Privacy policy

The short version

We are a self-drive vehicle hire company, so we have to know who you are before we hand you a car. That means we collect more about you than a normal website would: your driving licence, proof of your address, your date of birth, and a photograph of your licence. We use it to check you are eligible to hire, to run your booking, and to meet our legal obligations. We do not sell it, and we do not use it for anything you would not expect from a car hire company.

This policy explains all of it. If you only want to know about cookies, that is in the separate cookie policy.

1. Who we are

SNS Driven Ltd (trading as SNS Driven) is the data controller for the personal data described in this policy. That means we decide what is collected and why, and we are responsible for it.

We are not required to appoint a Data Protection Officer and we have not appointed one. The people responsible for data protection are the company's directors, reachable at enquires@snsdriven.com.

2. What this policy covers — and the one thing it does not

This policy covers:

• snsdriven.com, our website, including the private booking page we send to approved customers.
• Our eligibility form, hosted on Google Forms.
• Everything that happens after you book — your rental agreement, the vehicle handover, the vehicle itself while you have it, and our emails to you.

Our checkout runs on a different system. When you book, you are handed to checkout.snsdriven.com, which is our storefront running on Booqable, a booking platform we use under contract. We are still the data controller for what happens there, and this policy still describes it — but it is a separate website with its own cookies and its own cookie settings. A choice you make about cookies on snsdriven.com does not carry across to the checkout, because they are separate sites as far as your browser is concerned. The cookie policy explains what each one does.

3. What we collect, and why

3.1 When you visit the website

Today, almost nothing. Our website sets no cookies at all and runs no analytics or advertising scripts. (Verified live 2026-09-02: no Set-Cookie header, no tracking scripts on either page.)

Our host, Vercel, keeps standard server logs including your IP address, for security and to keep the site running. Our pages load fonts from Google Fonts and a stylesheet library from a content delivery network, which means those providers see your IP address when a page loads. No cookies are set by either.

This will change if and when we start advertising. We intend to add a Meta (Facebook) advertising pixel. It will not run unless you agree to it first. See the cookie policy.

3.2 When you fill in the eligibility form

This is the bulk of what we hold, and it is the most sensitive.

The form requires you to sign in with a Google account. That is how Google's file-upload feature works. It means Google records that your account submitted a form to us, and the email address on that account is recorded alongside your answers.

We read every application ourselves. No automated decision is made about you. A person looks at your application and decides.

3.3 When you book

Your booking is taken through our Booqable-powered checkout. We collect your name, email address, phone number, billing address, the vehicle and dates you chose, your booking reference, and the record of your payment. Your card details are handled by our payment provider — see section 6.

We also store your driving licence number, date of birth, licence issue date and NI number or DVLA check code against your customer record in Booqable, so they can appear on your rental agreement.

3.4 Before and during your hire

• A DVLA licence check. Before we release a vehicle we check your licence with the DVLA. This tells us whether your licence is valid and whether it carries penalty points or disqualifications. See section 4 — this is a special category of data and we treat it separately.
• Your original documents at collection. We check your original photo licence and a proof of address dated within 90 days.
• A vehicle condition record. Odometer, fuel level, condition and photographs at collection and at return, signed by you and by us.
• Vehicle telematics. Our vehicles carry a tracking and immobilisation device. See section 5.

3.5 When you contact us

We keep the messages you send us, by email, WhatsApp, Instagram or phone, and our replies. WhatsApp and Instagram are Meta's services and their own privacy terms apply to messages you send through them.

4. Driving licence checks and penalty points

When we run a DVLA licence check we may learn that you have penalty points, endorsements or a disqualification. Under UK data protection law that is criminal offence data, and the law puts extra conditions on it beyond ordinary personal data.

We use it for one purpose only: to decide whether you meet our published eligibility rule (a full licence with no more than six penalty points). We do not share it with anyone except our insurer, if a claim requires it.

