Privacy and data protection policy

3. What we use it for

4. Who we share it with

We do not sell or rent your data. We only share it as necessary with:

• •The card payment processor, certified under the PCI DSS standard, which receives the card data directly from your browser.
• •The providers that host the platform, store the encrypted files and send the emails, acting on FLEXYRIDE's behalf.
• •The accounting and invoicing system of the business group FLEXYRIDE belongs to, to invoice and collect.
• •The vehicle's insurance company, in case of an accident.
• •The authorities (DGII, National Police, DIGESETT, Public Prosecutor, courts) when the law requires it or to report an event affecting the vehicle.
• •The map service that suggests addresses: it only receives the text you type in the address field, never your name, email or booking.

Whoever receives data on FLEXYRIDE's behalf may only use it to provide that service. Any other disclosure requires your consent (Law 172-13, art. 28).

5. Data outside the Dominican Republic

Some of these providers are outside the country (for example, in the United States or the European Union). The transfer takes place because it is necessary to perform the agreement you request (payment, email, hosting), under article 80 of Law 172-13, and with your authorization when you accept this policy.

6. How long we keep it

1. 1.Agreement, payment and invoice data is kept for the periods required by tax and commercial laws and for as long as obligations arising from the rental may be claimed.
2. 2.Photos of your license and document are kept for as long as they are needed to verify your rentals and handle complaints or accidents.
3. 3.Photos in the reports are kept for as long as they may serve as evidence in a complaint or an accident.
4. 4.After those periods, the data is deleted or anonymized.

7. How we protect it

• •Encryption of document and license numbers and of your document files, in the database and in storage.
• •Encrypted connection (HTTPS) across the website and app.
• •Staff access limited to what their role needs, with two-factor authentication and a log of actions.
• •Encrypted backups stored separately.
• •Cards are processed by a PCI DSS certified provider (see the Payment security policy).

If an incident affecting your data occurs, we will tell you what happened and what you can do.

8. Your rights and how to exercise them

Write to info@flexyriderentacar.com stating your name and what you are asking for; we will ask you to verify your identity before handing over or changing data. Exercising these rights is free. When you close your account your personal data is anonymized; if you were on the list of customers with serious breaches, only an encrypted fingerprint of the document is kept to prevent a new rental.

If we do not reply within those periods or you are not satisfied, you may bring a habeas data court action (Constitution, art. 70; Law 172-13, art. 17) and claim any compensation due (art. 16).

9. Notices and marketing communications

Booking notices (confirmation, reminders, charges, invoices) are part of the service and are always sent. Security notices, such as the notice of each movement on your card, cannot be turned off. Offers and news are only sent with your consent, identify the sender and include an unsubscribe link, under Law 310-14 on unsolicited commercial email.

10. Cookies and storage on your device

• •Necessary (always on): your session and security, the quote you are working on, and those that remember your choices, such as language or light/dark theme. The app does not work without them.
• •Optional (only if you press "Accept"): your booking form draft and whether you left the guide open. They are stored only in your browser; if you choose "Only necessary", they are deleted and not saved again.
• •We do not use advertising or tracking cookies, nor third-party analytics tools.

11. Minors

FLEXYRIDE does not rent vehicles to minors or knowingly collect their data. To rent, you must be at least the minimum age stated for each vehicle.

12. Changes to this policy

Each version has a number and an effective date, and previous versions are kept. If a change affects how we use your data, we will notify you in advance by email and in the app.