Privacy policy

TrovaCars is a service operated by Zentia Labs LLC, trading as TrovaCars by RaX Mobility, and acts as controller for the personal data collected directly on trovacars.com, its booking flows, conversational assistants, and related support channels.

This policy covers the processing carried out by TrovaCars as marketplace, broker, and booking platform. The selected rental company, payment provider, or other operational partners may process additional data under their own policies when needed to deliver the final service.

• Identity and contact data such as first name, last name, email, phone number, and country of residence.
• Search and booking data such as destination, dates, driver age, preferences, selected vehicle, extras, search history, and booking reference.
• Contracting data such as driver details, driving licence details, identity document data where required, and any supplier validation fields.
• Payment and billing data such as amounts, payment status, payment tokens or references, and billing details. Full card data is processed by the payment provider.
• Support and communication data such as website, email, WhatsApp, or automated assistant messages needed to resolve incidents.
• Technical data such as IP address, device, browser, language, cookies, access logs, security events, and usage metrics.

• To display real-time availability, pricing, and rental conditions.
• To create, confirm, modify, cancel, or manage a booking and related issues.
• To charge amounts, issue receipts, and handle refunds or adjustments.
• To answer pre-booking and post-booking support requests through human or automated support.
• To prevent fraud, abuse, identity misuse, and unauthorized activity.
• To comply with legal, tax, accounting, and regulatory obligations.
• To analyse usage and improve conversion, user experience, and service quality.
• To send marketing communications only where we have consent or another valid legal basis.

• Performance of pre-contractual steps or the contract when you search, request, or manage a booking.
• Compliance with legal obligations for accounting retention, complaints handling, and cooperation with authorities.
• Legitimate interests for security, fraud prevention, service improvement, and legal defence.
• Consent for non-essential cookies, some marketing communications, and other optional processing.

• Rental companies, brokers, and integrated partners when needed to quote, confirm, modify, or support a booking.
• Payment processors and fraud prevention providers to authorize charges, manage refunds, and verify transactions.
• Technology providers for infrastructure, storage, email, analytics, customer support, monitoring, and conversational technology used to operate chats or service automations.
• Professional advisers and public authorities where legally required or reasonably necessary for defence purposes.

TrovaCars does not sell personal data or disclose it for unrelated commercial purposes without a valid legal basis.

Some technology and operational providers may be located outside the European Economic Area. When that happens, TrovaCars relies on appropriate safeguards such as standard contractual clauses, adequacy decisions, or reasonable supplementary technical measures.

• Pre-booking queries and conversations: up to 12 months unless they lead to a booking or claim.
• Booking, payment, and incident data: during the contractual relationship and afterwards for the periods needed for accounting, tax, and legal defence purposes.
• Operational and support documentation: usually up to 3 years after case closure.
• Security and access logs: usually up to 12 months unless an investigation requires longer retention.
• Marketing data: until you withdraw consent or object to the processing.

• Encryption in transit and access controls based on need to know.
• Logging and monitoring of relevant security and stability events.
• System segmentation, backups, and reasonable continuity safeguards.
• Vendor review and limited access for authorized personnel only.

You can request access, rectification, erasure, objection, restriction, and portability where applicable. You may also withdraw consent at any time for processing based on consent.

If your request concerns data that the rental supplier handles as an independent controller, we may redirect or coordinate the request with that supplier as appropriate.

• Access to the data we process about you.
• Rectification of inaccurate or incomplete data.
• Erasure where the data is no longer needed or processing is not justified.
• Restriction or objection in the cases provided by law.
• Portability where technically and legally applicable.

TrovaCars is not directed to minors. To book, you must have legal capacity and meet the minimum age and licence requirements imposed by the supplier and applicable law.

You must provide truthful, current, and sufficient information so that we can compare offers and manage the booking correctly.

We may update this policy to reflect operational, regulatory, or product changes. The current version will always be published on this page together with its last update date.