Privacy Notice

The love of cars is international and so are we. We provide specific protections for any personal data received from Europe. BookAclassic relies on Standard Contractual Clauses or derogations under the General Data Protection Regulation (“GDPR”) for any international transfers of personal data.

BookAclassic and people who represent BookAclassic collect personal information in several situations during business. Personal information means any information that identifies an individual, household, or device. Personal information does not include “aggregate” information, which is de-identified data we collect about the use of the BookAclassic marketplace or about a group or category of products, services or users. It is completely up to you what information you voluntarily provide to us. Depending on the situation, personal information we collect can include:

• Contact information. For example, when you create an account with us, which can include your name, mailing address, e-mail address, telephone number, and birth date;
• Demographic information and interests;
• Driver’s licence number;
• Payment information;
• Information from motor vehicle/driving records about you;
• Communications that you send through our marketplace;
• Other information submitted by you. This may include information you have filled out in surveys, polls, questionnaires, social media or similar items; and any other information we may collect as permitted or required by law.
• Identity- and driver-verification information when you verify as a driver: images of your driving licence and a selfie (processed by our verification provider, Didit), the details extracted from your licence (including date of birth and document number), and — for US self-drive bookings — your motor-vehicle driving record obtained through SambaSafety;
• Device and usage information when you use the Service: IP address, device and browser type, pages viewed and actions taken (see the Analytics & Cookies section below);
• Information about your use of Cruise and other feeds, including listings you view or open, likes, comments, and related account activity. If you use Cruise while signed out, we may use a pseudonymous device identifier to record feed activity and help vary or improve the vehicles shown to you; this identifier is not your name or email address;
• Records of your acceptance of our Terms (the document version, time, IP address and device), which we keep as evidence of the agreement between us.

BookAclassic generally uses personal information for the following reasons:

• Verifying your identity;
• Improving our customer service and website;
• Customising your interactions with us;
• Maintaining business records for reasonable periods, and generally managing and administering our business;
• Protecting BookAclassic and you against fraud;
• Keeping your information accurate and up-to-date;
• Meeting legal, regulatory, and security requirements;
• To process your BookAclassic transaction;
• To show you content you might be interested in or to market our products to you or other products according to your interests. You can opt-out of these communications if you want;
• Otherwise as permitted or required by law.

We reserve the right to review and store the communications and User Generated Content you make through the site or Service, including your postings on site pages, public Cruise comments, and your communications to other members using the marketplace's messaging capabilities. Member-to-member messages and Cruise comments may be automatically screened before publication or delivery — including by AI language models (see Automated Processing & AI below) — for safety, fraud, off-platform payment circumvention, and sharing of contact details in breach of our Terms; content that triggers the screen may be blocked, held for review, or flagged to our trust-and-safety team. We may use communications and User Generated Content for internal purposes, including to better understand how members use the marketplace, and for security purposes.

Any information you post in your profile or in any other public area of this website or Service, including public Cruise comments, will be available to other users.

To be clear, we do not sell your information to anybody. However, we may have to disclose or share some information for the reasons listed above. We may, for example, disclose your information to:

• Complete a business transaction with you;
• Other parties on our marketplace to facilitate your transaction. For example, DRIVESHARE may provide your mobile phone number to facilitate communication or your photograph to facilitate identification;
• Third parties that perform professional, business services for us;
• Maintain the regulation of our business;
• If we are required to by a court subpoena or other law;
• Market our products to you or other products that fit your interests;
• Other DRIVESHARE companies or subsidiaries;
• As otherwise permitted or required by law.

If the ownership of BookAclassic ever changes, we will transfer your information to the new owner and the same protection will apply unless a law says otherwise.

We will not share motor vehicle/driving records or claims history reports with other DRIVESHARE companies or third parties unless it is necessary to fulfil your request.

The service providers we currently use include: Stripe (payments and payouts), Supabase (application database and authentication), Cloudflare (security and content delivery), Twilio (SMS and phone verification), Didit (identity and licence verification), SambaSafety (US driving records), Algolia (search — listing data only, no personal renter data), Intercom (customer support), Resend, Mailtrap and Ghost (transactional email, marketing email and our blog newsletter), Sentry and PostHog (monitoring and analytics), OpenAI (the AI tasks described above), Google and Meta (analytics and advertising, per your consent choices), and cloud storage providers for photos and documents. An up-to-date list is available on request at support@bookaclassic.com.

