Privacy Policy

1. Information We Collect

We collect several types of information to provide and improve our car rental services:

1.1 Personal Information You Provide

When you make a booking, contact us, or register on our website, you may provide:

• Identity Information: Full name, date of birth, nationality
• Contact Details: Email address, telephone number, postal address
• Payment Information: Debit card details (we do not require credit cards), billing address
• Driver Documents: Driving licence number, passport number, International Driving Permit (IDP) details
• Booking Details: Pickup and drop-off locations (such as SSR Airport MRU, Grand Baie, Flic-en-Flac, Port Louis, or your hotel), rental dates, vehicle preferences
• Additional Information: Child seat requirements, GPS rental, additional driver details, special requests

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages viewed, time spent on pages, links clicked, search queries, referring website
• Location Data: Approximate geographic location based on your IP address
• Cookies and Tracking Technologies: We use cookies to enhance your browsing experience. See our Cookie Policy below for details.

1.3 Information from Third Parties

We may receive information from:

• Booking Partners: If you book through an affiliate or travel agency
• Payment Processors: Transaction confirmation and fraud prevention data
• Insurance Providers: Claims information related to our full insurance coverage

2. How We Use Your Information

4Drive Mauritius uses your personal data for the following purposes:

2.1 To Provide Car Rental Services

• Process your booking and confirm your reservation
• Arrange vehicle pickup at SSR Airport, Port Louis, Grand Baie, Flic-en-Flac, or hotel delivery across Mauritius
• Verify your driver's licence and identity documents
• Process payments by debit card or cash
• Provide roadside assistance and customer support
• Manage our no deposit and no credit card policy

2.2 To Communicate with You

• Send booking confirmations, payment receipts, and rental agreements
• Provide pickup instructions and vehicle handover details
• Notify you of changes to your reservation or our services
• Respond to your enquiries and customer service requests
• Send important updates about driving in Mauritius (left-hand traffic, road conditions, speed limits)

2.3 To Improve Our Services

• Analyse website usage to enhance user experience
• Understand customer preferences for vehicle types (automatic small cars, compacts, SUVs for Chamarel and Black River Gorges)
• Monitor and improve our website performance
• Develop new services and features

2.4 For Marketing and Promotional Purposes

• Send promotional offers and special deals (with your consent)
• Provide information about seasonal discounts and new vehicle options
• Share travel tips for exploring Mauritius by car (beaches, Chamarel seven-coloured earth, Grand Bassin, Ile aux Cerfs)

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

2.5 For Legal and Security Purposes

• Comply with Mauritian law and regulations
• Prevent fraud and ensure payment security
• Protect our rights, property, and safety
• Resolve disputes and enforce our Terms and Conditions
• Manage insurance claims under our full insurance coverage

3. Legal Basis for Processing (GDPR Compliance)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following lawful grounds:

• Contractual Necessity: To fulfil our car rental agreement with you
• Legitimate Interests: To improve our services, prevent fraud, and ensure customer satisfaction
• Legal Obligation: To comply with Mauritian and international laws
• Consent: For marketing communications and optional data collection (you may withdraw consent at any time)

4. How We Share Your Information

4Drive Mauritius does not sell your personal data to third parties. We may share your information with:

4.1 Service Providers

• Payment Processors: To securely process debit card and cash payments
• Insurance Companies: To provide full insurance coverage included in every rental
• IT and Hosting Providers: To maintain our website and booking system
• Customer Support Tools: To manage enquiries and provide assistance

4.2 Legal Authorities

We may disclose your information to law enforcement, government agencies, or courts when required by Mauritian law or to protect our legal rights.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new entity, subject to the same privacy protections.

4.4 With Your Consent

We may share your data with third parties when you have given explicit permission, such as adding an additional driver to your rental.

5. International Data Transfers

4Drive Mauritius operates in Mauritius, and your personal data may be processed and stored on servers located outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules or other approved mechanisms

By using our services, you consent to the transfer of your data to Mauritius and other countries where our service providers operate.

