Privacy and data handling
Privacy policy
This pilot privacy notice explains the information used to evaluate and manage rental requests.
This notice requires final legal and operational review, including retention schedules and third-party provider details.
Information collected
- Name, email, phone, age, licence jurisdiction, class, and years held
- Vehicle, dates, pickup location, custom delivery address, trip notes, and consent records
- Private PDF or image verification documents uploaded through the manage-booking portal
- Payment status and manually recorded payment evidence, but no card details through this website
- Technical evidence such as time, user agent, and privacy-safe hashed IP information
- Email address, vehicle interest, consent wording, and consent evidence when you voluntarily join the GSQ Vehicles update list
- Limited first-party interaction analytics, such as outbound Turo booking clicks, the related vehicle, and the GSQ Vehicles page where the click occurred
Why it is used
Information is used to assess availability and eligibility, communicate with renters, prepare and administer rental agreements, arrange pickup, support incidents, prevent abuse, meet legal or insurance obligations, and maintain an audit trail. Marketing opt-in information is used to maintain the GSQ Vehicles update list. Limited interaction analytics are used to understand which vehicles and booking links visitors use.
Private documents
Verification files are private, access-controlled, and retained only as operationally required. Files are stored in the private database, are not public assets, and require a valid customer or administrator session to download.
Sharing
Information may be shared only as operationally required with insurers, payment providers, communication providers, legal or accounting advisers, law enforcement, roadside providers, or other parties authorized by law or the renter.
Retention
Booking and verification data should be kept only as long as reasonably necessary for operations, insurance, disputes, accounting, legal obligations, and fraud prevention. A final retention schedule must be approved before launch.
Security
The application uses encrypted transport, signed HTTP-only sessions, protected APIs, private document storage, file-type and signature validation, request rate limits, and audit events. No system can guarantee absolute security.
Access and questions
Contact bookings@gsqvehicles.com or call 613-315-4849 for privacy questions or access/correction requests.