Privacy Policy

At 4Drive Malta, we take your privacy seriously. This Privacy Policy explains how we collect, use, store and protect your personal information when you use our car hire services. By booking a vehicle or using our website, you agree to the practices described in this policy.

Last Updated: January 2025

1. Information We Collect

When you rent a car from 4Drive Malta, we collect the following types of personal data:

1.1 Booking Information

• Full name as it appears on your driving licence
• Email address for booking confirmation and communication
• Telephone number for pickup coordination and support
• Postal address if required for billing purposes
• Date of birth to verify minimum age requirements
• Nationality and country of residence

1.2 Driving Documents

• Driving licence number, issue date and expiry date
• Passport number for identity verification
• International Driving Permit details if applicable for non-EU residents
• Copies of documents provided at the time of vehicle pickup

1.3 Payment Information

• Payment method used (debit card, cash, Apple Pay, Google Pay)
• Transaction records and receipt details
• Billing address if different from residential address

We do not store full credit or debit card numbers. Payment processing is handled through secure third-party payment gateways that comply with PCI DSS standards.

1.4 Vehicle Usage Data

• Pickup and return dates, times and locations
• Vehicle mileage at start and end of rental period
• Fuel level records
• Optional extras selected (GPS, child seat, additional driver)
• Damage reports or incident records if applicable

1.5 Technical and Website Data

• IP address and geolocation data
• Browser type, device information and operating system
• Pages visited on our website and time spent on each page
• Referral source (how you arrived at our site)
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your personal data for the following purposes:

2.1 Service Delivery

• Processing your car hire booking and confirming reservation details
• Coordinating vehicle pickup at Malta International Airport or your chosen location
• Verifying your driving licence and identity documents
• Managing the rental agreement and insurance coverage
• Handling payment transactions without requiring a deposit or credit card
• Providing roadside assistance or support during your rental period

2.2 Communication

• Sending booking confirmation emails with rental details
• Providing pickup instructions and contact information
• Notifying you of any changes to your booking or vehicle availability
• Responding to customer service enquiries and support requests
• Requesting feedback and reviews after your rental experience

2.3 Legal Compliance

• Complying with Maltese transport and road traffic regulations
• Meeting insurance requirements and processing claims if necessary
• Maintaining records for tax and accounting purposes
• Responding to lawful requests from authorities or legal proceedings
• Enforcing our terms and conditions and rental agreement

2.4 Business Operations

• Improving our website functionality and user experience
• Analysing booking patterns to optimise vehicle availability
• Preventing fraud and ensuring secure transactions
• Maintaining accurate fleet management and maintenance records
• Training staff to provide better customer service

2.5 Marketing (With Your Consent)

• Sending promotional offers for future car hire in Malta
• Informing you about seasonal discounts or special deals
• Sharing travel tips and guides for visiting Malta, Gozo and Comino

You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR) and Maltese data protection law, we process your personal data based on:

• Contractual Necessity: Processing is required to fulfil our rental agreement with you, including vehicle delivery, insurance provision and payment processing.
• Legal Obligation: We must retain certain data to comply with Maltese transport regulations, tax law and insurance requirements.
• Legitimate Interest: We process data to improve our services, prevent fraud and maintain operational efficiency, provided this does not override your privacy rights.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent which you can withdraw at any time.

4. Data Sharing and Disclosure

We do not sell your personal information to third parties. However, we may share your data with the following categories of recipients:

4.1 Service Providers

• Payment processors to handle debit card, Apple Pay and Google Pay transactions
• Insurance companies to provide comprehensive coverage included in every rental
• IT service providers for website hosting, data storage and security
• Email service platforms for sending booking confirmations and communications

4.2 Legal Authorities

• Maltese police or transport authorities if required by law
• Courts or regulatory bodies in response to lawful requests
• Government agencies for tax reporting or compliance purposes

4.3 Business Transfers

If 4Drive Malta is acquired by or merges with another company, your data may be transferred to the new owner as part of the business assets. We will notify you of any such change and ensure your data continues to be protected.

