Privacy Policy

We collect information you provide directly to us when you create an account, book a vehicle, or contact us. This includes: • Personal information: name, email address, phone number, date of birth • Payment information: credit/debit card details (processed securely through LemonSqueezy) • Identity verification documents: driver's license, national ID, passport (for Renters and Hosts) • Vehicle information: registration documents, insurance certificates (for Hosts) • Profile information: profile photo, bio, address • Communication data: messages between Renters and Hosts, support tickets • Usage data: search history, booking history, preferences We also automatically collect certain information when you use our Platform: • Device information: IP address, browser type, operating system • Location data: approximate location based on IP address • Cookies and tracking technologies: see Cookies section below

We use your information to: • Provide, maintain, and improve our services • Process bookings and payments • Verify your identity and prevent fraud • Communicate with you about your bookings, account, and platform updates • Provide customer support • Send marketing communications (you can opt out at any time) • Comply with legal obligations • Enforce our Terms of Service and protect against abuse • Analyze usage patterns to improve user experience We process your personal data based on: • Contractual necessity (to provide our services) • Legal compliance (identity verification, tax reporting) • Legitimate interests (fraud prevention, platform improvement) • Your consent (marketing communications, optional features)

We share your information in the following circumstances: With other users: • When you book a vehicle, your name, phone number, and profile information are shared with the Host • When you list a vehicle, your name, phone number, and profile information are shared with Renters With service providers: • Payment processors (LemonSqueezy) to process transactions • Cloud storage providers (AWS S3) to store documents and photos • Email service providers to send notifications • Analytics providers to understand platform usage For legal reasons: • To comply with legal obligations, court orders, or government requests • To protect the rights, property, or safety of E-Car-Rent, our users, or the public • In connection with a merger, sale, or acquisition of our business We do not sell your personal information to third parties for marketing purposes.

We use cookies and similar tracking technologies to: • Keep you logged in • Remember your preferences and settings • Analyze how you use our Platform • Provide personalized content and recommendations • Measure advertising effectiveness Types of cookies we use: • Essential cookies: Required for the Platform to function • Performance cookies: Help us understand how users interact with our Platform • Functional cookies: Remember your preferences • Advertising cookies: Used to show relevant ads (if applicable) You can control cookies through your browser settings. Note that disabling essential cookies may affect Platform functionality.

We take data security seriously and implement appropriate technical and organizational measures: • Encryption of data in transit (HTTPS/TLS) • Encryption of sensitive data at rest • Secure payment processing through PCI-DSS compliant providers • Regular security audits and vulnerability assessments • Access controls and authentication mechanisms • Employee training on data protection However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Under GDPR and Kosovo data protection law, you have the following rights: • Right to access: Request a copy of your personal data • Right to rectification: Correct inaccurate or incomplete data • Right to erasure: Request deletion of your data (subject to legal obligations) • Right to restrict processing: Limit how we use your data • Right to data portability: Receive your data in a structured format • Right to object: Object to processing based on legitimate interests • Right to withdraw consent: Withdraw consent for marketing or optional features To exercise these rights, contact us at privacy@e-car-rent.com. We will respond within 30 days.

We retain your personal data for as long as necessary to provide our services and comply with legal obligations: • Account data: Retained while your account is active, plus 3 years after deletion • Booking and payment data: Retained for 7 years for tax and accounting purposes • Identity verification documents: Retained for 5 years after account closure • Communication data: Retained for 2 years You can request deletion of your account at any time, subject to our legal retention obligations.

E-Car-Rent is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information. If you believe a child has provided us with personal information, please contact us at privacy@e-car-rent.com.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by: • Posting the updated policy on our Platform with a new "Last Updated" date • Sending an email notification to your registered email address • Displaying a prominent notice on our Platform Your continued use of the Platform after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: privacy@e-car-rent.com Address: E-Car-Rent, Prishtina, Kosovo For GDPR-related inquiries, you may also contact the Kosovo Data Protection Authority.