Legal

Payment security policy

How FLEXYRIDE protects your card and your money: who sees your data, what we store, how the deposit works and what to do if you see a charge you do not recognize.

Version 1.0Effective from October 21, 2026Code FR-LEG-04

Lessor: CAPITAL SMART INVESTMENT SRL, through its subsidiary FLEXY RIDE RENT A CAR
RNC (Tax ID): 1-33-15474-9
Registered address: Calle Guayubín Olivo esq. Carretera Mella, Plaza Nessit, Local 101, Santo Domingo, República Dominicana

Download the full document (PDF)Versión en español (PDF)

Supplements the Terms and Conditions.

In a nutshell

Your card details go directly from your browser to a PCI DSS certified payment processor. FLEXYRIDE never sees or stores the full number or the security code.
If your bank requires it, you confirm the payment in your bank's window (3-D Secure), without leaving the page.
The deposit is a hold, not a charge. Only what is due under the Terms is taken from it, with notice and evidence.
We email you about every movement on your card. If you see one you do not recognize, write to us right away.
We will never ask for your full card details by phone, email or WhatsApp.

Supplementary document: This policy supplements the rental Terms and Conditions and the Privacy policy. FLEXY RIDE RENT A CAR — CAPITAL SMART INVESTMENT SRL, RNC 1-33-15474-9.

1. How your card is captured

The field where you type your card belongs to an international payment processor certified under PCI DSS (the payment card industry security standard), embedded in FLEXYRIDE's page. The data travels encrypted directly from your browser to the processor: it does not go through FLEXYRIDE's servers.

What FLEXYRIDE stores: The identifier (token) given by the processor, the brand, the last 4 digits, the expiry date and the cardholder's name.
What FLEXYRIDE never sees or stores: The full card number, the security code (CVV/CVC) and your PIN.

What FLEXYRIDE stores	What FLEXYRIDE never sees or stores
The identifier (token) given by the processor, the brand, the last 4 digits, the expiry date and the cardholder's name.	The full card number, the security code (CVV/CVC) and your PIN.

2. Verification by your bank (3-D Secure)

When your bank requires it, the payment or hold is confirmed in a window from your bank (for example, with a code or in your banking app), without leaving the page. If verification is not completed, nothing is charged or held.

Annex · Legal framework

Dominican Republic rules this document relies on and the articles used.

PCI DSS (Payment Card Industry Data Security Standard): An industry standard, not a law: it governs how card data is protected. FLEXYRIDE does not receive or store full card data.
Law 53-07 on High-Technology Crimes: Art. 5 (access codes), art. 6 (unlawful access), art. 10 (damage to or alteration of data), art. 14 (unlawful obtaining of funds by electronic means) and art. 15 (fraud by electronic means).
Law 126-02 on Electronic Commerce, Documents and Digital Signatures: Art. 4 (legal recognition of digital documents); art. 5 (written record); art. 6 (signature); art. 9 (admissibility and evidential weight); art. 13 (formation and validity of contracts by electronic means); art. 14 (recognition of data messages between the parties).
Law 358-05 on Consumer and User Rights Protection: Art. 33 (consumer rights: truthful, clear information in Spanish; fair treatment; redress; access to justice); art. 62 (distance contracting: price with taxes, complaints by similar means and a three-business-day reflection period before the service); art. 63 (deficient service: the consumer chooses restitution, price reduction or proper performance); art. 81 (adhesion contracts); art. 82 (interpretation most favorable to the consumer); art. 83 (Spanish, clear terms, express acceptance; clauses that exempt the provider, limit rights, reverse the burden of proof, impose exclusive arbitration or allow changes without notice are void); art. 84 (right to information); art. 113 (refund of amounts unduly charged); art. 124 (conciliation before Pro Consumidor).
Law 172-13 on the Protection of Personal Data: Art. 5 (principles: lawfulness, quality, prior information, consent, security); art. 6 (definitions); art. 8 (rectification or erasure within 10 business days, free of charge); art. 10 (access within 5 business days); art. 13 (controller's duties); arts. 14 and 15 (rectification, cancellation and blocking); art. 16 (compensation); art. 17 (habeas data); art. 27 (cases without consent, including the contractual relationship); art. 28 (disclosure); art. 80 (international transfer, among other cases to perform the agreement).