5. International Data Transfers

Your personal data is primarily stored and processed within the European Union. If we transfer data outside the EU (for example, to cloud service providers in other jurisdictions), we ensure adequate safeguards are in place through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognising equivalent data protection standards
• Binding corporate rules or other lawful transfer mechanisms

6. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Booking Records: Retained for 7 years to comply with Maltese accounting and tax law.
• Driving Licence Copies: Kept for 3 years for insurance and legal compliance purposes.
• Payment Transaction Data: Stored for 7 years as required by financial regulations.
• Marketing Consent Records: Maintained until you withdraw consent or request deletion.
• Website Analytics Data: Typically retained for 2 years to analyse trends and improve services.

After the retention period expires, we securely delete or anonymise your data so it can no longer identify you.

7. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal information:

7.1 Right to Access

You can request a copy of the personal data we hold about you, including booking details, payment records and communication history.

7.2 Right to Rectification

If any information we hold is inaccurate or incomplete, you can ask us to correct or update it.

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data if it is no longer needed for the purposes collected, or if you withdraw consent. Note that we may need to retain certain data to comply with legal obligations.

7.4 Right to Restrict Processing

You can ask us to limit how we use your data in certain circumstances, such as while we verify the accuracy of disputed information.

7.5 Right to Data Portability

You can request a copy of your data in a structured, machine-readable format to transfer to another service provider.

7.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes at any time.

7.7 Right to Withdraw Consent

If we process your data based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

7.8 Right to Lodge a Complaint

If you believe we have mishandled your personal data, you can file a complaint with the Office of the Information and Data Protection Commissioner in Malta:

Office of the Information and Data Protection Commissioner
Level 2, Airways House
High Street, Sliema SLM 1549
Malta
Website: idpc.org.mt

To exercise any of these rights, please contact us using the details provided at the end of this policy.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience and analyse site traffic. Cookies are small text files stored on your device that help us remember your preferences and understand how you interact with our site.

8.1 Types of Cookies We Use

Essential Cookies: Required for the website to function properly, including booking widget functionality and session management. These cannot be disabled without affecting site performance.

Performance Cookies: Help us understand how visitors use our site by collecting anonymous data on page views, time spent and navigation paths. This allows us to improve website layout and user experience.

Functionality Cookies: Remember your preferences such as language selection and location settings to provide a more personalised experience.

Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness. These require your consent and can be disabled.

8.2 Third-Party Cookies

We use third-party services that may set their own cookies, including:

• Google Analytics for website traffic analysis
• Payment gateway providers for secure transaction processing
• Social media platforms if you interact with embedded content

8.3 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, but this may affect website functionality and prevent you from completing bookings.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:

• Encryption of sensitive data during transmission using SSL/TLS protocols
• Secure storage of documents and records with restricted access controls
• Regular security assessments and vulnerability testing
• Staff training on data protection and confidentiality obligations
• Backup procedures to prevent data loss in case of technical failure
• Monitoring systems to detect and respond to security incidents

While we take every reasonable precaution, no method of electronic storage or internet transmission is completely secure. We cannot guarantee absolute security but will notify you promptly of any data breach that poses a risk to your rights.

10. Children's Privacy

Our car hire services are intended for adults aged 21 and over (25+ for certain vehicle categories). We do not knowingly collect personal information from individuals under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately so we can delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or business operations. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your data.

For significant changes that affect your rights, we will notify you by email or through a prominent notice on our website before the changes take effect.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to discuss how we handle your personal information, please contact us:

We aim to respond to all enquiries within 30 days as required by GDPR. For urgent matters, please call us directly during business hours.

13. Additional Information for Malta Residents

If you are a resident of Malta, you benefit from the full protections of the GDPR as implemented in Maltese law through the Data Protection Act (Chapter 586 of the Laws of Malta). The Office of the Information and Data Protection Commissioner oversees compliance and can assist with any concerns about how your personal data is handled.

For tourists visiting Malta from EU member states, your home country data protection authority can also assist if you prefer to file a complaint locally.

14. Consent and Acknowledgement

By using our car hire services, visiting our website, or providing your personal information during the booking process, you acknowledge that you have read and understood this Privacy Policy. You consent to the collection, use and sharing of your data as described herein, subject to your rights to withdraw consent or object at any time.

If you do not agree with this Privacy Policy, please do not use our services or provide us with your personal information.