Privacy Policy

1. Who processes your data

The data controller is LeoCar (a car rental and buyout service in Lviv). Contacts for requests: ua.leocar@gmail.com, +38 (093) 039 33 33, Lviv, 5a Knyahyni Olhy St.

2. What data we collect

We collect only the data you voluntarily provide through site forms: your name and phone number (and email if needed), as well as request details (selected car, dates, service type). Cookies and analytics services may automatically collect technical data: IP address, browser and device type, visited pages and traffic source.

3. Purpose and legal basis

Data is processed to handle rental, buyout or consultation requests, to contact you back, to perform the contract and to improve the website. The legal basis is your consent given when submitting a form and the Company’s legitimate interest in providing services.

4. Who we share data with

Request data is sent to our CRM system (RoApp) to process enquiries. For analytics and advertising we use third-party services: Google (Analytics, Tag Manager, Ads), Meta (Pixel), Microsoft Clarity, and the Binotel callback service. To match your enquiry with the advertising click that led to it, we pass the following to Google and Meta: irreversibly hashed (SHA-256) phone number and email address, IP address, browser data (User-Agent) and advertising identifiers from cookies. Part of this data is sent directly from our server (Meta Conversions API), not only from your browser. Your phone number and email are never passed to advertising services in plain form. This transfer only happens with your consent — explicit (a checkbox in the form) or given by submitting the form; for visitors from the EU and the UK, only with explicit consent. These services process the data they receive under their own privacy policies. Whether you are in the EU or the UK is determined by the country code you select in the phone field — the site has no other source for this. The legal basis for the transfer is your consent. Recipients: Google Ireland Limited and Meta Platforms Ireland Limited; data may also be processed outside the EEA under those companies’ standard contractual clauses.

Retention: the conversion cookie — 15 minutes; advertising context in our CRM — 12 months; the technical delivery log (no personal data) — 90 days; at Google and Meta — under their own policies. To withdraw consent or request a copy or deletion of your data, write to ua.leocar@gmail.com — we will delete it from our systems and send the corresponding request to the advertising services; deletion on their side follows their own procedures. We do not sell your personal data to third parties.

5. Cookies

The website uses cookies for correct operation, to remember settings (such as currency and language) and for analytics. You can disable cookies in your browser settings, but this may affect some site features.

6. Retention period

Personal data is stored for as long as necessary to achieve the processing purpose (handling a request, performing a contract) or until you withdraw your consent, unless otherwise required by law.

7. Your rights

You have the right to access your data, request its correction or deletion, restrict or stop processing, and withdraw consent. To exercise these rights, contact ua.leocar@gmail.com.

8. Changes to this Policy

We may update this Policy. The current version is always available on this page. We recommend reviewing it periodically.