Personal information we collect.
We collect three categories of personal information - personal information you give us; personal information automatically collected from your use of the Services; and personal information from third-party sources.

Payment data.
We collect your digital payment details, bank account or payment card numbers, and transaction information in connection with a potential or actual transaction, which may be processed and stored by one or more third party payment service providers or digital payments companies.

Identity verification data.
In some instances, we may collect identity verification information such as a photograph or scanned copy of a driver’s license, passport, national ID card, or payment card, last four digits of your Social Security number, social insurance number, social media account information, driver’s/motor vehicle record, insurance information, or other forms of identification information.

Communications.
When you communicate with Experience Vehicle Rentals, including via phone, email, or chat, or use the Services to communicate with other users, we collect information about your communication and any information you choose to provide.

Service providers
We may share information with vendors and service providers who support the operation of the Services and business and who need access to such information to carry out their work for us (including, for example, web hosting, analytics, payment processing, email delivery, marketing, insurance, claims administration, and customer support services). In some cases, the service provider may directly collect the information from you on our behalf.

Professional advisors
We may disclose your personal information to professional advisors, such as lawyers, bankers, auditors, and insurers, where necessary in the course of the professional services that they render to us.

Business transfers
We may sell, transfer, or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization, or sale of assets, or in the event of bankruptcy or dissolution.

Responding to legal requests, preventing harm, and protecting our rights
We may disclose your personal information to courts, law enforcement, governmental or tax authorities, or third parties. We will make such disclosure to the extent we are required or permitted to do so by applicable law or where we consider such disclosure is reasonably necessary to comply with our legal obligations or legal process, to respond to claims asserted against us, and for the security and safety purposes described below. We may also disclose your information in response to valid legal requests relating to criminal investigations or alleged or suspected illegal activity or any other activity that may expose Experience Vehicle Rentals, its subsidiaries, partners, officer, agents and/or employees, you, or any other user, or to protect the rights, property, or personal safety of Experience Vehicle Rentals, its subsidiaries, partners, officer, agents and/or employees.

We may also disclose your personal information as described elsewhere in this Privacy Policy or as disclosed to you at the time of collection.

Personal information we automatically collect.

Usage data.
We collect information about your interactions with the Services, such as the pages or other content you view, your searches, bookings you have made, how long you spent on a page or screen, sites from which you link or browse to in the Services, navigation paths between pages or screens, information about your activity on a page or screen, access time, duration of access, and other actions on the Services.

Location data.
When you use certain features of the Services, we may collect information about your approximate location (e.g., city/town associated with your IP address). When you opt in to use our location sharing feature, we may collect the precise location information of your mobile device. Keep in mind that most mobile devices allow you to control or disable the use of location services by any application on your mobile device in the device’s settings menu.

Trip data.
We collect transactional information related to the trips you take through the Services, including the date and time of your trip, amounts charged, and other related trip details.

Third-party services.
If you choose to log in to our Services through a third-party site or service (e.g., Apple, Facebook, or Google), the third-party service may send us information such as your registration and profile information from that service. The information we may receive varies by service and is controlled by the relevant service. By associating an account managed by a third party with your Experience Vehicle Rentals account and authorizing Experience Vehicle Rentals to have access to this information, you agree that Experience Vehicle Rentals may collect, store, and use this information in accordance with this Privacy Policy. We are not responsible for how those third parties use and share your information. Please refer to the privacy policies of those third parties to understand how they use and share your personal information.

Third-party in-vehicle devices.
Vehicles owned or managed by Experience Vehicle Rentals, or a vehicle you book through the Services, including an in-vehicle device or system operated by a third-party service (including vehicle manufacturers) or installed by Experience Vehicle Rentals, Experience Vehicle Rentals or service provider may record information about your use of the car. These devices or systems may monitor the car's condition, performance and operation, track fuel consumption, distance traveled, location, and other information. Experience Vehicle Rentals and/or third-party service will be solely responsible for its use of such information but may disclose such information to appropriate third parties, which we will use in accordance with this Privacy Policy.

Background check services.
To the extent permitted by applicable laws, Experience Vehicle Rentals may collect background information about you from public records, background check providers, or other screening services, including credit reports and information about criminal convictions or from sex offender registries. We may use your information, including your full name and date of birth, to obtain such reports.

Other sources.
To the extent permitted by applicable law, we may receive additional information about you, such as demographic data, fraud detection information, or data from credit bureaus and other third-party data providers.

We may combine the information about you that we receive from third-party sources with other information we have about you.

Choosing not to share your personal information
Where we are required by law to collect your personal information, or where we need your personal information in order to provide the Services to you, if you do not provide this information when requested (or we later delete it at your request), we may not be able to provide you with the Services.

