1. Who We Are

Sunshine Car Rental (“we”, “us”, “our”) is a locally owned vehicle rental business based in Oranjestad, Aruba. We operate from Bushiri 33-A and can be reached at reservations@sunshinearuba.com or +297-732-0111.

We are the data controller for the personal information collected through this website and in connection with our rental services.

2. What Information We Collect

Information you give us directly

When you make a reservation, submit an inquiry form, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Preferred pickup and return dates and times
• Vehicle preference
• Any other details you choose to include in your message

When you pick up a vehicle in person, we also collect:

• Driver’s license number and expiry date
• Date of birth (to verify minimum age requirements)
• Passport or government-issued ID number
• Payment card details (processed securely; we do not store full card numbers)
• Home address or country of residence

Information collected automatically

When you visit our website, basic technical information may be collected automatically, including:

• IP address
• Browser type and version
• Pages visited and time spent on each
• Referring website or link

This information is collected through standard server logs and analytics tools and is used only to understand how our site is used and to improve it.

3. How We Use Your Information

We use the information we collect to:

• Process and confirm vehicle reservations
• Communicate with you about your booking, including confirmation, reminders, and follow-up
• Verify your identity and driving eligibility at pickup
• Process payments and manage deposits
• Meet our legal and regulatory obligations under Aruban law
• Respond to your questions and inquiries
• Improve our website, services, and customer experience
• Send occasional service-related updates (not marketing, unless you have opted in)

We do not use your personal data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your personal data on the following grounds:

• Contract performance — processing is necessary to fulfill your rental agreement or to take steps at your request before entering into one
• Legal obligation — we are required by Aruban law to verify driver identity, maintain booking records, and comply with tax and regulatory requirements
• Legitimate interests — we have a legitimate interest in operating and improving our business, provided that interest does not override your rights
• Consent — where we rely on your consent (for example, for optional marketing communications), you may withdraw it at any time

5. Who We Share Your Information With

We do not sell your personal data. We do not share it with third parties for their own marketing purposes.

We may share your information with:

• Payment processors — to handle transactions securely
• Insurance providers — where required to validate coverage for your rental period
• Government or law enforcement authorities — where required by law, court order, or to protect the safety of our staff or other parties
• Website and IT service providers — who help us operate our site and booking systems, under strict confidentiality agreements

6. How Long We Keep Your Information

We retain personal data for as long as necessary to fulfill the purposes it was collected for, including to meet legal, accounting, and reporting requirements.

• Reservation and rental records: 7 years (in line with Aruban tax and commercial record-keeping requirements)
• Inquiry and contact form submissions not resulting in a rental: up to 2 years
• Website analytics data: up to 14 months

When retention periods expire, we securely delete or anonymize your data.

7. Cookies

Our website may use cookies and similar technologies to:

• Remember your preferences during a visit
• Understand how visitors navigate the site (analytics)
• Enable contact and booking form functionality

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect how parts of the site function.

We do not use advertising or tracking cookies.

8. International Data Transfers

If you are visiting from the European Union, the European Economic Area, or the United Kingdom, your data may be transferred to and processed in Aruba. Aruba is not currently recognized as providing an adequate level of data protection under EU law. Where such transfers occur, we rely on standard contractual mechanisms or other appropriate safeguards to protect your information.

9. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data, subject to legal retention obligations
• Restriction — ask us to limit how we use your data in certain circumstances
• Portability — receive your data in a structured, commonly used format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — where we rely on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at reservations@sunshinearuba.com. We will respond within 30 days. We may need to verify your identity before processing your request.

10. Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Payment transactions are processed through secure, encrypted channels. We do not store full payment card numbers.

No method of transmission over the internet is completely secure. While we do our best to protect your data, we cannot guarantee absolute security.

11. Children

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted personal information to us, please contact us and we will delete it promptly.

12. Links to Other Websites

Our website may contain links to third-party sites. This privacy policy applies only to our own website and services. We are not responsible for the privacy practices of any external sites.

13. Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

14. Contact and Complaints

For any questions about this policy or how we handle your personal data, contact us at:

Sunshine Car Rental
Bushiri 33-A, Oranjestad, Aruba
reservations@sunshinearuba.com
+297-732-0111

If you are located in the EU or EEA and believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.