6. Data Retention

We retain your personal information only as long as necessary to fulfil the purposes outlined in this Privacy Policy:

• Booking and Rental Data: Retained for up to 7 years to comply with Mauritian tax and accounting laws
• Payment Information: Debit card details are not stored; only transaction confirmations are kept
• Marketing Data: Retained until you opt out or request deletion
• Website Usage Data: Anonymized after 24 months for statistical analysis

After the retention period, we securely delete or anonymize your data. You may request earlier deletion by contacting us (see Section 8).

7. Your Data Protection Rights

Under GDPR and Mauritian data protection laws, you have the following rights:

7.1 Right to Access

You can request a copy of the personal data we hold about you.

7.2 Right to Rectification

You can ask us to correct inaccurate or incomplete information.

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data, subject to legal retention requirements.

7.4 Right to Restriction of Processing

You can ask us to limit how we use your data in certain circumstances.

7.5 Right to Data Portability

You can request your data in a structured, machine-readable format to transfer to another service provider.

7.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

7.7 Right to Withdraw Consent

If we process your data based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

7.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you can lodge a complaint with the Data Protection Office of Mauritius or your local supervisory authority in the EU.

To exercise any of these rights, please contact us at:

Email: [email protected]
We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

4Drive Mauritius uses cookies and similar technologies to enhance your browsing experience:

8.1 What are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences, analyse site traffic, and improve functionality.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the booking system and website security
• Performance Cookies: Collect anonymous data on page views and user behaviour
• Functional Cookies: Remember your language preference (English or French) and location settings
• Marketing Cookies: Track your interests to show relevant ads (with your consent)

8.3 Third-Party Cookies

We use services like Google Analytics to understand website traffic. These third parties may set their own cookies. You can learn more about their privacy practices:

• Google Analytics: Google Privacy Policy

8.4 Managing Cookies

You can control or delete cookies through your browser settings. However, disabling essential cookies may affect your ability to book a vehicle or access certain features.

Most browsers accept cookies by default. To manage cookies:

• Chrome: Settings > Privacy and Security > Cookies
• Firefox: Options > Privacy > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Privacy > Cookies

9. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• Secure Payment Processing: Debit card details are processed through PCI DSS-compliant payment gateways
• Access Controls: Only authorized 4Drive staff can access your personal information
• Regular Security Audits: We conduct periodic reviews to identify and address vulnerabilities
• Data Minimization: We collect only the information necessary to provide our car rental services

Despite our efforts, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your booking reference and account details.

10. Children's Privacy

4Drive Mauritius does not knowingly collect personal information from children under the age of 18. Our car rental services are intended for adults aged 21 and over, in line with Mauritian driving laws.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will delete the information.

11. Links to Third-Party Websites

Our website may contain links to external sites, such as:

• Tourist information about Grand Baie, Chamarel, Black River Gorges, Ile aux Cerfs
• Hotel booking platforms in Flic-en-Flac, Tamarin, Belle Mare
• Travel blogs about driving in Mauritius and exploring Le Morne peninsula

We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

4Drive Mauritius may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of significant changes by:

• Posting the updated policy on our website with a new effective date
• Sending an email notification if you have an active booking or subscription

We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how 4Drive Mauritius handles your personal data, please contact us:

14. Specific Information for EU Residents

If you are located in the European Union, you have additional rights under GDPR:

• You can appoint a representative to act on your behalf for data protection matters
• You have the right to object to automated decision-making, including profiling
• You can request details about international data transfers and safeguards in place

The supervisory authority in Mauritius is the Data Protection Office. For EU-specific concerns, you may contact your national data protection authority.

15. California Privacy Rights (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal data we collect
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt out of the sale of personal data (note: 4Drive does not sell personal data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, please email [email protected] with "CCPA Request" in the subject line.