Privacy policy.

The business named above is the personal information controller for the data described in this policy. This policy is written to meet the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines.

When you book a vehicle on this website, the form asks for:

• —Your full name
• —Your phone number
• —Your email address, so we can send your booking and payment receipt
• —Pickup and return location, your rental dates, and any notes you add

When you message us on Facebook Messenger or call, we keep whatever you tell us there so we can answer you and manage your booking.

Your driver’s license and a government-issued ID are checked in person when you collect the vehicle, as required for a self-drive rental. We do not ask you to upload license details through this website.

Your information is used solely to: process and manage your booking, verify eligibility to rent, communicate about your reservation, take and reconcile payment, and comply with legal and accounting obligations. We do not sell your data, and we do not share it with third parties for marketing purposes.

Payments are taken on a secure checkout page hosted by PayMongo, our licensed payment processor. Your card number, expiry date and security code are entered on PayMongo’s page and go to PayMongo, not to us. Those details never reach this website or our servers, and we never store them.

What we do keep against your booking, once a payment succeeds, is:

• —The amount paid, in Philippine pesos
• —The type of payment method used — for example card, GCash, Maya, or bank transfer — but not the account or card number
• —The date and time of payment
• —PayMongo’s payment reference, so a payment can be traced if you query it

To create the checkout we pass PayMongo your name, email and phone number so the receipt reaches you and the payment can be matched to your booking. PayMongo handles that data under its own privacy policy as a separate controller.

Only the parties we need to complete your rental, and only with the data each one needs:

• —PayMongo Philippines, Inc. — payment processing, as described above
• —Our booking and fleet management system, which stores your booking record
• —Meta Platforms, if you choose to reach us through Facebook or Messenger, under Meta’s own privacy policy
• —Our hosting provider, which runs this website

We disclose data beyond this only where the law requires it, or where it is necessary to establish, exercise or defend a legal claim.

When you contact us via Facebook Messenger, Meta Platforms processes your messages according to their own privacy policy. Messages you send to our page are used only to respond to your inquiries and process bookings. We retain conversation history to provide consistent customer service.

Our website uses minimal cookies for essential functionality. One short-lived cookie is set when you start a payment so that the page you return to afterwards can look up your own checkout and nobody else’s; it expires within a day. We may use anonymous analytics to understand how visitors use the site, but we do not track personal information without consent.

Booking and payment records are retained for up to 3 years for accounting, tax and legal compliance. After this period, personal information is securely deleted unless a longer period is required by law or by an unresolved claim.

This website is served over HTTPS. Payment pages are hosted and secured by PayMongo. Access to booking records is limited to the people who run the rental business, and payment credentials are held only by our processor.

Under the Data Privacy Act you have the right to be informed, to access your data, to correct it, to object to its processing, to have it erased or blocked where the law allows, to data portability, and to be indemnified for damages from misuse.

To exercise any of these, email operations@mccr.com or write to us at the address above. We will respond within a reasonable period and may need to verify your identity first so that we are not handing your data to someone else.

If you are unhappy with how we have handled your data, tell us first — see our Dispute Resolution Policy. If we cannot resolve it, you may lodge a complaint with the National Privacy Commission of the Philippines.

If this policy changes, we update the page and the “last updated” date at the top. Material changes affecting how we use existing bookings’ data will be communicated to affected customers directly.

Questions about this Privacy Policy, or about your data:

• —Email operations@mccr.com
• —Phone or text 0920 955 8805
• —By post or in person at 3465 Opal Street, Casals Village, Mabolo, Cebu City, Philippines