Skip to main content

SmartCar

Privacy Policy

Version 2.0 — Effective June 1, 2026

1. Who We Are

SmartCar ("the Company") operates car rental and leasing services in Israel. For privacy questions or to exercise your rights, contact us at office@smartcar.co.il.

2. Data We Collect, Legal Basis & Retention

Data TypePurposeLegal BasisRetention Period
Name, email, phoneProcessing bookings, contactContract performance7 years (statutory)
ID / Passport numberIdentity verificationLegal obligation7 years
Driving licence detailsEligibility verificationContract / legitimate interest7 years
Browsing data (IP, browser)Security, analyticsLegitimate interest90 days
Marketing email addressOffers & updates (consent only)ConsentUntil consent is withdrawn

We do not collect biometric data, health data, racial data, political opinions, or data from persons under 18.

3. Third-Party Data Sharing

We never sell, rent or trade personal data. Data may be shared only with the following parties for the stated purposes:

Third PartyPurposeCountrySafeguards
Database hosting providerDatabase hostingUSA / AWSDPA + SOC 2 Type II
Website hosting providerWebsite hosting, CDN, analyticsUSA / GlobalDPA + SOC 2
Email delivery providerConfirmation emailsUSADPA
Email delivery providerQuotation emailsUSADPA
Google AnalyticsSite usage analytics (consent-gated)USA / GlobalDPA + SCCs
Cloudflare (Turnstile)Bot protection on formsGlobalDPA
Cloud infrastructure providerRequest rate limiting, queue infrastructureUSADPA
Insurance companiesAccident insurance coverageIsraelIsraeli law
Government authoritiesLegal obligation onlyIsraelCourt order / statutory

4. Direct Marketing — Consent & Opt-Out

  • We send marketing communications (offers, updates) only after obtaining explicit consent through a separate sign-up form.
  • Withdraw consent at any time via the "unsubscribe" link at the bottom of every email, or by contacting office@smartcar.co.il.
  • Withdrawing marketing consent does not affect processing needed to perform an existing rental contract.
  • Booking and transaction confirmation emails are not marketing and do not require consent.

5. Your Rights

  • Right of access: Receive a copy of data held about you within 30 days.
  • Right of rectification: Have inaccurate, incomplete or misleading data corrected.
  • Right to erasure: Request deletion of data where no statutory retention obligation applies.
  • Right to restriction: Restrict processing while a complaint is under review.
  • Right to portability: Receive your data in machine-readable format (CSV/JSON).
  • Right to object: Object to direct marketing processing — no conditions apply.

To exercise any right, send a written request to office@smartcar.co.il. We will respond within 30 days.

6. Security

  • All communications are encrypted using TLS 1.3.
  • Data access is limited to authorised personnel on a need-to-know basis.
  • In the event of a severe security incident, we will notify the Israeli Privacy Protection Authority immediately upon discovery, in accordance with the Protection of Privacy Regulations (Data Security), 5777-2017, and will notify affected individuals as required by law.

7. International Data Transfers

Some of our service providers listed in Section 3 above store data outside Israel. We have ensured each provider has signed a Data Processing Agreement (DPA) with protections equivalent to European standards (GDPR Adequacy / SCCs).

8. Cookies

See our full Cookie Policy for details on the types of cookies we use, their purposes and how to manage them.

9. Changes to This Policy

Material changes will be published on the site 14 days before taking effect. Changes required by law may take effect immediately. The "Version" date at the top of this document reflects the date of the last change.

10. Complaints to the Authority

If you are not satisfied with how we have handled your request, you may file a complaint with the Israeli Privacy Protection Authority: gov.il/departments/privacy

Privacy Contact

Message us on WhatsApp