Privacy notice

Who we are

Urban Escape Luxury Cars hires out self-drive and chauffeur-driven cars in Nairobi, Kenya. We decide how your details are used. For anything about your data, email Sales@UrbanEscapeLuxuryCars.com, or call or WhatsApp us on +254 729 635 168.

What we collect when you book

• Your name, phone number and email address.
• Where we deliver and collect the car, where you will use it, your notes, and whether you may extend.
• Before handover: your passport or ID number, nationality, driving licence number, where you are staying in Kenya, an emergency contact, and your flight number for airport deliveries.
• Photos of your driving licence and passport or ID, and the walk-round video of the car at handover.
• The rental agreement you sign, with the time, the IP address and the browser you signed from, kept as proof of signing.
• Payments and receipts. Card payments are handled by our payment provider; we never see your card number.
• Messages and calls through your booking page. Calls may be recorded by our team for quality, and you are told when a call is recorded.

Why we use it

To take and confirm your booking, deliver and collect the car, check who is driving and that they may drive, meet our insurance, tax and legal duties, keep you informed about your booking, and handle any damage, fines or claims. We use these details only for your booking and never sell them.

Who we share it with

Only the companies that help us run the service, each for its own part:

• Our website host and database, and our file storage (documents, videos, call recordings).
• Our email and text message providers, to send your booking, reminders and receipts.
• Our payment providers (M-Pesa and card), when you pay online.
• Google Maps, to suggest addresses as you type them.
• YouTube, only when you press play on a video.
• Our insurer, and the police or courts when the law requires it.

Our own website analytics

We count visits to this website ourselves, to see which pages help people and where the booking steps are hard. There are no cookies for this, no advertising or social media trackers, and nothing is sent to anyone else.

What we record about a visit:

• The pages you open (without anything after the ? in the address), how long each is on screen and how far you scroll.
• Where on a page you tap or click, and the words on the link or button. Never anything you type.
• How far you got in booking (saw a price, started your details, booked, signed, sent documents, paid), never your details themselves. When you book, we keep only where your visit came from (like “Google search, on a phone, in Kenya”) with the booking's steps, not the visit itself, and our team never sees the pages and taps of a visit that ended in a booking.
• The website or app you came from (its name only) and any campaign tags in the link.
• Your approximate place (country, region and city), which our website host works out from your IP address. We do not store your IP address.
• Your browser, system (like iPhone or Windows), phone, tablet or computer, screen width, language and time zone.
• Errors on the page and how fast it loaded.
• Which important buttons you pressed (like WhatsApp, Call or Book a car) and whether you ticked a box on the booking form, never what you typed.

Our team looks at these records as totals (like “40 visitors from Google”), as maps of where people tap and how far they scroll on a page, and as the steps of single visits (the pages and taps in order), to see where the website helps and where people get stuck. None of these show your name or anything you typed, visits that ended in a booking are never shown step by step.

We also keep a short recording of how our public pages looked and moved during a visit (scrolling, taps and the pointer), which our team can play back like a video to find parts of the website that are hard to use. Anything you type into a box is hidden in your browser before the recording leaves it, so we never see it. The booking pages, our team's dashboard and any video or map on a page are never recorded, and nothing is recorded if you chose “Don't count my visits” or your browser sends Do Not Track or Global Privacy Control. A recording is deleted after 30 days, or at once if the visit ends in a booking.

To count visitors without knowing who they are, our server mixes your IP address and browser with a random value that changes every day and is deleted after two days. The result can't be traced back to you or linked across days. Your browser keeps a random visit number only until you close the tab, a note that it has been here before (with no number or date in it), and for 90 days a note of how it first found us (the website it came from, any campaign tags and the first page, with no number that singles you out), so we know which searches lead to bookings.

We never record the booking pages that show your details and documents, or our team's dashboard, and our team's own visits are not counted. If your browser sends Do Not Track or Global Privacy Control, we only count each page anonymously, with nothing that links one page to the next.

Detailed records are deleted after 90 days. Booking steps are kept for 13 months, because bookings open a year ahead. After that we keep only daily totals (like “40 visitors from Google”) for 25 months, so we can compare seasons.

How long we keep booking records

For as long as we need them for your rental, and then for as long as tax, insurance and legal duties require (for example the record-keeping periods under Kenya's tax laws). Then we delete them.

Your rights

Under Kenya's Data Protection Act, 2019, you may ask what we hold about you and get a copy, have it corrected or deleted, object to how we use it, and ask for it in a form you can take elsewhere. Some records we must keep by law until their time is up. To ask, email Sales@UrbanEscapeLuxuryCars.com; we reply as soon as we can. If you are not happy with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

If you live in the European Union or the United Kingdom, you have the same rights under the GDPR and the UK GDPR, and may complain to your own data protection authority (in the UK, the Information Commissioner's Office). If you live in the United States, your state's privacy law may give you similar rights; ask us and we will help.

Where your data is kept

Our website host, database, storage, email and text providers keep data on servers outside Kenya. We use established providers that protect it, and only for the purposes above.

Children and changes

Our service is for adults; we don't knowingly collect details about children. If we change this notice we will update the date at the top.