We hold the outcome of the check only — the date it was done, who ran it, and whether it passed. We do not keep the check code you gave us, your National Insurance number, the number of points, an offence code or an endorsement date. The code is erased from our records once the check has been run.

5. Vehicle tracking

Our vehicles are fitted with a telematics and immobilisation device. Your rental agreement (clause 6(g)) tells you this before you sign.

What it records: the vehicle's location and movement while you have it, including a history of the journeys made during your hire. The device also records how the vehicle is being driven — its speed, the speed limit where it is, and acceleration, cornering and braking — and tells us when the ignition is switched on, when the vehicle moves, if it leaves an area we have set, and if its battery is disconnected.

What we use it for:

• recovering a vehicle that has been stolen or taken without authority;
• immobilising a stationary vehicle where we reasonably believe it is at risk, has been taken without authority, or is being used in serious breach of your agreement;
• investigating incidents, damage, fines and penalty notices;
• identifying serious misuse of the vehicle during your hire — for example use on a track or in a speed test, which your agreement prohibits, or driving that puts the vehicle or other road users at risk.

About the driving score, and we would rather tell you than let you find out. The system does produce a score for each journey, automatically, and there is no setting that turns that off. We do not use it. We do not run the report that collects those scores together — we never have, not once — and we do not look at how you drove on a hire where nothing was flagged. What we act on is an alert, and we have deliberately narrowed what can raise one. On 5 September 2026 we switched off every alert based on speed against the limit. What still alerts us is a sudden stop — which is evidence of an incident — together with the security alerts the tracker exists for: the vehicle moving when it should not, being towed, leaving an area we have set, or its battery being disconnected. A person reads every alert and decides what to do. Nothing about your hire is decided automatically by the system.

We should be equally clear about what we could not switch off. The tracking system still compiles a score for each journey by itself, including a count of speeding incidents, and there is no setting that stops it. That record sits in the tracking provider's system, and they hold it in their own right — see below. We do not use it, we do not run the report that collects it, and we have never generated that report. But we would rather tell you it exists than have you discover it.

What we do not do with it: we do not use it for marketing, we do not price or profile you with it, and we do not sell it or share it with advertisers. We do not use your location to check your mileage or to apply any charge under your rental agreement — mileage comes from the odometer reading taken at handover and return.

If we act on it: where what the device records leads us to end your hire under clause 14(a) of the rental agreement, or to immobilise the vehicle under clause 6(g), we will tell you what the data showed and you can put your side of it to us. You can also ask us for a copy of the telematics data relating to your hire.

Who looks at it, and when. Not routinely, and not out of curiosity. We look when there is a specific reason: the vehicle is reported or thought to be stolen or taken without authority; it has not come back and we cannot reach you; you or someone else needs help at the vehicle's location; it appears to be leaving the UK without our written consent; an alert about serious misuse needs a decision; or the police, an insurer, or a dispute about damage or a penalty requires it. Access to the system is limited to named people at SNS Driven — currently one, and we keep our own record of every occasion on which we look and why.

Who operates it — and this part matters, because they are not simply working for us. The system is operated by Global Telemetrics Limited (company number 6965076, globaltelemetrics.com). In their own privacy policy they state that they are the data controller for this data. That means they hold it in their own right and on their own terms, not only on our instructions, and some of your rights in relation to it run against them rather than against us. Their privacy policy is at terms.globaltelemetrics.com/privacy-policy/ and we would encourage you to read it. On their published terms they:

• keep location history available in the account for the previous six months, archive it after that, and keep certain records for more than six years;
• release archived data within 28 working days of a written request;
• share data with the police, with insurance companies, including pay-as-you-drive insurance programmes, with installers and dealers, and with vehicle repatriation teams.

We do not control those retention periods and we cannot promise you a shorter one. We are telling you what they are rather than describing a deletion we are not in a position to carry out.

Beyond them, we share this data only with the police or another authority acting lawfully, our insurer or broker in relation to a claim, and a recovery agent instructed to recover a specific vehicle.

How long we keep it. Two separate answers, because there are two copies.

