Privacy Policy

SureRentals is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information when you visit our website or make a booking with us. Please read this policy carefully. By using our services, you agree to the practices described below.

1. Who We Are

SureRentals operates a vehicle rental service across New Zealand. We are the data controller responsible for the personal information we hold about you. Our registered business address is:

This policy applies to all personal information we collect through our website (surerentals.co.nz), by telephone, in person at our branches, or through any other means in connection with our vehicle rental services.

2. Information We Collect

2.1 Information You Provide Directly

When you make a reservation, create an account, or contact us, we may collect:

• Identity information: full name, date of birth, age group
• Contact information: email address, phone number, postal address (street, suburb, city, postcode, country)
• Driver information: driver licence type (New Zealand, Australian or International), licence number
• Booking details: vehicle selection, pickup and drop-off locations and dates, insurance and extras selections, flight number, shuttle preference, travel reason
• Payment information: credit or debit card details (processed and stored securely by Stripe - we do not store raw card numbers on our servers)
• Account credentials: email address and hashed password if you create an account
• Communications: enquiry details and correspondence when you contact us

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type, version and operating system
• Pages visited, time spent on each page and referring URL
• Device identifiers and screen resolution
• Cookie data (see Section 5)

2.3 Information From Third Parties

We may receive information about you from third parties in limited circumstances, such as:

• Payment processors (Stripe) confirming payment status
• Review platforms if you submit a public review
• Travel agents or booking intermediaries who make a reservation on your behalf

3. How We Use Your Information

We use the personal information we collect for the following purposes:

We will not use your personal information for any purpose that is incompatible with the purposes listed above without first obtaining your consent.

4. Sharing Your Information

We do not sell, rent or trade your personal information. We may share your information with:

• Service providers: third-party companies that help us operate our business, including payment processors (Stripe), email delivery services, web hosting providers and analytics platforms. These parties are contractually bound to use your data only to provide services to us.
• Our staff and branches: employees and branch staff who need access to fulfil your rental booking.
• Legal authorities: courts, regulatory bodies, law enforcement agencies or other government authorities when we are required to do so by law, court order, or to protect the safety of any person.
• Business transfers: in the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring party, subject to equivalent privacy protections.
• Your authorised agents: travel agents or others acting on your behalf and with your authority.

In all cases, we take reasonable steps to ensure that third parties handle your information in accordance with applicable privacy laws.

5. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. A cookie is a small text file placed on your device by your web browser.

Types of cookies we use:

• Strictly necessary cookies: required for the website to function correctly (e.g. session cookies that maintain your booking wizard state). You cannot opt out of these.
• Functional cookies: remember your preferences such as selected pickup location or date format.
• Analytics cookies: help us understand how visitors use our website (e.g. Google Analytics). These are anonymised and do not identify you personally.
• Marketing cookies: used to deliver relevant advertisements. These are only placed with your consent.

You can control or delete cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our website, including the booking wizard.

6. Data Security

We implement a range of technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction, including:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of passwords using industry-standard bcrypt hashing
• Payment card data handled exclusively by Stripe (PCI DSS Level 1 certified) - we never store raw card numbers
• Access controls restricting staff access to personal data on a need-to-know basis
• Regular security reviews and software updates

While we take every reasonable precaution, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information.

If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and the relevant authority as required by the Privacy Act 2020.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting and reporting requirements:

• Booking records: retained for a minimum of 7 years to comply with New Zealand financial and taxation laws.
• Account information: retained while your account is active, and for up to 3 years after your last booking or account activity.
• Marketing preferences: retained until you opt out, after which we delete your marketing data within 30 days.
• Website analytics data: retained in aggregated, anonymised form indefinitely.

When your information is no longer required, it is securely deleted or anonymised.

8. Your Rights

Under the New Zealand Privacy Act 2020 and, where applicable, the Australian Privacy Act 1988 and the EU General Data Protection Regulation (GDPR), you have the following rights regarding your personal information:

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 20 working days. We may need to verify your identity before processing your request. There is no charge for making a request.

If you are dissatisfied with our response, you have the right to complain to the Office of the Privacy Commissioner (New Zealand): www.privacy.org.nz.

9. Third-Party Services

Our website may contain links to third-party websites and we use the following third-party services which have their own privacy policies:

• Stripe - payment processing. Stripe Privacy Policy
• Google Analytics - website usage analytics (anonymised). Google Privacy Policy
• Google Maps - location information on our contact page. Google Privacy Policy
• Meta (Facebook) - if you engage with our Facebook page or social share buttons.

We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. Renters must be at least 18 years of age and hold a valid driver licence to rent a vehicle from us.

If you believe we have inadvertently collected information from a person under 18, please contact us immediately and we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our website homepage
• Where required by law, notify you by email

Your continued use of our website or services after any changes become effective constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

12. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or your personal information, please contact our Privacy Officer:

We aim to respond to all privacy-related enquiries within 5 business days, and to fulfil formal requests within 20 working days as required by the Privacy Act 2020.