Legal
Privacy Policy
Last updated: October 23, 2026
This Privacy Policy explains how Hermes Rent a Car ("Hermes Cars", "we", "us") collects, uses and protects your information when you use the Hermes Cars mobile app and the website hermescars.com (together, the "Service"). The Service is operated with technology provided by Stennir.
1. Information we collect
Information you give us
- Account details: name, email address, phone number and password.
- Booking details: rental dates, pickup and return locations and vehicle choice.
- Driver verification: your driving licence details, used to confirm you are eligible to rent a vehicle.
- Payment information: card payments are processed securely by a third-party payment provider. Your full card number is sent directly to that provider and is not stored on our servers; we receive only limited details such as the card type, the last four digits and the payment status.
- Messages you send us through support or contact forms.
Information collected automatically
- Location: with your permission, the app uses your device's location to show nearby branches, cars and pickup points. You can turn this off at any time in your device settings. We do not track your location in the background.
- Usage and device data: app interactions, device type, operating system version and app version, used to keep the Service working and improve it.
- Diagnostics: crash reports and error logs, used to find and fix problems.
Loyalty program
- If you take part in our loyalty program, we keep a record of your rentals, points, tier and rewards.
2. How we use your information
- To create and manage your account.
- To process, confirm and manage your rentals, verify driver eligibility and take payments.
- To show nearby locations and vehicles.
- To run the loyalty program.
- To contact you about your bookings and respond to support requests.
- To keep the Service secure, prevent fraud and abuse, and fix errors.
- To understand how the Service is used and improve it.
- To comply with legal obligations.
We do not sell your personal information. Advertising measurement through Meta can connect permitted activity on our Service with activity on Meta's services, subject to your advertising choices.
3. Sharing your information
We share information only with:
- Payment processors, to process your card payments securely.
- Service providers who help us run the Service, such as cloud hosting and database providers, error monitoring, analytics, email delivery and mapping services. They may use your information only to provide services to us.
- Google Analytics: the Google tag measures website and customer-app page visits using browser and device information to help us understand use of the Service.
- Meta Platforms (Facebook and Instagram): when you accept advertising cookies — or where the law does not require us to ask and you have not refused — the Meta Pixel shares page visits, vehicle identifiers, availability searches, checkout starts, saved reservation actions, confirmed card-payment amounts and currency, browser/device information, IP address and advertising cookies. Meta uses these for ad measurement and ad optimization. We do not send customer names, emails, phone numbers, licence documents, delivery addresses or card details as event parameters.
- Authorities, when required by law or to protect our rights, our customers or the public.
- A successor business, if Hermes Cars is involved in a merger, acquisition or sale of assets.
3a. Advertising measurement and your choices
If you visit us from a region whose law requires consent for advertising cookies (such as the European Economic Area, the United Kingdom or Switzerland), we ask you first: the Meta Pixel stays off until you accept, and declining changes nothing about how the Service works for you. Elsewhere, the pixel runs without a banner.
You can change your choice at any time — use the Cookie settings button below to review or withdraw your consent. Withdrawal applies straight away.
We keep your choice on this browser with a visitor reference, date, detected region and the version of the notice you saw, retaining acceptance evidence after withdrawal. Blocked actions are not sent later if you accept. Browser privacy controls and applicable advertising opt-outs are also respected.
4. Data retention
We keep your information for as long as your account is active and as needed to provide the Service, meet legal, tax and accounting requirements, and resolve disputes. After that, we delete or anonymise it.
5. Your rights and choices
- You can view and update your account details in the app.
- You can withdraw location permission at any time in your device settings.
- You can ask us to access, correct or delete your personal data, or delete your account, by contacting us at the address below. Depending on where you live, you may have other rights under local law, such as the GDPR.
6. Security
We use reasonable technical and organisational measures, including encrypted connections (HTTPS), to protect your information. No method of transmission or storage is completely secure.
7. Children
The Service is not directed to children under 18, and we do not knowingly collect personal information from them.
8. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date.