Privacy policy
Version of October 30, 2026
Provisional text, awaiting validation by a lawyer. The parts in red are still to be decided.
Data controller
The data controller is the company that publishes the site, identified in the legal notice.
Data collected, purposes and retention
We only collect the data needed for the rental. Retention periods to be validated with the lawyer.
These periods are enforced by an automatic task, run regularly, that deletes or anonymises data once its period has ended.
| Data | Why | Legal basis | Retention period |
|---|---|---|---|
| Account: name, email, phone, language, driver's address and date of birth, date of last activity | Manage your account, contact you about your bookings, check that you can rent | Contract | While the account is active. Deleted after 3 years without sign-in or booking (see “Deleting your account”) |
| Password (hashed, unreadable to us) | Sign you in | Contract | Until the account is deleted |
| Google sign-in: name, email, profile picture | Sign you in without a password | Contract | Until the account is deleted |
| Sign-in sessions: IP address, browser | Keep your account secure | Legitimate interest | Deleted automatically when they expire; only the date of last activity stays on the account |
| Driving licence: number, issue and expiry dates, date and author of the check | Check that you can drive; name the driver if a fine is issued | Contract; legal obligation | 1 year after the end of your last rental, if no booking is in progress or upcoming (see “Driving licence”) |
| Bookings: dates, vehicle, amount, accepted terms, driver (name, address, date of birth, licence number) | Perform the rental; name the driver if a fine is issued | Contract; legal obligation | Driver's licence number and date of birth: 1 year after the end of the rental. The rest: as long as the account exists, then see “Deleting your account” |
| Rental contract: frozen copy of the booking, the driver (including the licence number), the prices and the accepted terms | Prove what was agreed; you can read it in your account | Legal obligation (French Consumer Code, L213-1) | 10 years after the end of the rental |
| Invoices and credit notes: name, email, address, vehicle, dates, amounts | Keep the accounts | Legal obligation (French Commercial Code, L123-22) | 10 years after the close of the financial year (end of the year of issue) |
| Condition reports: mileage, fuel, damage found, photos of the vehicle, licence check at key handover | Record the condition of the vehicle at pickup and return; settle a disagreement about damage | Contract; legitimate interest | 5 years after the end of the rental |
| Stripe payment identifier | Find your payment | Contract | With the booking |
| Ratings given to vehicles | Show each vehicle's average rating (your name is never shown) | Legitimate interest | With the rated booking |
| Personal discounts granted to your account by the agency | Let you benefit from an offer | Legitimate interest | Until the account is deleted |
| Subscription to offers by email: email address and date of your consent | Send you the agency's new discounts | Consent | Until you unsubscribe or delete your account |
| Contract signature: typed name, date, IP address, browser | Prove that the rental contract was signed | Contract; legitimate interest | Same as the contract |
| Staff action log: who viewed or changed which data, and when (e.g. a licence check, a driver lookup) | Detect and prove misuse of your data | Legitimate interest; data security | 1 year |
Payment
Payments are processed by Stripe. Locali never sees or stores your card number or security code.
Driving licence
We keep the details of your licence (number, issue and expiry dates, date and author of the check), not its image.
They are used to name the driver if a traffic fine arrives after the rental. That is why they are erased from your account 1 year after the end of your last rental, if you have no other booking in progress or upcoming, and from each booking 1 year after it ends. If you have never rented yet, they stay on your account while it is active, for your next bookings.
The rental contract, kept 10 years, contains a copy of the driver's licence number and date of birth. To be confirmed with the lawyer: keep these details in the contract for 10 years, or erase them after 1 year.
To be decided: sending a photo of the licence before the rental, and deleting it as soon as it has been checked.
Condition report photos
At key handover and at return, our staff photograph the vehicle (bodywork, odometer, damage). These photos record its condition and help settle any disagreement about damage. They show the vehicle, not people.
You can see the condition reports and photos of your rentals in your account. They are kept for 5 years after the end of the rental, in private storage, then deleted. Damage not yet repaired by then stays in the vehicle's history, no longer linked to your rental.
Recipients
Within Locali, only the staff who need it can access your data. Their viewing and changes of personal data are recorded in a log kept for 1 year.
Our providers process your data on our behalf and on our instructions: the hosting provider of the site and database, the email sending service (SMTP), the photo storage service (private S3-compatible storage) and Stripe for payment.
If you sign in with Google, Google acts as an independent controller for its own processing. Your data may then be transferred to the United States, under the EU–US Data Privacy Framework.
To be completed: name and hosting country of each provider once chosen.
Data about our staff
The name of the staff member who made a condition report, reported damage, logged a repair, added a photo or checked a licence is kept with that record, for the same period. It proves who did the check.
The log of their actions on personal data is kept for 1 year. Staff accounts are not subject to the automatic deletion for inactivity.
Cookies
We only use essential cookies (sign-in, language), listed in the legal notice. No analytics or advertising cookies.
The agency map on the home page is shown by OpenStreetMap: your browser asks it for the map images (so it receives your IP address), with no cookie and no account.
Your rights
You can access your data, have it corrected or erased, object to its processing and ask for a copy. We reply within one month.
To exercise them, write to us: dedicated email address to be completed.
You can also lodge a complaint with the CNIL (French data protection authority).
Deleting your account
You can delete your account yourself from My profile. An account without sign-in or booking for 3 years is deleted automatically, in the same way.
If you have never booked, the account is erased entirely. Otherwise your sign-in methods, email and phone are erased straight away; your name, bookings, contracts, invoices and condition reports are kept for the periods above. Once no contract or invoice is kept any more, and at the earliest 10 years after your last rental, your name, address and date of birth are erased too.