Legal

Privacy Policy

Last updated: 18 July 2026

This page describes what personal information Tote Car collects, how we use it, and who we share it with. It's maintained by the Tote Car team and forms part of our Terms & Conditions.

1. What we collect

When you use Tote Car we collect:

Account information — name, email, phone, date of birth, driver's licence number and country, password (hashed).
Booking information — which relocations you request, dates, pickup times, and messages with rental operators.
Payment information — payment card details are handled by our payment processor (Stripe); we don't store full card numbers.
Technical information — IP address, device type, browser, and cookie identifiers used to keep you signed in and to improve the site.

2. How we use it

To operate the marketplace — matching drivers with relocations, confirming bookings and sending notifications.
To pass your contact details to a rental operator when you book their vehicle, so they can check you in.
To detect fraud, no-shows and misuse of the platform.
To improve the product, respond to support requests, and (with your consent) send relevant travel updates.

3. Who we share it with

Rental operators — your name, contact details and licence details, once you book their vehicle.
Service providers — hosting (Vercel), database (managed Postgres), email (Brevo/Resend), payments (Stripe), analytics. They process data on our behalf under contract.
Authorities — if required by law, subpoena or valid legal process.

We don't sell your personal information.

4. Cookies

We use a small number of essential cookies (to keep you signed in) and analytics cookies (to understand how the site is used). You can block cookies in your browser, though the site may not work fully without the essential ones.

5. How long we keep it

We keep account and booking data for as long as your account exists, plus a reasonable period afterwards to meet tax, accounting and fraud-prevention obligations. You can request deletion at any time (see below); some records must be retained where the law requires.

6. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal information, and to object to certain uses. To exercise them, email hello@totecar.com from the address on your account.

7. Security

We use encryption in transit (TLS), managed cloud infrastructure, and role-based access controls. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

8. Changes to this policy

We'll post any material changes on this page and update the "last updated" date at the top.

9. Contact

Questions? Email hello@totecar.com.