If you make a payment on this website, your payment information will be sent directly to our payment processor, Stripe. For information on Stripe’s privacy practices, see their privacy policy at stripe.com/privacy.

If you want to update or see any information that we have about you, just let us know. If you want to correct information we got from another party (such as a credit reporting agency), we can provide you with that party’s contact information. We may not be able to share information involved in an ongoing investigation.

Analytics and session replay

We use PostHog for product analytics, including limited session replay on a sample of checkout, sign-in and listing-creation sessions (with keystrokes and sensitive fields masked), and Google Analytics to understand how the Service is used. We use Sentry for error monitoring, which can include replay of sessions in which an error occurred (with text and media masked). Analytics run only in accordance with the consent choices described below.

Advertising

With your consent to marketing cookies, we use Google Ads and Meta (Facebook) advertising tools — including the Meta pixel and server-side conversion signals (which share hashed contact identifiers and booking events with Meta) — to measure our advertising and reach people interested in classic cars. We do not sell your personal information.

Cookies and your choices

When you first visit, a consent banner lets you accept or reject analytics and marketing cookies separately; essential cookies (sign-in, security, payments) always operate. You can change your choices at any time via the “Cookie preferences” link in the footer or in Settings → Privacy. Some tools may operate in a cookieless, aggregated mode before consent where permitted by law. In our mobile apps, analytics can be switched off in your profile settings. We honour Global Privacy Control signals by treating them as an opt-out from marketing cookies and advertising.

Public Reviews

Our website gives you a chance to leave reviews. Reviews are public and display your first name and profile photo. If you delete your account, your reviews are shown as authored by “Former member”.

Links

Our website contains links to other sites. Please be aware, and when you leave our site, read the privacy statements of other websites. This Privacy Notice only applies to our website.

Surveys & Contests

Sometimes we have a survey or contest. These are 100% voluntary. Any information collected from a survey or contest will only be used to make our website or products better and to contact any winners.

We use AI language models (currently provided by OpenAI) as processors for specific, limited tasks: screening member-to-member messages and Cruise comments for safety and policy compliance before publication or delivery; moderating listing content, host profiles, and Cruise community content; helping hosts draft profile and listing text they ask us to enrich; and translating content between the languages the marketplace supports. The content processed for these purposes is the content you submit (for example a message, Cruise comment, or listing text) together with limited context needed for the task. Our AI providers process this data under contract as our processors and do not use it to train their publicly available models.

Driver-verification decisions combine automated checks (document authenticity, and in the US your motor-vehicle record measured against our published criteria) with human review: adverse or borderline outcomes are routed to our team rather than decided solely by a machine. If your verification is declined you can contact support@bookaclassic.com to have the decision reviewed by a person.

The new app release removes continuous background location recording. Location remains available while the app is in use for nearby search and optional one-time trip stamps. The background-location description below applies only to older installed versions until they are updated. Previously collected trip location records remain subject to deletion 30 days after the rental closes.

Listings include the general area of the vehicle. The precise address of a vehicle's home location is protected: publicly, map positions are approximated, and the exact pickup address and instructions are shared with a renter only after their booking is confirmed. We do not install in-car tracking devices; any trip location information we collect comes from the renter's phone through our mobile app, as described below. Odometer and fuel readings are recorded manually at handover and return as part of the trip inspection.

Trip location recording (self-drive trips). During an active self-drive trip, our mobile app records the vehicle's location from the renter's phone by default, including in the background, for safety and security purposes only: theft recovery, wellness checks, and resolving damage or dispute claims. How much is recorded depends on the location permission the renter grants the app — with “Always” permission the trip is recorded even when the app is closed; with while-in-use permission, only while the app is open. Recording is disclosed in the app before it begins, and the renter can turn it off at any time using the in-trip control or by withdrawing the permission in their device settings; declining or turning off location never affects a booking — the trip is simply noted as untracked. One-time location stamps may also be recorded at trip actions such as pre-trip inspection, post-trip inspection or when responding to a wellness check from our safety team, and if location permission is declined we may instead derive an approximate, city-level location from the network (IP) address of the renter's authenticated activity during the trip. All trip location records are visible only to our platform operations, safety and support staff (never to hosts or other members), are automatically and permanently deleted 30 days after the trip closes, and are never used for advertising.

