Privacy Policy

Last updated: June 2026

Flex Rent a Car (FlexRent, flexrent.tn) is committed to protecting your privacy and personal data. This policy explains how we collect, use, store and protect your information when you use our website, our native iOS app and our vehicle rental services in Tunisia.

Platforms covered

This policy applies to flexrent.tn (French, English, Italian, German and Arabic versions), the native FlexRent iOS app, and email, WhatsApp or phone exchanges related to a booking or customer account.

Data Controller

The controller of personal data processing is:

Flex Rent a Car SARL

22 avenue de la république, Rades, Tunisia

privacy@flexrent.tn

Data Collected

Personal Data

  • Name, first name, email address, phone number
  • Date of birth and driver's license information
  • Billing address and payment information
  • Booking information (dates, locations, chosen vehicle)
  • Language preferences, rental options, vehicle favourites (stored locally on your device) and special requests
  • Account data: internal identifier, Google or Facebook sign-in (if used), booking history and admin status where applicable
  • Loyalty and referral programme: cagnotte balance (points), tier, transactions, referral codes and associated discounts

Technical Data

  • IP address, browser or device type, operating system, language and session identifiers
  • Pages visited, booking journey, visit duration, traffic sources and technical logs (including request ID for support)
  • Cookies, trackers and consent choices (necessary, analytics, marketing, preferences) saved via our GDPR banner
  • Aggregated or pseudonymised usage data via PostHog (product analytics and error tracking), only if you accept analytics cookies

Purpose of Processing

Your personal data is processed for the following purposes:

  • Management and processing of your vehicle bookings
  • Communication with you regarding your bookings and our services
  • Improvement of our services and your user experience
  • Compliance with our legal and regulatory obligations
  • Fraud prevention and transaction security
  • Sending marketing information (with your consent)
  • Managing the loyalty programme (cagnotte, tiers) and customer referral scheme
  • Validating your email address before final confirmation of a booking request

Legal Basis for Processing

The processing of your personal data is based on: (1) performance of a contract or pre-contractual measures, (2) compliance with legal obligations, (3) your consent, (4) our legitimate interests in improving our services and preventing fraud.

Payment data

Card payments are processed on the secure page hosted by ClicToPay (Tunisie Monétique). FlexRent does not store your full card number or CVV. We only keep transaction references (order ID, status, amount) needed to manage your booking. Bank transfers are handled via email instructions; we do not collect your online banking credentials.

Data Retention

We retain your personal data for as long as necessary for the purposes for which it was collected, and in accordance with applicable legal obligations. Booking data is retained for 5 years from the end of the rental, in accordance with accounting and tax obligations. If you delete your account, your profile is erased and past bookings are anonymised; certain accounting records may be kept as required by law.

Data Sharing

We never sell your personal data. We may share your information with:

  • Our technical subprocessors acting on our behalf and bound by confidentiality obligations
  • Competent authorities if required by law
  • Our business partners only with your explicit consent
  • ClicToPay for secure card payment processing
  • Google and/or Meta (Facebook) if you choose social login, under their respective policies
  • Salesforce for CRM and vehicle inventory management when needed to fulfil your rental

Main subprocessors

The following providers may process your data on our behalf:

  • OVH (web hosting, France) and MongoDB Atlas (database)
  • Resend (transactional emails: confirmation, bank transfer, password reset)
  • ClicToPay / Tunisie Monétique (online card payment)
  • PostHog (analytics and error tracking, subject to analytics cookie consent)
  • Google OAuth and Meta OAuth (optional social authentication)
  • Salesforce (CRM and vehicle inventory synchronisation)

Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or alteration:

  • SSL/TLS encryption for all data transmissions
  • Restricted access to personal data to authorized employees only
  • Regular backups and recovery systems
  • Continuous monitoring of our systems' security

Your Rights

Right of Access

You have the right to obtain a copy of your personal data that we hold.

Right to Rectification

You can request the correction of your inaccurate or incomplete personal data.

Right to Erasure

You can request the deletion of your personal data under certain circumstances.

Right to Object

You can object to the processing of your personal data for legitimate reasons.

Right to Data Portability

You can request the transfer of your personal data to another service provider.

To exercise your rights, please contact us at privacy@flexrent.tn

Exercising your rights online

If you have a logged-in account, you can request an export of your data (profile, bookings, loyalty, referrals) or account deletion from the FlexRent iOS app (privacy section) or by writing to privacy@flexrent.tn. Deletion removes your profile and anonymises your bookings; it is irreversible. You can change cookie preferences at any time via the banner on the website.

Cookies and trackers

Our website displays a GDPR-compliant consent banner. Necessary cookies (session, authentication, security) are always active. Analytics (PostHog), marketing and preference cookies are only set with your consent. You can accept, reject or customise your choices at any time. Refusing non-essential cookies may limit some features (statistics, personalisation) without blocking booking.

Cookie categories

  • Necessary: authentication, booking flow, security and storing your consent choices.
  • Analytics: audience measurement and service improvement via PostHog (pseudonymised data).
  • Marketing: personalised content and campaigns (if enabled).
  • Preferences: language, search filters and interface settings stored on your device.

Changes to Policy

We reserve the right to modify this privacy policy at any time. Any changes will be published on this page with a revised update date. We encourage you to regularly review this page to stay informed about how we protect your data.

For any questions regarding this privacy policy, please contact us at privacy@flexrent.tn