Privacy Policy
Global Privacy Policy
This policy was last updated on: April 20, 2016
At Enterprise Holdings, Inc., through our subsidiaries operating under the Enterprise Rent-A-Car, Truck Rental, Car Sales, RideShare, and CarShare, Alamo Rent A Car, National Car Rental, and at Enterprise Fleet Management, Inc., (collectively, "EHI", “we”, “our” or “us”), we respect your privacy. We implemented this privacy policy ("Privacy Policy") to explain to you how we use and protect the personal information we may gather from and about our customers by means of our websites, mobile applications, online booking widgets (i.e. online booking applications run by our third-party partners such as hotel providers, airlines, etc), our corporate, rental, and sales locations, and from third-party sources. By using our websites or mobile applications, you consent to the collection, use, and disclosure of your information, as described in this Privacy Policy.
To identify who the data controller is in respect of your personal data, please see Data Controllers and Contact Details by Country.
The nature of our business and our operations may require us to share your reservation and booking information with our franchisees or licensees, which are owned and operated by independent licensees ("Licensees"). For these transactions, the Licensee is an independent data controller and maintains its own privacy policy in respect of the rental data that you or EHI provides to the Licensee. You are encouraged to check the privacy policy of the Licensee that is applicable to your transaction.
EHI has received TRUSTe's Privacy Seal signifying that this privacy statement and our practices have been reviewed for compliance with the TRUSTe program viewable on the validation page available by clicking the TRUSTe seal. If you have questions or complaints regarding our privacy policy or practices, please contact us at privacy@ehi.com and we will respond to you within a reasonable period of time unless otherwise required by law. If you are not satisfied with our response you can contact TRUSTe here or in Canada you may contact the Privacy Commissioner of Canada by visiting https://www.priv.gc.ca/cu-cn/index_e.asp or at Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec, K1A 1H3. To view the digital properties covered by the TRUSTe program, please click here.
The Types of Information We Collect
How We Use This Information
How Your Information May Be Shared
Choices You Can Make About Your Information
Data Security and Integrity
Global Data Transfers and Processing
Changes in Terms
Contacting EHI
Online Tracking and Advertisements
The Types of Information We Collect
Information Collected About You
You may provide us with certain information in connection with a transaction or in your interactions with our websites and at our branded locations. When you are asked to provide personal information, you may decline. If you choose not to provide the information, you may not be able to use some products or services. The personal information we may collect includes:
- Your name, contact information, driver’s license number and expiration date, emergency contact information, and date of birth;
- Vehicle rental information, including the location of where the vehicle is rented, date of rentals, type of rental, and your preferences;
- Your credit card details, Enterprise, Alamo, or National rewards information, online user accounts details, membership/corporate ID numbers, and frequent flyer or travel partner affiliations;
- Information you provide regarding your marketing preferences or in the course of participating in surveys or promotional offers;
- Photographs you submit of you and your driver’s license or your receipts through camera features available on some of our mobile applications and websites;
- Financial information that may be necessary to facilitate the purchase or lease of a vehicle from a Car Sales or Fleet Management location in the United States (additional notices will be provided to you at the time of that transaction) ;
- Additional contact information about you that we may obtain through third parties with whom we do business (e.g. travel agents, Car Sales lead providers or similar providers).
With your consent we may access location-based information from your mobile device or based on your IP address. We may also use your mobile device location information to provide you with notifications with your consent. We do not use this information to specifically locate you for any reason other than to provide you the service. If you have allowed us to utilize your location information in the past and wish to revoke the permissions, please turn off location services at the device level. With your consent, our application may utilize your device’s camera feature to upload photos (such as your receipts) to the application. If you have allowed the application to utilize your camera and wish to revoke the permissions to do so, please do so at the device level.
In certain areas of our sites, we provide you the ability to enter your friend’s name and contact information in order for EHI to send your friend a one-time email inviting him or her to visit the sites. We also provide you the ability to enter a friend’s or other individual’s name and contact information in order to make bookings for that friend or other individual. You must have obtained the consent of your friends before making such submissions. The information you provide will not be used for any further marketing purpose unless your friend requests services or we otherwise obtain consent from that person. Please be aware that when you use any send-to-a-friend functionality on our sites, your name and e-mail address may be included in the communication sent to your friend.
Information Collected and Stored Automatically
By visiting our websites, certain information may be automatically provided to us by your computer. For each visitor to our websites, our webservers automatically recognize the visitor’s domain name or IP address. An IP address is a number assigned to your computer when you connect to the Internet. As part of the protocol of the Internet, webservers can identify your computer by its IP address. In addition, we may collect your browser type and operating system as well as your internet service provider (ISP), referring and exit pages, date and time stamp, and/or clickstream data. We collect similar information when visiting our websites with your mobile device, including mobile device brand, model, mobile operation system and carrier. Except as otherwise explained in this policy, we may combine the non-personal information we collect from you (as described above and as described below, under “Cookies & Pixel Tracking”) with your personal information in order to tailor our websites and enhance your online experience by saving your preferences and/or to help identify site features, advertisements and offers that may be of interest to you.
Cookies & Pixel Tracking
EHI and our partners use cookies, pixel tags, etags, HTML 5 storage and similar technologies on most of our sites and in promotional emails which we may send to you. We use them to monitor and understand your use of our websites and services; improve your user experience and enable personalized features and content; optimize our advertisements and marketing and see which email promotions were of interest to you; and assist third-party advertising companies to serve ads on our behalf across the Internet. At this time, EHI websites do not respond to automated signals regarding tracking mechanisms, including “do not track” instructions from your browser. However, you have other options for preventing or limiting the use of cookies and similar technologies. To learn how to manage privacy and storage settings for Flash cookies, please click here. To learn more, please see our Online Tracking and Advertising page.
Vehicle Operation and Location Data
EHI vehicles may be equipped with OnStar or another vehicle telematics system (“Telematics System”). Some or all Telematics System functionality may or may not be active during rental periods. Telematics Systems may provide use, disclosure of, or access to (1) location information, (2) crash notification and related crash data and, (3) operational condition, mileage, diagnostic and performance reporting of vehicles (“Telematics Data”), as permitted by law.
Use of the Telematics System is subject to the terms and conditions and privacy policy posted by the applicable Telematics Systems provider and/or vehicle manufacturer (in the case of OnStar, information is available at www.onstar.com), which may include system and service limitations, warranty exclusions, limitations of liability, wireless service provider terms, privacy practices, descriptions of use and sharing of information, and user responsibilities.
Children's Privacy
Our websites and online marketing are not directed to, and Enterprise does not knowingly collect personal information from, children under the age of 18 or your country’s age of minority. If you nevertheless believe that your child has provided us with their personal information and you need to let us know to delete it, please email us at privacy@ehi.com.
How We Use This Information
We use the information we collect for the following purposes:
- To assist the transactions that you request, such as reserving, renting, purchasing or leasing motor vehicles.
- To verify a valid ID when submitting a photo of yourself and drivers license for one of our CarSharing, afterhours or expedited rental services. We do not store this information for any other purpose.
- To service your account or membership with us, respond to your questions, and contact you when necessary.
- To provide you with discounts, coupons, sweepstakes, offers and other information, opportunities, and services that may be of interest to you. You may receive these offers in advertising that is directed to you via third-party sites and media properties, including in social media. You may be able to opt-out of these ads by clicking on an icon in the ad or through the privacy settings in each media property.
- To assist us in providing better products and services (for example, we may contact you by telephone, mail or email to assist us in evaluating the performance of our staff, to assess the quality of product and service received and to help us improve our websites, facilities and services).
- To compile statistics and analysis about our customers’ use of our websites, products and services, which statistics are only used to enable us to provide better customer service, products, features and functionality to you and other customers in the future.
- To protect our rights and property.
We may combine the information that you submit to us with information related to your transactions with us, such as rental location and vehicle type. We may also combine this information with data we receive about you from third parties who assist us in processing requests, maintaining our data, and optimizing our services.
Except where prohibited by law, we retain information we collect for commercially reasonable periods of time or in accordance with specific policies. Information collected for a specified purpose will only be used for that purpose and, after a reasonable period of time, will no longer be actively stored when that purpose has been fulfilled. Inactive data may, however, continue to be used for statistical, marketing, archiving, and other analytical purposes.
How Your Information May Be Shared
We may disclose the information we collect from and about you to our subsidiaries for the purpose of providing the transactions you have requested and for marketing purposes. In addition to those stated within this Policy, Telematics Data from rental vehicles may be disclosed to, accessed by or used by EHI, our affiliates, emergency service providers, others who may assist in responding to an accident, telematics service operators, or those with whom we have a legal or contractual obligation to provide such data. Our affiliates and our subsidiary employees in our IT, marketing, operations and customer service divisions may use your information, as described in this Policy. To update your marketing preferences please see the Contacting EHI section below.
We also may disclose your information to other third parties: (1) when required by law or in response to legal process; (2) without legal process in response to a request from law enforcement relating to a criminal investigation; (3) to protect our rights, privacy, safety or property, or of the public; (4) for administrative, technical support or other business purposes to facilitate our transactions with you (i.e. for your insurance replacement, corporate rental or through one of our partners) , analyze our data, conduct mobile analytics services, or to maintain and improve our services (subject to confidentiality agreements as appropriate); (5) to permit us to pursue available remedies or limit damage that we may sustain; (6) to enforce the terms of any rental agreement or our websites’ terms and conditions; (7) to assist with the administration of frequent flyer or other rewards programs; (8) to process your transaction with our subsidiaries, affiliates or licensee/franchisee located in the country in which you place your reservation; (9) if the rights of another individual might be violated and (10) otherwise with your consent.
Personal information may also be subject to transfer to another company in the event of a transfer, change of ownership, reorganization or assignment of all or part of EHI, our subsidiaries/affiliated companies or our assets. This will occur provided that the parties have entered into an agreement under which the collection, use and disclosure of the information is limited to those purposes of the business transaction, including a determination whether or not to proceed with the business transaction. You will be notified via email or prominent notice on our websites for thirty (30) days of any such change in ownership or control of your personal information.
We may disclose your personal information to third-party service providers (such as a payment processor to bill you for goods or services, an email provider to send email communications to you on our behalf, or the provider of our live chat feature in order to offer you customer service). These service providers may be located in a country different from your country of residence, such as the United States or a European Union member country. These service providers are contractually required to maintain the confidentiality and security of your information. However, your information may be accessible to U.S. or EU authorities in accordance with applicable laws.
We may also share aggregated or de-identified information about our customers with our advertising and marketing partners, and third-party media properties, including social media sites to allow them to send targeted advertising messages on our behalf. With your prior notice and consent, we may share your name and email address with our co-branded partners and affiliates in order to provide the services you have requested and for marketing purposes. If you wish to stop receiving promotional communications from these third parties, please contact the third party.
Choices You Can Make About Your Information
Throughout our websites, we provide choices about the collection, use, and sharing of your information. For example, you must affirmatively request to receive email advertisements from us, our affiliates and/or business partners concerning information about special offers, promotions and new features, products and services. You may choose to opt back in to our email advertisements at any time, in which case your most recent action will prevail. We will give you an opportunity to opt-out of the gathering of your personally identifiable information, specific uses of your personally identifiable information and any marketing promotions in accordance with the procedures set out in the Contacting EHI section below.
Testimonials
We may post customer testimonials/comments/reviews on our websites which may contain personally identifiable information. We will obtain your consent via email prior to posting the testimonial. To request the removal of your testimonial, please contact us through one of the methods listed below in the Contacting EHI section.
Linked Sites
Our websites may contain links to other websites (such as those of our marketing partners or advertisers), which may have privacy policies that differ from our own. We are not responsible for the activities and practices that take place on these websites. Accordingly, we recommend that you review the privacy policy posted on any website that you may access through our website.
Data Security and Integrity
The security of the information you provide is very important to us and we try to provide secure transmission of your information. For certain transactions on certain of our websites, we may use Secured Sockets Layer (SSL) technology to secure the transfer of information. Unfortunately, no data transmission over the Internet can be guaranteed to be absolutely secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information transmitted over the Internet. Once we receive your information, we take steps that we believe are reasonably appropriate to protect its security, both internally and from outsiders, from loss, misuse, unauthorized access, disclosure, alteration and destruction, and to ensure the integrity of the data we collect. We use a combination of technological, physical, administrative and policy methods as well as organizational controls and non-disclosure or confidentiality agreements as we deem appropriate to protect this data.
If you have a user name and password for any of the features on our websites, you have the responsibility of keeping your password secret. You should not reveal your password to anyone. We will not ask you in an unsolicited telephone call or email for your password. In addition, you should take reasonable precautions when using a computer that is not your own or in a public setting.
Global Data Transfers and Processing
We will use your information in the country in which your service and transaction occurs. Please be aware that, unless prohibited by law, your use or continued use of our websites and mobile applications signifies your express consent that information may be transferred to or stored on servers and processed outside the country of your residence, including any of the countries where we do business. Please also be aware that the privacy laws of the United States or other countries where information may be stored may not be as comprehensive or offer as much protection as the laws of other countries including your country of residence. You may request us not to make such transfers, but if you do, we may not be able to provide some or all of our products or services to you.
When transferring personal data to countries outside the European Economic Area, we comply with European Union law by transferring to recipients who abide by Safe Harbor Principles, as set forth by the U.S. Department of Commerce, or by using standard contract clauses approved by the European Commission, or by adopting other means to ensure that adequate safeguards are applied, or by obtaining your consent.
Changes in Terms
We may update this privacy policy to reflect changes to our information practices. If we make any material changes we will notify you by email (sent to the email address specified in your account) or by means of a notice on this site prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.
Contacting EHI
The accuracy and completeness of the information we collect is very important to us and we make efforts to ensure that the information we have is accurate and up-to-date. In addition to the options provided to you in this Policy, if you wish to opt-out of direct marketing or review, amend, correct, update or delete personally identifiable information we have collected about you or limit how we use it contact us at the information provided below. In addition to rights to review, amend, correct, update and delete personal data, you may also have rights to object to some processing of personal data. Please also contact us if you have any questions about privacy on our websites. You may contact us via email at privacy@ehi.com, and we will attend to your request and make any necessary revisions. If you prefer, country specific contact information is listed below. We will respond to your access request within 30 days, unless a shorter period is required. If that is the case, local legal requirements would apply.
We reserve the right not to allow access to your information if we believe in good faith that such disclosure is prohibited by law or if the rights of another individual might be violated.
Data Controllers and Contact Information by Country
| If you are making a rental, or visiting a website or mobile site, in the following countries, the data controller will be listed as below. | ||
| Country | Data Controller | Contract Information |
| United States of America | Enterprise Holdings, Inc. | Enterprise, Internet Privacy Questions, 600 Corporate Park Drive, St. Louis, MO 63105 |
| Canada | Enterprise Rent-A-Car Canada Company | Enterprise, Internet Privacy Questions, 600 Corporate Park Drive, St. Louis, MO 63105 Canadian Customers may also seek advise from the Office of the Privacy Commissioner of Canada (at 1-800-282-1376 or info@privcom.gc.ca) |
| United Kingdom | Enterprise Rent-A-Car UK Limited | Enterprise House, Melburne Park,Vicarage Road, Egham Surrey TW20 9JY |
| Ireland | ERAC Ireland Limited | ERAC Ireland, Head Office Motokov Complex, Longmile Road, West Dublin, Dublin 12 |
| Germany | Enterprise Autovermietung Deutschland GmbH | Enterprise, Internet Privacy Questions, Mergenthaler Allee 35-37, 65760 Eschborn |
| France | Citer, S.A. | Enterprise, Internet Privacy Questions, 165 bis, rue de Vaugirard, B.P. 36-75721 Paris Cedex 15 |
| Spain | Autotransporte Turistico Espanol, S.A. | Enterprise, Internet Privacy Questions, Avenida del Ensanche de Vallecas 37, 28051 Madrid |
| If you are visiting a website or mobile site for the countries listed below (i.e. with a country suffix relevant to these countries), then the controller for that site will be as listed below. If you make a rental in one of these countries, the controller for the rental will be the licensee identified in the rental agreement. | ||
| Country | Data Controller | Contract Information |
| Albania, Austria, Belgium, Bosnia. Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Greece, Hungary, Iceland, Italy, Latvia, Lithuania, Luxembourg, Macedonia, Malta, Montenegro, Moldova, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Sweden, Switzerland, Turkey | EAN Data Services UK Limited | Enterprise House, Melburne Park,Vicarage Road, Egham Surrey TW20 9JY |
| If you are located within the European Economic Area and you use a “pre-pay” function, the controller for your payment information is listed below. | ||
| Country | Data Controller | Contract Information |
| European Economic Area | Enterprise Rent-A-Car UK Limited | Enterprise House, Melburne Park,Vicarage Road, Egham Surrey TW20 9JY |
Online Tracking and Advertisements
'Cookies' are short strings of text sent to your web browser when you visit a website, which may be “session-only” or “persistent” which lasts more than one visit to allow a visitor to personalize their experience.
'Similar technologies' refer to features which perform a comparable function to cookies although they are technically different.
'Pixel tags' are small blocks of code on webpages or in our emails that allow us to read and set cookies. Pixel tags are often used in connection with cookies to help operate our websites, emails and collect information about online activity.
We and our partners use these technologies on most of our sites and mobile applications to monitor and understand your use of our websites, emails, mobile applications and services; improve your user experience and enable personalized features and content; optimize our advertisements and marketing; and assist third-party advertising companies to serve ads on our behalf across the Internet.
Online Tracking
When we use third-party advertising companies to serve ads on our behalf across the Internet, these companies employ cookie and pixel tag technology on this and other websites in order to help select the ads that are displayed to you. For example, it helps ensure you do not see the same advertisements repeatedly and to display advertisements more specific to your interests. For these efforts we comply with the Digital Advertising Alliance industry standards for Canada and the U.S . For more information on your Ad Choices please visit one of the links below. Our Privacy Policy does not cover the information practices of other companies and organizations who advertise our services outside our site, and who may use cookies, pixel tags and other technologies to serve and offer relevant ads.
Some newer web browsers incorporate “Do Not Track” features. At this time, our websites may not respond to “Do Not Track” requests or headers from these browsers. To learn more about your choices about not having this information used by certain service providers, in the US please click here, in Canada please click here, or for European residents, please click here. (Please note: opting out of this practice does not opt you out of being served advertising. You will continue to receive generic ads.)
| Type | Purposes | Third party provider name(s) (where applicable) | Opt-out mechanism |
| Required Cookies | These cookies are required to enable core site functionality. Illustrations:
|
N/A | N/A |
| Functional Cookies | These cookies are required to enable core site functionality. Illustrations:
|
|
US & Canada Adchoices |
| Advertising Cookies | These cookies are used by us or advertising companies to serve ads that are relevant to your interests. Illustration:
|
See the appropriate link for: Canada Europe United States |
US & Canada Adchoices |
| Multimedia Player Cookies | These cookies also known as "Flash" cookies are used in relation to your video/audio player Various browsers may offer their own management tools for removing HTML5 LSOs. | Adobe | Click Here |
You have additional choices available to control the use of cookies, pixel tags, and similar technologies on our sites and emails. You may set your browser to block all cookies or to indicate when a cookie is being set. For emails you can unsubscribe from receiving future email marketing communications. It is important to remember that many of our services may not function properly if your cookies are disabled. For example, without setting cookies, we may not be able to save your language preferences or login information.
Mobile Tracking
We use the following similar technologies:
| Type | Purposes | Third party provider name(s) (where applicable) | Opt-out mechanism |
| Required Similar Technology | These technologies are required to enable core application functionality. Illustrations:
|
N/A | N/A |
| Functional Technology | These technologies are required to enable core application functionality. Illustrations:
|
Localytics (acting as data processor) | See your device settings |