Privacy Policy

Last updated: February 2, 2026

Kish Rent A Car ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our car rental services in Muscat, Oman.

1. Information We Collect

Personal Information

When you make a reservation or use our services, we collect personal information that you voluntarily provide to us, including but not limited to your full name, email address, phone number, residential address, date of birth, driver's license number and expiration date, passport number (for international customers), and payment card information. This information is essential for processing your rental booking, verifying your identity and driving credentials, communicating with you about your reservation, and processing payments securely.

Automatically Collected Information

When you access our website, we automatically collect certain information about your device and browsing behavior. This includes your IP address, browser type and version, operating system, referring website addresses, pages viewed and time spent on pages, search terms used, and access times and dates. We use cookies, web beacons, and similar tracking technologies to collect this information, which helps us understand how visitors use our website and improve user experience.

Vehicle Usage Data

During your rental period, we may collect information about vehicle usage, including mileage, fuel consumption, GPS location data (if GPS tracking is enabled), and driving patterns for fleet management and safety purposes. This data helps us maintain our vehicles, ensure customer safety, and comply with legal requirements.

2. How We Use Your Information

We use the information we collect for various business purposes. We process your rental reservations and manage your bookings from start to finish. We verify your identity and driving credentials to ensure compliance with our rental policies and legal requirements. We communicate with you about your reservations, sending booking confirmations, pickup reminders, and important updates. We process payments and prevent fraudulent transactions through secure payment processing systems.

Your information also helps us improve our services by analyzing website usage patterns and customer preferences. We send you marketing communications about special offers, new vehicles, and promotions (with your consent, and you can opt out at any time). We maintain and improve our vehicle fleet based on usage data and customer feedback. We comply with legal obligations, including tax reporting, traffic violation processing, and responding to law enforcement requests when legally required.

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following circumstances:

Service Providers: We share information with trusted third-party service providers who assist us in operating our business, including payment processors (for secure transaction processing), email service providers (for sending booking confirmations and communications), SMS providers (for sending rental reminders and notifications), analytics providers (for website performance analysis), and cloud storage providers (for secure data storage). These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements: We may disclose your information when required by law, such as in response to court orders, subpoenas, or other legal processes. We may also share information to comply with traffic violation investigations, respond to law enforcement requests, protect our rights and property, investigate fraud or security issues, and enforce our Terms of Service.

Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include SSL/TLS encryption for data transmission, secure payment processing through PCI-DSS compliant payment gateways, encrypted storage of sensitive information, regular security audits and vulnerability assessments, access controls and authentication mechanisms, and employee training on data protection and privacy practices.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account.

5. Your Privacy Rights

You have certain rights regarding your personal information, and we are committed to honoring these rights in accordance with applicable data protection laws:

Access: You have the right to request access to the personal information we hold about you. We will provide you with a copy of your data in a commonly used electronic format.

Correction: You have the right to request correction of inaccurate or incomplete personal information. You can update most of your information directly through your account dashboard.

Deletion: You have the right to request deletion of your personal information, subject to certain legal exceptions (such as records required for tax purposes or ongoing legal matters).

Opt-Out: You have the right to opt out of receiving marketing communications from us at any time. You can unsubscribe by clicking the "unsubscribe" link in our emails or by contacting us directly.

Data Portability: You have the right to request a copy of your personal information in a structured, machine-readable format for transfer to another service provider.

To exercise any of these rights, please contact us at [email protected] or call +968 71 000 270. We will respond to your request within 30 days.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us remember your preferences, analyze website traffic, and personalize content.

Essential Cookies: These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies.

Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve website performance and user experience.

Marketing Cookies: These cookies track your browsing habits to deliver personalized advertisements and measure the effectiveness of our marketing campaigns.

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit your ability to use some features of our website. For more information, please see our Cookie Policy.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically, we retain booking and transaction records for 7 years (for tax and accounting purposes), driver's license and identification information for 5 years (for legal compliance), vehicle usage data for 3 years (for fleet management and insurance purposes), marketing communications preferences until you opt out or close your account, and website analytics data for 2 years (for performance analysis).

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention and disposal policies.

8. Children's Privacy

Our services are not directed to individuals under the age of 21. We do not knowingly collect personal information from children under 21. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our systems.