Payment security policy

How FLEXYRIDE protects your card and your money: who sees your data, what we store, how the deposit works and what to do if you see a charge you do not recognize.

Version 1.0Effective from October 21, 2026Code FR-LEG-04

Lessor

CAPITAL SMART INVESTMENT SRL, through its subsidiary FLEXY RIDE RENT A CAR

RNC (Tax ID)

1-33-15474-9

Registered address

Calle Guayubín Olivo esq. Carretera Mella, Plaza Nessit, Local 101, Santo Domingo, República Dominicana

1. How your card is captured

What FLEXYRIDE stores: The identifier (token) given by the processor, the brand, the last 4 digits, the expiry date and the cardholder's name.
What FLEXYRIDE never sees or stores: The full card number, the security code (CVV/CVC) and your PIN.

What FLEXYRIDE stores	What FLEXYRIDE never sees or stores
The identifier (token) given by the processor, the brand, the last 4 digits, the expiry date and the cardholder's name.	The full card number, the security code (CVV/CVC) and your PIN.

Annex · Legal framework

Dominican Republic rules this document relies on and the articles used.

PCI DSS (Payment Card Industry Data Security Standard)

An industry standard, not a law: it governs how card data is protected. FLEXYRIDE does not receive or store full card data.

Law 53-07 on High-Technology Crimes

Art. 5 (access codes), art. 6 (unlawful access), art. 10 (damage to or alteration of data), art. 14 (unlawful obtaining of funds by electronic means) and art. 15 (fraud by electronic means).

Law 126-02 on Electronic Commerce, Documents and Digital Signatures

Art. 4 (legal recognition of digital documents); art. 5 (written record); art. 6 (signature); art. 9 (admissibility and evidential weight); art. 13 (formation and validity of contracts by electronic means); art. 14 (recognition of data messages between the parties).

Law 358-05 on Consumer and User Rights Protection

Art. 33 (consumer rights: truthful, clear information in Spanish; fair treatment; redress; access to justice); art. 62 (distance contracting: price with taxes, complaints by similar means and a three-business-day reflection period before the service); art. 63 (deficient service: the consumer chooses restitution, price reduction or proper performance); art. 81 (adhesion contracts); art. 82 (interpretation most favorable to the consumer); art. 83 (Spanish, clear terms, express acceptance; clauses that exempt the provider, limit rights, reverse the burden of proof, impose exclusive arbitration or allow changes without notice are void); art. 84 (right to information); art. 113 (refund of amounts unduly charged); art. 124 (conciliation before Pro Consumidor).

Law 172-13 on the Protection of Personal Data

Art. 5 (principles: lawfulness, quality, prior information, consent, security); art. 6 (definitions); art. 8 (rectification or erasure within 10 business days, free of charge); art. 10 (access within 5 business days); art. 13 (controller's duties); arts. 14 and 15 (rectification, cancellation and blocking); art. 16 (compensation); art. 17 (habeas data); art. 27 (cases without consent, including the contractual relationship); art. 28 (disclosure); art. 80 (international transfer, among other cases to perform the agreement).

Payment security policy

In a nutshell

1. How your card is captured

2. Verification by your bank (3-D Secure)

Annex · Legal framework

Payment security policy

In a nutshell

1. How your card is captured

2. Verification by your bank (3-D Secure)

Annex · Legal framework

3. Saved card

4. The deposit (hold) on your card

5. Notice of every movement

6. Bank transfer and Zelle

7. If you see a charge you do not recognize

8. Currencies and fees