Privacy Policy

IXRental provides car rental search, booking, payment, order lookup, cancellation request, transactional notice and customer support services for travelers.

This Privacy Policy explains how IXRental collects, uses, shares, stores and protects personal information when you visit the website, search for rentals, submit a booking, complete payment, manage an order, contact support or receive transactional notices.

For privacy questions, contact us at haiping.lu@ixrentacar.com.

This policy applies to the IXRental website, booking pages, order lookup pages, transactional messages, support forms, basic analytics and backend services related to website bookings.

Some services may be provided independently by third parties, such as payment providers, local fleet operators or suppliers, map services, protection or roadside assistance providers, vehicle manufacturer connected services, email providers or customer support systems. Those third parties may process your information under their own privacy policies.

If you sign or accept a separate rental agreement with a local supplier at pickup, that supplier may also act as an independent data controller for information it processes.

The information we collect depends on which features you use.

We may collect information in these ways:

1. You submit it directly, such as when searching, booking, paying, looking up an order, contacting support, uploading material or filling in a form.
2. It is generated automatically when you use the website, such as device, log, cookie, page event and error information.
3. It is returned by third-party services, such as payment providers, the rental system, local suppliers, email services, support systems, map services, analytics tools or risk providers.
4. It is created during rental fulfillment, such as pickup, return, cancellation, refund, incident, roadside assistance, fee dispute or notice send records.
5. Where applicable, it is obtained from vehicles, store devices, connected vehicle systems or self-service pickup and return systems.

Depending on the applicable law, our processing bases may include:

We share information only as needed for the purposes described in this policy.

We do not sell personal information. If future advertising or cross-site tracking could be considered a "sale" or "sharing" under certain laws, we will add required disclosures and opt-out controls before enabling it.

Online payment is usually processed by Stripe, PayPal or another payment provider. IXRental does not store complete card numbers, CVV codes or full payment credentials.

We may store payment reference numbers, payment session IDs, payment status, amount, currency, payment method type, refund status, refund reference and reconciliation records for booking confirmation, refunds, support, financial reconciliation, disputes and anti-fraud.

Payment providers process payment data under their own terms and privacy policies.

To assess pickup qualification and satisfy supplier or local legal requirements, we may process license issuing country, driver age, document type, document review status, document failure reason type and supplemental material status.

If online document upload, online check-in or identity verification is enabled, we may process driving licenses, passports, translations, document images, verification results or other sensitive materials. We use such materials only for document review, pickup qualification, booking fulfillment, dispute handling and legal compliance, and keep them out of ordinary analytics dashboards.

Support and analytics systems use document type, review status, failure reason type and material status rather than document numbers or images, unless there is a clear business need, access permission and audit trail.

Some vehicles, suppliers or self-service features may process vehicle location, remote unlock status, vehicle status, mileage, fuel or battery level, fault warnings, vehicle records, pickup or return photos or store onsite data.

This data may be used to:

1. Confirm pickup and return status.
2. Support self-service unlock and return.
3. Locate a vehicle, help find it or handle abnormal return.
4. Investigate incidents, damage, theft, traffic violations or fee disputes.
5. Maintain fleet safety and service quality.

If location, connected vehicle, driving record or remote control features are provided independently by a supplier or vehicle manufacturer, their privacy policy and vehicle use terms may also apply.

We may use cookies, localStorage, pixels, logs, SDKs or similar technologies for the following purposes:

On the production website, Google Analytics 4 is enabled by default and provided by Google LLC. It uses analytics cookies and a browser identifier to measure safe page paths and selected booking-funnel events. We do not send full URL queries, payment or order identifiers, search values or driver contact details to Google Analytics.

You can choose “No, thanks” in the data collection notice to stop future Google Analytics collection. The website then disables further analytics calls and attempts to remove Google Analytics cookies that it can access; data already sent cannot be withdrawn. Google may retain analytics data according to its policies and process it internationally, including outside your country or region.

We do not enable Google Ads, remarketing, Google Signals, advertising identifiers or advertising personalization. The browser preference remains until you clear site storage or change it through a future preference control.

We may send order contacts transactional notices directly related to a booking, such as booking confirmed, booking processing, payment failed, pickup reminder, cancellation request received, cancellation approved, cancellation rejected, manual review, support handling or receipt messages.

Transactional notices are used to provide the rental service and usually do not include marketing unsubscribe controls. They reference only order snapshots, payment snapshots, rule snapshots, cancellation processing snapshots or system configuration, and do not include document numbers, full phone numbers, card numbers, full payment credentials, raw free-text notes or internal error stacks.

Marketing, repeat-rental recommendations, promotions and non-essential review invitations are managed separately and will include consent, unsubscribe or preference controls where required by law.

We retain personal information only for as long as needed for the purposes described in this policy, unless legal, accounting, tax, dispute, regulatory or security needs require a longer period.

When information is no longer needed, we delete it, anonymize it or restrict it in accordance with applicable law.

IXRental serves cross-border travelers and may work with suppliers, payment providers, support systems, cloud services, email providers, analytics tools and technical providers in different countries or regions. Your information may be processed outside your country or region of residence.

We use reasonable safeguards required by applicable law, such as contractual commitments, data processing agreements, standard contractual clauses, access controls, encryption, sharing minimization or other compliance mechanisms.

We use reasonable technical and organizational measures to protect personal information, including access control, permission separation, logging and audit trails, encryption in transit, avoiding storage of sensitive payment information, data minimization, environment separation, alerts, backup and confidentiality obligations for personnel and service providers.

No internet transmission or storage method can be guaranteed completely secure. If a security incident may affect your rights, we will take notification, remediation and reporting steps required by applicable law.

Depending on your location and applicable law, you may have rights to:

1. Ask whether we process your personal information.
2. Access or receive a copy of your personal information.
3. Correct inaccurate or incomplete information.
4. Delete personal information.
5. Restrict or object to certain processing.
6. Withdraw consent.
7. Request data portability.
8. Opt out of certain marketing, sale, sharing or targeted advertising activities where applicable.
9. Complain to a regulator.

To protect booking and account security, we may need to verify your identity and order relationship before responding. Some information may not be immediately deleted because of contract performance, legal obligations, disputes, security or legitimate interests.

IXRental website booking services are intended for adults who can qualify as drivers or act as order contacts. We do not knowingly collect personal information from children below the applicable age requirement.

Driver age may be used to assess vehicle availability, fees and pickup qualification. Passenger minor information is not collected unless needed for booking fulfillment, child seats, incidents, safety or legal requirements.

The website, order pages or notices may contain links to third-party websites or services, such as payment providers, maps, local suppliers, insurance or roadside services, vehicle manufacturers, social media or partners. Third-party websites and services are not controlled by this Privacy Policy. Please review their privacy policies.

We may update this Privacy Policy due to legal, regulatory, product, technical, supplier or business changes. For material updates, we may notify users through the website, booking flow, notices or other appropriate methods.

Order-related processing is usually audited against the privacy policy version and order snapshot saved when the user booked or confirmed, unless applicable law requires another approach.

If you have questions about this Privacy Policy, our personal information processing or a rights request, contact us through the Help / Contact page or by email.

Current privacy contact: haiping.lu@ixrentacar.com