9. GPS Tracking and Location Data

Some of our rental vehicles are equipped with GPS tracking devices for security, theft recovery, and fleet management purposes. GPS tracking is optional, and you will be asked to provide explicit consent during the booking process.

How We Use GPS Data: GPS location data is used to recover stolen vehicles, provide roadside assistance to your exact location, optimize vehicle maintenance schedules, and verify vehicle return locations. GPS data is stored for 90 days and then automatically deleted unless required for an active insurance claim or legal investigation.

Your GPS Rights: You may opt out of GPS tracking by declining consent during booking. However, opting out may result in higher insurance deductibles (additional 100 OMR) and may limit our ability to provide roadside assistance. You can request deletion of your GPS data at any time by contacting us at [email protected].

10. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we are committed to transparency and prompt notification. We will notify affected customers within 72 hours of discovering the breach, in compliance with international data protection standards.

Notification Method: We will notify you via email to the address on file, SMS to your registered phone number, and a prominent banner on our website and mobile app. The notification will include the nature of the breach, types of data affected, steps we are taking to address the breach, and recommended actions you should take to protect yourself.

Your Actions After a Breach: If you receive a data breach notification from us, we recommend immediately changing your account password, monitoring your credit card statements for unauthorized charges, enabling two-factor authentication on your account, and contacting us at [email protected] with any questions or concerns. We will provide complimentary credit monitoring services for 12 months if financial information is compromised.

11. Automated Decision-Making and Profiling

We use automated systems and algorithms to make certain decisions that may affect your rental experience. You have the right to understand how these automated decisions are made and to request human review.

Dynamic Pricing: Our rental prices are determined by automated algorithms that consider factors such as demand levels, seasonal patterns, vehicle availability, booking lead time, and rental duration. While prices are algorithmically generated, you can contact us to request a manual price review if you believe the automated pricing is unfair or discriminatory.

Risk Assessment: We use automated systems to assess rental risk based on factors such as driver age, license history, booking patterns, and payment method. High-risk assessments may result in higher security deposits or additional verification requirements. You have the right to request human review of any automated risk assessment by contacting [email protected].

Customer Segmentation: We use automated profiling to segment customers into categories (VIP, Regular, New) for loyalty program benefits and personalized offers. You can opt out of profiling for marketing purposes at any time through your account settings.

12. Third-Party Service Providers

We work with trusted third-party service providers to operate our business. Below is a list of our key service providers and the data they access:

Payment Processing: Stripe (payment card processing) - Accesses your payment card information, billing address, and transaction amounts. Privacy Policy: stripe.com/privacy

Email Communications: SendGrid (transactional emails) - Accesses your email address and name for sending booking confirmations and notifications. Privacy Policy: twilio.com/legal/privacy

Cloud Storage: Amazon Web Services (data storage) - Stores encrypted copies of your booking records, identification documents, and vehicle photos. Privacy Policy: aws.amazon.com/privacy

Analytics: Google Analytics (website analytics) - Collects anonymized browsing data including pages viewed and time spent. Privacy Policy: policies.google.com/privacy

All service providers are contractually required to protect your data and use it only for the specific purposes we authorize. We conduct regular audits of our service providers' security practices.

13. International Data Transfers

Your information may be transferred to and processed in countries other than Oman, including countries that may not have the same data protection laws as your jurisdiction. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

Data Transfer Safeguards: We use Standard Contractual Clauses (SCCs) approved by international data protection authorities for transfers to countries without adequate data protection laws. For transfers to the United States, we ensure our service providers comply with relevant data protection frameworks. For transfers within the GCC region, we rely on regional adequacy decisions and contractual protections.

14. Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. When you leave our website, we encourage you to read the privacy policy of every website you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy. For significant changes, we may also send you an email notification or display a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of such changes.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Kish Rent A Car

Bowsher, Muscat, Oman

Email: [email protected]

Phone: +968 71 000 270

Hours: 8:00 AM - 8:00 PM (Daily)

Your Privacy Matters

At Kish Rent, we are committed to transparency and protecting your personal information. We will never sell your data to third parties, and we use industry-standard security measures to keep your information safe.

Chat with us on WhatsApp