Privacy Policy

The company behind this site

paphosdrive.com is run by Paphos Rides, whose office is at Poseidonos Avenue 24, Kato Paphos, 8042 Paphos, Cyprus. For everything described on this page, Paphos Rides is the data controller. Cyprus is a member of the European Union, so the General Data Protection Regulation applies to this site directly, together with the Cypriot law that gives it effect. Questions about this notice go to [email protected].

What a search leaves with us

Comparing rental cars needs very little about you. A search handles the pickup point you select, whether that is Paphos town, the airport or a hotel, the dates and times of the hire, the driver age you enter, and whichever filters you apply, for instance automatic gearbox, hotel delivery or debit card accepted. Those details describe a trip rather than a person, and they are used only to fetch matching cars.

You are not asked to create an account, and no profile of you is built up across visits. If you send an enquiry or leave a review, we receive what you typed: usually a name, an email address and the message itself, plus a telephone number if you chose to include one.

What never reaches us

The rental itself is completed with the supplier, not on this website. Card details, meaning the number, the expiry and the security code, go straight into the supplier's own booking page or across the counter in Paphos, and no copy of them touches our systems. The same is true of your driving licence, your passport or identity card, and any scan of them. The supplier looks at those documents when you collect the car, because its own contract and insurer require it, and whatever it keeps falls under its privacy notice rather than ours.

Server logs, cookies and analytics

Like any website, ours writes a short log line for each request: which IP address made it, which browser, which page, and when. We also look at aggregate analytics, such as which pages get read and where visitors drop off, so we know what to improve. The cookies behind these functions, their lifetimes and the way to refuse them are set out in a separate notice.

Read the Cookie Policy

The legal grounds we rely on

Forwarding your search and your contact details to the supplier you picked is something you requested, and it is a preparatory step towards a rental agreement with that supplier. Keeping the site secure, blocking automated abuse and measuring how the pages perform rest on our legitimate interests, weighed against your privacy. Optional cookies are set only with your consent, which you can take back whenever you like. When a Cypriot or European legal duty requires a record to be retained or disclosed, that duty is the basis.

Your rights under the GDPR

These rights come with the GDPR and belong to every visitor, not only to residents of Cyprus:

• Access: confirmation of whether we process data about you, and a copy of it.
• Rectification: inaccurate data corrected and incomplete data completed.
• Erasure: your data deleted where we no longer have a lawful reason to keep it.
• Restriction: processing paused while a question about accuracy or grounds is resolved.
• Portability: the data you gave us returned in a machine-readable format, or passed to another provider.
• Objection: a stop to processing based on legitimate interests, including direct marketing.
• Withdrawal: consent taken back at any time, without affecting what was done before.
• Complaint: a complaint to a supervisory authority, whether or not you have written to us first.

Send a request to [email protected] and we will respond within one month at no charge. The supervisory authority for Cyprus is the Office of the Commissioner for Personal Data Protection in Nicosia, and you can also contact the data protection authority of the EU country in which you live or work.

Who else receives your data

The supplier whose car you selected receives your enquiry, since only that company can hold the vehicle. LocalRent, the booking platform that supplies the listings and the reservation window, processes it on our instructions. Our hosting provider stores the site and our email provider carries the correspondence. A public authority receives data only where the law requires it. Personal data is never sold, and nobody receives it from us for their own advertising.

Wherever we can, processing stays inside the European Economic Area; a transfer beyond it rests on an adequacy decision of the European Commission or on its standard contractual clauses.

How long we keep it

Search parameters are discarded once the results have been shown and are not stored against you. Enquiries and correspondence are held while the matter is open and for up to eighteen months afterwards, in case a question about the booking comes back. Server logs are deleted or anonymised within six months. A review you publish stays on the site until you ask us to take it down.

Changes to this notice, and contact

This notice is rewritten whenever the site, one of the providers it relies on, or the applicable law moves on. The date beneath the title is the version in force. Anything about personal data on paphosdrive.com can be raised with Paphos Rides at [email protected], or by post to the address above.