Privacy notice
Updated: 22-09-2026
This notice explains how the central FleetMetrics account service handles personal information. Rental companies are responsible for their own bookings and rental records; their details and rental privacy terms are provided in the relevant storefront and agreement.
Who operates this service
Cidades Mescladas · Tax number 515922765
Rua Dr. Teófilo Martins de Oliveira, 13, 2665-286 Malveira, Portugal
+351 964 090 282 · Portuguese mobile network rate
Information we use
For an account we use your email, password hash, verification records, account preferences and security records such as session identifiers, IP address and browser details. We store passkey public keys and related security metadata; your device keeps the private key, and FleetMetrics does not receive your fingerprint or face data. When you book or complete a profile, the relevant rental company also uses the contact, identity, driving-licence, company, booking and supporting-document information you provide. Creating an account does not automatically give access to historical rental records with a matching email.
Why we use it and the legal grounds
We use account and contact information to create and operate your account, answer your requests and take steps towards or perform a rental contract (GDPR Article 6(1)(b)). Security checks, abuse prevention and access logs protect the service and its users on the basis of legitimate interests (Article 6(1)(f)). Legally required rental, accounting and tax records are handled under Article 6(1)(c). Optional marketing uses your separate consent, where requested (Article 6(1)(a)). You can withdraw it without affecting earlier lawful processing. Creating an account does not subscribe you to marketing. Email is required to create and recover an account; additional booking information is required only where needed for the rental. Optional preferences can be left unset.
Who can receive information
Access is limited to authorized staff and service providers performing hosting, email delivery, storage, security and support functions. A rental company receives the profile and booking information needed for the rental you request. Payment, invoicing, signing and communications providers receive the information needed for the particular service used. We do not sell account information. Authorities, insurers or professional advisers may receive relevant records where legally required or needed to establish, exercise or defend a claim.
External services and international transfers
If you choose Google sign-in, Google processes the login and shares the profile information needed to authenticate you. Address assistance or maps may contact Google when those features are used. A payment page may open a payment provider’s service. These services have their own privacy and cookie notices. Some providers may process information outside the European Economic Area. You can contact us for the providers and locations applicable to your request and information about applicable transfer safeguards, including adequacy decisions or contractual safeguards where relevant.
How long we keep it
An email confirmation code expires after 10 minutes. After verification, the password-creation permission lasts another 10 minutes and can be used only once. Successfully consumed signup records are immediately stripped of their email and secrets; expired records are redacted by the daily maintenance job. Account information is kept while it is needed to provide the account. On a closure or erasure request, we assess which information can be erased and which must be retained for a legal duty or a specific unresolved claim. Rental, accounting, signed evidence and security records have different purposes and may need to outlast the account. Access is limited to those purposes, and protected backup copies may persist until their backup cycle ends. Contact us for the retention criteria applicable to a particular record.
Your rights and choices
Contact us at the email above to request access, correction, erasure, restriction or portability of your data, or to object to processing based on legitimate interests. Rights are subject to their legal conditions; we may need proportionate identity verification before releasing or changing information. We normally respond within one month and explain any permitted extension. You can also change account and notification preferences in settings. Account registration itself does not make decisions producing legal or similarly significant effects solely by automated means. Rental-specific identity, eligibility, vehicle-location or assessment processing is explained in the rental documentation and is not authorized merely by creating an account.
Profiles, drivers and account deletion
We store document details without photographs or scans. For individual profiles, identity and driving licence numbers and expiry dates, address, postcode and city are cleared after six calendar months without rentals, counted from the last actual return or initial collection. Active rentals and confirmed future reservations suspend this cleanup; signing in does not restart the period. Cleared fields must be entered again. Company, representative and roster driver details remain while the relationship justifies them; the company must update or remove the relationship. These people retain their data protection rights. You may delete your account in Security and privacy after identity confirmation. Access closes automatically. Current and future reservations are not cancelled. Information required for reservations, contracts, billing and other obligations remains separate from the profile with restricted access. A new account using the same email does not recover previous permissions. Backups follow their retention cycle; restores reapply erasures and revocations before reopening the service.
You may also lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD).