Privacy Policy

AURA CAR HIRE PRIVACY POLICY

Welcome to Aura Car Hire and our website at www.auracarhire.co.uk.
At Aura Car Hire, we take the protection of your data very seriously, and below we explain what data we collect when you use our website and services and how it is used.

General Information

What Law Applies?

Our use of your Personal Data is subject to both the UK’s Data Protection Act (the “DPA”) and the EU's General Data Protection Regulation (the “GDPR”), and of course we process your Personal Data accordingly.

What Is Personal Data?

Personal Data is any information relating to personal or material circumstances that relates to an individual. This may include a name, date of birth, e-mail address, postal address, or telephone number, but also online identifiers such as IP addresses or device IDs.

What Is Processing?

"Processing" means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means. The term is broad and covers virtually any handling of data.

Who Is Responsible For Data Processing?

The responsible party within the meaning of the DPA and the GDPR is Aura Car Hire of Bedford Road, Northampton, NN4 7YF, UK (“Aura Car Hire”, “we”, “us”, or “our”).

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us using our Contact Form,

020 7046 6591
info@auracarhire.co.uk

What Are The Legal Bases Of Processing?

In accordance with the DPA and the GDPR, we must have at least one of the following legal bases to process your Personal Data:

For The Fulfilment Of Contractual Obligations:
The purposes of the data processing are primarily based on the service we provide.
Within The Framework Of Our Legitimate Interests:
Where necessary, we process your data beyond the actual performance of the contract to safeguard legitimate interests of us or third parties. Examples include:
Ensuring IT security and operations
Business management and development of our services
Defence against third-party claims and enforcement of our own claims
Based On Your Consent:
Where you have given us consent to process personal data for specific purposes.

Is There An Obligation For Me To Provide Data?

Within the scope of our business relationship, you are only required to provide personal data that is necessary for the establishment, implementation, and termination of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or will no longer be able to perform an existing contract and may have to terminate it.

Data We Collect Automatically

Log Data

Each time you visit our website, our system automatically records certain data from the visiting device and stores it in a log file.

This includes:

Name of the retrieved file
Date and time of the visit
Amount of data transferred
Message about successful retrieval
Browser type and version used
IP address
Operating system
Internet service provider
Referring website and visited pages

The legal basis for processing is our legitimate interest.

Hosting

Our hosting services are provided by 20i Ltd, which processes inventory data, contact data, content data, usage data, meta data, and communication data of visitors on our behalf, based on legitimate interest in an efficient and secure provision of the website.

Use Of Cookies

We use cookies to enhance functionality and analyse usage.

Essential Cookies: Necessary for basic website operation.
Non-essential Cookies: Used for analytics or advertising, requiring your consent.

Consent is obtained when you first visit our website through our Cookie Consent Management Tool.

For more information, see our Cookie Policy.

Cookie Consent

When you enter our website, we collect the following Personal Data via our consent tool:

Your consent(s) or revocation of consent(s)
IP address
Browser and device information
Time of visit

Processing is based on our legitimate interest and your consent.

Third-Party Services And Content

We use third-party services for analytics, spam protection, maps, and advertising — all by Google LLC.

These include:

Google Analytics
reCAPTCHA
Google Maps
Google Ads

For opting out of personalised advertising, visit:
Your Online Choices,
DAAC, or
AdChoices.

Data We Collect Directly

Contacting Us

When you contact us, we collect your name, email, phone number, IP address, and the context of your message.
The legal basis is your consent and our contract with you.

Social Media

We maintain pages on Facebook, Twitter, LinkedIn, TikTok, YouTube and Instagram.
If you contact us via social media, we and the platform are joint controllers of your data.

Franchise Relationships

We process data you provide to establish and maintain franchise relationships, including communication, invoicing, and contractual fulfilment.

Providing Our Services

We only process Personal Data necessary for fulfilling our services, such as name, address, email, phone number, and other relevant details.

Business-Related Processing

This includes data such as:

Contact info
Booking details (pickup/return, date/time)
Government ID and driver’s licence
Payment and insurance info

The purpose is to provide our services, billing, and customer support.

Administration and Accounting

We process data for administrative tasks, compliance, and archiving based on legal obligations and legitimate interest.

If you subscribe, we use your name and email to send you updates and promotions.
You can unsubscribe anytime via the link at the end of each newsletter.

Payment Data

All payments are processed via our third-party payment providers.
We do not store your payment data directly.

General Principles

Who Receives My Data?

Within Aura Car Hire, only authorised personnel who need access to fulfil our contractual and legal obligations will receive your data.
External processors (e.g., IT, marketing, telecoms) may also handle data under strict data protection agreements.

How Long Will My Data Be Stored?

We store personal data as long as necessary for our business relationship and in compliance with statutory retention periods (up to 8 years).

How Do We Secure Your Data?

We use SSL/TLS encryption and robust security measures to protect your data.
If a data breach occurs, we will notify affected individuals promptly.

Is Data Transferred Internationally?

Your data is not transferred outside the UK or EEA.

Special Category Data

We do not process special category data unless necessary and with your explicit consent.

Minors

We do not collect data from minors.

Automated Decision-Making

We do not use automated decision-making or profiling.

Do Not Sell

We do not sell your Personal Data.

Your Rights and Privileges

Under the DPA and GDPR, you have the following rights:

Right to information
Right to rectification
Right to object
Right to deletion
Right to data portability
Right to withdraw consent
Right to complain to a supervisory authority
Right not to be subject to automated decision-making

Updating Your Information

To correct or delete your data, contact us at info@auracarhire.co.uk.

Withdrawing Consent

You can withdraw consent at any time by contacting us.
Processing up to the time of withdrawal remains lawful.

Access Requests

To request access to your data, write to us. We aim to respond within 30 days .

Complaints

If you believe your data rights are violated, you may contact:
The Information Commissioner’s Office (ICO)
Wycliffe House, Water Ln, Wilmslow SK9 5AF, UK
www.ico.org.uk

Validity And Questions

This Privacy Policy was last updated on Monday, 29 May 2023, and remains valid.
We may update it from time to time due to legal or operational changes.

For questions or complaints:

Website: www.auracarhire.co.uk

Phone: 020 7046 6591

Email: info@auracarhire.co.uk