• In the system: for as long as Global Telemetrics keeps it, as set out above. It is not ours to delete.
• Anything we take out of it: nothing is copied out of the system when your hire ends. If something happens during your hire — an accident, a claim, a penalty, a dispute about damage — we take out only the part of the record that relates to it and keep that with the file, for as long as we keep the file.

If you ask us to delete your hire's history early and nothing is outstanding on your booking, we will ask Global Telemetrics to do it and tell you what they say, including if the answer is no.

6. Who we share your data with

We do not sell your personal data. We share it with the following, and only for the purposes described.

About the Trustpilot invitation: after your hire ends, we send you an email and copy Trustpilot's automated invitation service on it. Trustpilot reads your name, email and booking details from that email and sends you an invitation to review us. We invite everyone — we do not pick who gets asked based on how the hire went. You can ignore the invitation, and you can ask us not to send it.

About Meta, in more detail than most policies give you. There are two separate things here and they work differently.

The first is the advertising pixel on our website. It has been live since 3 September 2026 and it does not run at all unless you press Accept on our cookie banner — not "runs but does nothing", the code is never fetched from Meta until you accept. It reports which of our pages you looked at and whether you clicked through to our eligibility form. It does not send Meta your name, your email address, your licence details or anything you type into our site. For what the pixel collects, Meta and we are joint controllers. Full detail, including the two cookies it sets and how long they last, is in our cookie policy.

The second is not switched on yet, and we are describing it here before it starts rather than after. When it is, our booking system will tell Meta that a booking completed, so we can see whether our advertising works. That message will include your name, email address and phone number scrambled into an unreadable code (a SHA-256 hash) before it leaves our systems — Meta never receives a readable address. It will be sent only for bookings we have already checked and accepted, never for an application we declined, and it will never include your licence number, date of birth, address or anything from your eligibility form. We will update the date on this policy when it starts.

7. Where your data goes

Most of it stays in the UK or the European Economic Area. Some of our providers are based in, or use servers in, the United States. Where personal data goes outside the UK we rely on the UK Extension to the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. If you want to know which applies to a particular provider, ask us and we will tell you.

8. How long we keep it

9. How we keep it safe

Your application, your documents and our booking records are held in our Google Workspace account, and are reached over encrypted connections. Access is limited to the company's directors and to anyone they specifically authorise to review applications and run bookings. Your uploaded documents are not attached to emails or copied out of that account.

Our checkout and our payment processing are handled by specialist providers — Booqable and Stripe. We never see or store your full card number; it goes directly to Stripe. We have deliberately not repeated any security certification those companies advertise, because we have not independently verified it and we would rather claim nothing than claim something we cannot stand behind.

No system is perfectly secure. If a breach happens that puts you at risk, we will tell you and we will tell the ICO, as the law requires.

10. Our lawful bases

11. Your rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is wrong;
• delete it, where we do not have a reason to keep it — note that once you have hired from us we generally do have a reason, for six years;
• stop or limit what we do with it;
• hand it over to you or someone else in a machine-readable format, where it is data you gave us and we use it to perform our contract;
• stop processing based on legitimate interests, including vehicle tracking — although we would not be able to hire you a vehicle if you objected to tracking during a hire;
• stop sending you marketing, at any time, no reason needed.

Email enquires@snsdriven.com. We will reply within one month. We do not charge for this.

Where we rely on your consent — cookies, and the advertising pixel if we add one — you can withdraw it at any time, and it is as easy to withdraw as it was to give.

12. Cookies

See the separate cookie policy.

13. Complaints

If you are unhappy with how we have handled your data, tell us first — email enquires@snsdriven.com and we will look into it.

If you are still unhappy you can complain to the Information Commissioner's Office, the UK regulator for data protection:

You can complain to the ICO without telling us first.

14. Changes to this policy

If we change this policy we will update the date at the top. If we change something that materially affects you — a new purpose, a new recipient, a new tracking technology — we will tell you rather than relying on you to re-read it.