Security and Safety, including to:
• Verify your identity or authenticate information that you provide, including during account creation and password reset processes

• Resolve disputes, collect fees, and troubleshoot problems

• Detect, prevent, and/or remediate fraud, abuse, security incidents, or other potentially harmful, prohibited, or illegal activities

• Determine your likelihood of getting into an accident or of making an insurance claim, such as by checking your auto insurance score

• Using information from mobile or in-vehicle device to identify unsafe driving behavior, including speeding or harsh braking and acceleration, and to raise awareness regarding such behaviors

• Detect, prevent, or remediate violations of and enforce our Terms of Service and Policies.

• Manage and protect our information technology infrastructure

• Conduct investigations and risk assessments

• Conduct checks against databases and information sources (such as but not limited to public government databases)

• Perform creditworthiness and solvency checks

To comply with law:
We use your personal information as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal processes, such as to respond to subpoenas or requests from government authorities.

Security Disclosure:
We employ a number of technical, physical, and organizational measures designed to protect information against unauthorized access, destruction, or alteration while it is under our control. However, no method of transmitting or storing information can be 100% secure and we cannot guarantee the security of your personal information.

Other important information

Cross border transfer
The Services are controlled and operated from the United States. Your personal information may be used, stored, and processed in any country where we have facilities or in which we engage service providers. These locations may be outside of your state, province, or country of residence, and may have different and/or less protective data protection rules than those of your state, province, or country. As a result, this information may be subject to access requests from governments, courts, regulatory agencies, security authorities, or law enforcement in those jurisdictions according to the laws in those jurisdictions.

Sensitive information
We ask that you not send us, and you not disclose, any sensitive information (e.g., Social Security numbers, social insurance numbers, passports, information related to racial or ethnic origin, or health) on or through the Services or otherwise to us unless specifically requested.

Children
The Services are not intended for anyone under the age of 18 and we do not knowingly collect personal information from users under the age of 18. If a child under the age of 18 has already provided us with personal information, his or her parent or guardian may contact us to request that we delete it.

Third-party privacy practices
This Privacy Policy addresses only the use and disclosure of information collected by Experience Vehicle Rentals. This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any site or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates. If you disclose your information to others, or if you are directed to a third-party website, their privacy notices and practices will apply.

Translations
Where Experience Vehicle Rentals has provided you with a version of this Privacy Policy in a language other than English, in case of any wording discrepancies between such version and the English version, the English wording takes precedence.

Information for users in the United Kingdom and Europe

The information in this section applies only to individuals in the United Kingdom and the European Economic Area (“Europe”).

Personal information

Except as otherwise specified, references to “personal information” in this Privacy Policy are equivalent to “personal data” governed by European data protection legislation.

Controller

Experience Vehicle Rentals is the controller of your personal information covered by this Privacy Policy for purposes of data protection legislation in the United Kingdom and Europe. You may contact us at privacy@OrlandoEXPC.com.

Legal bases for processing
The legal bases of our processing of your personal information as described in this Privacy Policy will depend on the type of personal information and the specific context in which we process it. If you have questions about the legal basis of how we process your personal information, contact us at privacy@OrlandoEXPC.com.

Use for new purposes
We may use your personal information for reasons not described in this Privacy Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.

Retention
We retain personal information where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested; to comply with applicable legal, tax, or accounting requirements; to establish or defend legal claims; or for fraud prevention). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Your rights.
The data protection laws of the United Kingdom and Europe give you certain rights regarding your personal information. If you are located in the United Kingdom or Europe, you may ask us to take the following actions in relation to your personal information that we hold:

1) Access. Provide you with information about our processing of your personal information and give you access to your personal information.

2) Correct. Update or correct inaccuracies in your personal information.

3) Delete. Delete your personal information.

4) Transfer. Transfer a machine‐readable copy of your personal information to you or a third party of your choice.

5) Restrict. Restrict the processing of your personal information.

6) Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights.

You may submit these requests by email to privacy@OrlandoEXPC.com or our postal address.

We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact us at privacy@OrlandoEXPC.com or submit a complaint to the data protection regulator in your jurisdiction.

Cross‐Border Data Transfer
If we transfer your personal information from Europe to a country outside of Europe such that we are required to apply additional safeguards to your personal information under European data protection laws, we will do so, for example, by implementing the standard contractual clauses adopted by the European Commission. Similarly, if we transfer your personal information from the United Kingdom to a country outside of the United Kingdom such that we are required to apply additional safeguards to your personal information under data protection laws of the United Kingdom, we will do so, for example, by implementing the applicable standard contractual clauses. Please contact us at privacy@OrlandoEXPC.com for further information about any such transfers or the specific safeguards applied.