Privacy Policy

business 1. Who We Are

This Privacy Policy applies to the website madeiracarhub.com, operated by Madeira Car Hub (hereinafter "we", "us" or "our"). Madeira Car Hub is a car rental aggregator specifically focused on Madeira island, Portugal. We connect travellers with trusted local car rental companies to facilitate no-deposit, no-credit-card vehicle rentals.

We act as a data controller for personal data you provide directly to us (e.g. via email enquiries). For bookings processed through our affiliate partner (LocalRent), they act as the data processor for booking-related personal data. For questions about our data practices, please contact us at book@madeiracarhub.com.

data_object 2. What Data We Collect

We collect the minimum personal data necessary to provide our services. The types of data we may collect include:

• Contact data: Name, email address — when you contact us directly by email.
• Booking data: Name, email, driving licence details, payment information, pickup/drop-off details — collected by our booking partner LocalRent during the reservation process. We do not store full payment card details on our servers.
• Usage data: IP address, browser type, device information, pages visited, time spent on site — collected automatically via analytics tools (see Section 4).
• Communication data: The content of emails you send to us.

We do not collect sensitive personal data (special category data under GDPR) such as health information, racial or ethnic origin, or political opinions.

manage_accounts 3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To process your car rental booking — facilitating the reservation with our partner rental companies on your behalf.
• To respond to enquiries — answering questions you send to us by email.
• To improve our website — analysing usage patterns to enhance user experience and content relevance.
• To ensure website security — monitoring for fraudulent activity, abuse, and threats.
• To comply with legal obligations — retaining records as required by applicable law.

The legal bases for processing under GDPR are: (a) performance of a contract for booking-related processing; (b) our legitimate interests for analytics and security; and (c) compliance with a legal obligation.

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

cookie 4. Cookies and Tracking

Our website uses cookies and similar tracking technologies. A cookie is a small text file placed on your device. We use the following types of cookies:

• Strictly necessary cookies: Required for the website to function correctly (e.g. session management, booking widget functionality). These cannot be disabled.
• Analytics cookies: We use Yandex.Metrika (ID: 108360363) to collect anonymised data about how visitors use our website. This includes pages viewed, time on page, referral source and browser type. No personally identifiable information is collected by this tool unless you interact with a form.
• Third-party cookies: Our booking partner (LocalRent) may set cookies when you interact with the booking widget. Please refer to LocalRent's Privacy Policy for details.

You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of our booking tools.

share 5. Third-Party Services

Madeira Car Hub works with the following third-party services that may process your data:

• LocalRent (localrent.com) — Our affiliate booking partner. Processes booking data including name, email, payment details and rental preferences. LocalRent is a registered data processor under GDPR. Their privacy policy is available at localrent.com.
• Yandex.Metrika — Web analytics service provided by Yandex LLC. Collects anonymised usage data. Data may be stored on servers outside the EU.
• Google Maps — Used on our Contacts page to display the location of Cristiano Ronaldo International Airport. Google may collect data in connection with this service. Please refer to Google's Privacy Policy at policies.google.com.

We do not sell, rent or trade your personal data to third parties for marketing purposes. We share data with third parties only as described above or as required by law.

security 6. Data Storage and Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. These include:

• SSL/TLS encryption for all data transmitted via our website (HTTPS).
• Access controls limiting who can access personal data within our organisation.
• Regular security reviews of our website and third-party integrations.

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. Booking data is typically retained for up to 3 years for accounting and legal compliance purposes. Email enquiries are retained for up to 12 months.

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. If you become aware of any security issue, please contact us immediately at book@madeiracarhub.com.

gavel 7. Your Rights under GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access — You have the right to request a copy of the personal data we hold about you.
• Right to rectification — You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure — You have the right to request deletion of your personal data ("right to be forgotten"), subject to legal obligations.
• Right to restriction — You have the right to request that we restrict processing of your personal data in certain circumstances.
• Right to data portability — You have the right to receive personal data you provided to us in a structured, machine-readable format.
• Right to object — You have the right to object to processing of your personal data based on our legitimate interests.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at book@madeiracarhub.com. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority — in Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD) at cnpd.pt.

contact_mail 8. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: book@madeiracarhub.com
• Website: madeiracarhub.com/contacts/

This Privacy Policy was last updated on 2 April 2026. We reserve the right to update this policy at any time. Significant changes will be notified via a notice on our website. Continued use of madeiracarhub.com after changes constitutes acceptance of the updated policy.