Last updated: 6 August 2026
This policy explains what personal information Rent-A-Car Palawan collects when you use this website, why we collect it, who we share it with, and what control you have over it.
Who we are
The Rent-A-Car Palawan website is owned and operated by Neosis LTD, Room 607, Yen Sheng Centre, 64 Hoi Yuen Road, Kwun Tong, Hong Kong. In this policy, “we”, “us” and “our” refer to that company.
For any question about this policy or about your personal data, write to [email protected].
What we collect
When you make a booking
To process a vehicle rental we collect your name, email address, phone number, billing address, the pick-up and drop-off details you enter (hotel or airport, time, flight number where relevant), the dates of your rental, and the options you select. We keep the record of the booking, the deposit paid and the balance due.
When you pay
Card and account payments are handled by our payment providers, not by us. We never see or store your full card number. We receive only the confirmation of payment, the amount and a transaction reference.
When you create an account
If you create a customer account, we store your name, email address, password (encrypted), and your booking history so you can review past rentals.
When you use the contact form
The contact form collects your name, your email address, an optional website address and your message. We use these only to answer you. The form is protected by Google reCAPTCHA, which checks that the sender is not an automated script.
Automatically, when you browse
Our host and our security layer record standard technical data: IP address, browser type, pages requested, date and time. This is used to keep the site running, to detect abuse and to block attacks. We also use analytics to understand which pages are visited, in aggregate.
Why we use it
- To take, confirm and deliver your booking, and to contact you about it.
- To take payment and issue refunds where our terms provide for one.
- To answer messages you send us.
- To meet our accounting and tax obligations.
- To keep the website secure and to prevent fraud.
- To measure how the website is used so we can improve it.
If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of a contract (your booking), our legitimate interests (site security, fraud prevention, aggregate measurement), compliance with a legal obligation (accounting records), and your consent where we ask for it.
Who we share it with
We do not sell your personal information. We share it only with the service providers we need to run the business, and only to the extent each one needs:
- Payment providers — to process your payment and any refund.
- Our hosting provider — the website and its database are stored on their servers.
- Cloudflare — delivers the site and filters malicious traffic.
- Automattic (Jetpack) — site statistics and security monitoring.
- Google — reCAPTCHA on the contact form, and website analytics.
- Meta (Facebook) — the Facebook page widget shown on our pages.
- Our email provider — sends booking confirmations and follow-up messages.
- Our rental partners in Palawan — receive the details needed to hand over and collect the vehicle.
We may also disclose information where the law requires it, or to establish or defend a legal claim.
International transfers
We operate from Hong Kong, our vehicles are in the Philippines, and several of the providers listed above are established in the United States or the European Union. Your information may therefore be processed outside your country of residence. Where we transfer data out of the EEA or the UK, we rely on the standard contractual clauses published by the European Commission or on an adequacy decision.
Cookies
Cookies are small files stored by your browser. We use them for three purposes:
- Necessary — keep your cart and your booking selection while you move between pages, keep you signed in, and protect forms against abuse. The site does not work without these.
- Measurement — count visits and see which pages are read, in aggregate.
- Third-party — set by the Facebook widget and by our payment provider on the pages where they appear.
You can delete cookies and block them in your browser settings. If you block the necessary ones, booking will not work.
How long we keep it
- Booking and payment records: seven years, to meet accounting and tax requirements.
- Customer accounts: until you ask us to close the account.
- Contact form messages: two years after our last exchange.
- Server and security logs: up to twelve months.
Your rights
You can ask us to give you a copy of the personal information we hold about you, to correct it if it is wrong, to delete it, or to restrict what we do with it. You can also object to processing we carry out on the basis of our legitimate interests, and ask to receive your data in a portable format.
To exercise any of these, write to [email protected]. We will reply within thirty days. Note that we cannot delete records we are required to keep for accounting purposes until that period has run out.
Residents of the Philippines have these rights under the Data Privacy Act of 2012 and may complain to the National Privacy Commission. Residents of the EEA or the UK have them under the GDPR and may complain to their national supervisory authority.
Security
The site is served over HTTPS. Access to the administration area is restricted and monitored, and payment details are handled entirely by our payment providers. No system is completely secure, but we take reasonable measures to protect what we hold.
Children
This website is not intended for children. We do not knowingly collect information from anyone under 18. Vehicle rental requires a valid driving licence.
Changes to this policy
We may update this policy. The date at the top shows when it was last changed. Material changes will be announced on this page.