legal bases

We process information necessary for accounts, offering vehicles, bookings, payments, service emails and handover to perform a contract or take requested pre-contractual steps (GDPR Article 6(1)(b)). Licence data prepares checks of driver details and suitable categories; reading a photo does not establish authenticity.

Accounting and applicable statutory duties rely on legal obligation (Article 6(1)(c)). Security, abuse prevention, support and defending claims rely on justified legitimate interests (point f), taking your rights and data minimisation into account.

Optional device preferences rely on your consent (point a), which you can withdraw in Cookie settings. Registration is not tied to marketing consent and does not add you to a marketing list. Reading this notice is not blanket consent to every use of your data.

Who can see the data?

Published listing details, photos, the owner’s public name, account verification badge, average rating and completed vehicle rental count are public. Maps show approximate locations, not private pickup addresses. Do not put personal details or your home address in public descriptions or photos.

With a request, owners see the renter’s confirmed name, calculated age, licence categories, average star rating, review count and completed rental count. The renter rating summary is also included in owner request and booking confirmation emails; it is not a public profile. After a successful initial payment, owners also see renter email and phone. Renters receive owner contact details and the exact pickup location only after the full rental price is paid; these details are also emailed. Opening the Google Maps navigation link shares the pickup address or map coordinates with Google. Owners are not shown the licence photo, document number, personal identifier or exact birth date.

Reports and evidence are available to rental participants and, where needed for operating the service, authorised administrators. Support mode is labelled and audited. Providers receive data required for their tasks: Cloudflare (web traffic and R2 file storage), Stripe (payments and owner verification), Brevo (service emails) and Google (Google account sign-in).

Opening the map loads tiles from OpenStreetMap, which receives technical connection information. City or permitted approximate location queries use Photon; the private pickup address is not sent. Browser location is used only with location permission; your connection’s IP location can also suggest a country.

Account addresses and vehicle pickup locations are independent. Each vehicle has its own address and optional exact map point. Searching an address sends the entered text and selected country to Geoapify; marking a point may send its coordinates when you request address lookup. Map tiles also reveal the viewed map area to the map provider. Exact pickup details are shared with the renter only after full payment.

Providers may process data outside the European Economic Area. Transfers require appropriate protection, such as a European Commission adequacy decision or standard contractual clauses and necessary supplementary measures. Ask our contact for details about providers and safeguards. Stripe and sign-in services may also act as independent controllers for their own services.

How long is data kept?

Account and profile data is kept for account use and service provision. Closing an account requires assessing what can be erased and what remains necessary for an ongoing rental, payment, dispute or legal duty. Data need not be retained simply because it was once collected.

The necessity of licence photos and details is assessed against driver checks and related active bookings. You can remove your photo in the account licence section; this also removes saved licence details, and you may need to resubmit them for another booking. It does not automatically erase historical rental evidence or legally required records.

Booking, report and payment retention takes account of contract performance, unresolved claims and limitation periods. Accounting source documents are kept for seven years from the relevant financial year’s end as required by law. This period does not automatically apply to every photo or account detail.

Cookie lifetimes appear on the Cookies page. Erasure requests also cover related files; backups and lawfully retained evidence can take longer to remove fully. Where information must remain, we explain why and the applicable period.

Your rights and contacting us

You can request a copy, correction, erasure, restriction or, where applicable, portability of your data. You may object to legitimate-interest processing and withdraw consent without affecting the lawfulness of earlier processing.

Email [email protected] from your account email. We request only necessary information to establish identity; do not email licence copies or personal identifiers. We normally respond within one month. If a complex request requires an extension, we explain it during the first month.

You can complain to the Estonian Data Protection Inspectorate (aki.ee) or your local data protection authority. OCR and photo quality checks provide assistance; you confirm licence details and the owner checks the original at pickup. We do not use licence photos to train AI models.

Privacy notice · Cookies · Data deletion

Estonian Data Protection Inspectorate