We do our best to protect your personal information. We use firewalls, encryption and Transport Layer Security (TLS). We use current technology and tools to keep your information safe. But nothing is perfect so please be careful and use strong passwords.

DRIVESHARE will endeavour to choose service providers that are well established and who have agreed to protect the confidentiality of any personal information the service provider receives.

DRIVESHARE does not knowingly collect personal information from anyone under 13 years old without parental consent. If we do accidentally receive this information, we will delete it. If you think we have improperly received a child’s information, please contact us.

You have several rights concerning your personal information. Specifically, you have the right:

• To receive a copy of the information that we have collected from you or disclosed about you in the past 12 months;
• To correct the information that we have;
• To have your information deleted;
• To opt-out of the sharing or selling of information. We do not sell any personal information. We only share personal information with third parties to market directly to you if you either specifically opt-in or have the opportunity to opt-out and elect not to opt-out of that sharing. If you are under 16 years old, then you must opt-in to this type of sharing.

We will not discriminate against any person exercising any of these rights. These rights may be limited by law. For example, we may not be able to delete your information so we can defend ourselves in a lawsuit. Some information, such as insurance information, may be exempt from these obligations. We will need to verify your identity before fulfilling these requests.

Please submit your request by emailing us at support@bookaclassic.com. If we receive a “do not track” signal from your internet browser we don’t currently change anything because professionals and lawmakers have not agreed on what can and should be done.

If you are in the UK, the EU or the EEA: we process your personal information on the legal bases of performing our contract with you, our legitimate interests (running, securing and improving the marketplace and defending claims), consent (analytics, marketing and the optional items above), and compliance with legal obligations. You additionally have the rights to data portability, to restrict or object to processing, and to withdraw consent at any time, and you may lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

Retention: if you delete your account, we erase or anonymise your personal information within 30 days, except records we must keep (for example, financial and tax records and records needed for open disputes); driver-verification evidence follows the separate periods below. We keep archived licence and selfie images in private storage for up to 183 days from archiving, unless a claim, dispute, legal matter or retention hold requires longer. Extracted licence details and raw driving-record data are normally deleted 30 days after the end of the latest related active or upcoming booking; if there is no such booking, they are normally deleted 30 days after verification. For US self-drive bookings, specified licence fields needed for SambaSafety checks may be kept for up to 90 days after Didit approves identity and licence verification and are then deleted. These periods apply to data we store; Didit may apply separate retention periods. Other records are kept for defined periods appropriate to their purpose. You can request deletion and a copy of your data self-serve from your account settings.

Saving a car, including an earlier save or a save imported when you sign in, is private by default and does not notify its owner. You may separately opt in to offers for a particular saved car. If you do, that car's current owner can see your first name and surname initial in the app and may choose to send an offer through our messaging service. Your email address and phone number are not shared for this purpose. Consent is optional, is not required to save or book, and does not transfer when the car changes owners. You can withdraw consent, unsave the car, or block/report the owner. Withdrawing consent or unsaving prevents further consent-based offers but does not delete messages already delivered or prevent independently authorized booking conversations or enquiries you initiate. This opt-in does not authorize an automatic email or SMS marketing campaign.

If you request a translation, we send only the selected authorized public listing description or published review and the target language to our existing translation provider. Original text is retained and translated text is identified as a translation, which may contain errors. This feature does not translate private messages, hidden or unpublished content, or arbitrary text you submit. Translation is optional; if it is unavailable, the original content remains available.

This Privacy Notice isn’t all original. We must modify it from time to time to keep up with the times. We will make big changes easy to find. If an update changes your rights, we will let you know directly. We keep old versions of this Notice archived.

If you have any questions about this Privacy Notice, or need to contact us for any reason, simply contact us at support@bookaclassic.com.

Thanks for using BookAclassic!