GLOBAL PRIVACY POLICY

This policy was last updated on 16 October 2023.

At Enterprise Holdings, Inc., through our independent regional subsidiaries ("subsidiaries") operating the Enterprise Rent-A-Car, National Car Rental, Alamo Rent A Car, and Discount Car and Truck Rental brands, as well as Truck Rental, Car Sales, CarShare and Car Club, and Subscribe with Enterprise, as well as other subsidiaries providing various programmes, features and services (collectively, "Enterprise Holdings", "we", "our" or "us"), we respect your privacy.  We have implemented this privacy policy ("Privacy Policy") and cookie policy ("Cookie Policy") to explain our data collection, use, disclosure and transfer practices, as well as individual access rights you may have when you use our sites and services.  You can learn more in the sections below.

For more information about our Privacy Programme, please visit: Compliance and Ethics | Enterprise Holdings

What Information We Collect

For All Transactions:

We collect:

CONTACT INFORMATION, including:

  • Name
  • Address
  • Phone numbers
  • Email addresses

When Renting

When Renting a vehicle, including being added as an authorised additional driver, Subscribing with Enterprise, or joining CarShare or Car Club, we may collect:

Driving Qualifications and Identify Verification, including:

  • Driving licence information, including photos provided by you or images for verification
  • Insurance information
  • Passport
  • Proof of residence
  • Personal references

Transaction Information, including:

  • Vehicle rental information
  • Rental and return locations
  • Dates of the rental
  • Type of rental and your vehicle preference
  • Ancillary products purchased
  • Airline and flight number
  • Photographs you submit of receipts and/or vehicle condition using the camera feature available on some of our mobile applications and websites
  • Billing information
  • Charges
  • Payments
  • Credit Card information

Loyalty and Affiliation Information, including:

  • Enterprise, Alamo or National rewards and loyalty information
  • Online user account details
  • Corporate Account ID numbers
  • Membership numbers
  • Frequent flyer or travel partner affiliations

Claims Information

  • Information related to details of accidents involving our vehicles, including that of any third parties such as involved individuals, witnesses and police reports

Health Information, including:

  • Information about relevant health conditions you have that assist us in providing you with adaptive driving devices; or related to claims involving injuries

Optional Information, including:

  • Emergency contact information
  • Any preferences or special requirements you may have
  • Personal information shared while building and maintaining a business relationship or otherwise voluntarily shared by individuals   

CCTV and other cameras

  • Where available, CCTV video recordings and/or photographs of you in public areas of our rental locations 

Sensitive information

Enterprise Holdings collects information that is defined as "sensitive personal information" under various state privacy laws.  While such laws may provide an opt-out opportunity for this information, we use and disclose this information only for purposes permitted by law that do not require an opt-out opportunity.

When Purchasing a Vehicle

In addition to the contact information, identity verification and driving qualification information listed above, when you purchase a vehicle through Enterprise Car Sales and apply for financing, we will also collect:

Financial and Personal History Information, including:

  • Income
  • Credit history
  • Employment history
  • Other personal information required to complete the credit application

Car Sale Transaction Information, including:

  • Vehicle purchased
  • Purchase price
  • Vehicle trade-in
  • Ancillary products purchased

When contacting us for Accident Management Assistance services

In addition to the contact information, driving qualification, transactional and health information listed above, when you contact us for accident management assistance purposes (which we may administer on behalf of the entity that refers your details to us, be it your insurer, manufacturer, employer, dealership, fleet management provider or breakdown provider), we will also collect:

Claims information, including:

  • Information related to details of accidents, including that of any third parties such as involved individuals, witnesses and police reports
  • Insurance details
  • Information about the incident to determine who is at fault
  • Vehicle details
  • Credit repair details
  • Details regarding your vehicle repair needs and your onward mobility needs

When using our Websites and Mobile Applications

We collect:

Browser Information, including:

  • Web logs
  • Geo-location

Internet or other activities, including:

  • Browsing or search history 
  • Information regarding your interactions with our websites, mobile applications, emails or advertisements.

Device Information, including:

  • Unique device identifiers
  • IP address
  • Operating system
  • Precise geo-location information

Location information (where enabled and with your permission) is used for the following purposes: 

  • Our websites use location information (such as postcode, city, metropolitan or geographic area) from your device to provide services, such as finding a branch or location.  

  • When using your mobile device, location information and device connections are used to provide you with notifications, offers, confirm rental status information or provide other information to enhance your experience. 

  • Where available, allowing the use of location information can enable you to locate the vehicle assigned to you or to expedite your pick-up and return by allowing access when in proximity to your assigned vehicle.  

 

Permissions to use your device's camera enable you to upload your photo ID and/or the vehicle's condition for expedited services (where available).   

 

Permissions to use your device's precise geolocation information, camera or Bluetooth connection can be turned off at any time by changing the settings in the mobile application or on your device.  Some features or service options may not be available when these items are turned off. 

 

Through our use of cookies and other automated data collection technologies

Unless where consent may be required by applicable law, when you visit our websites, use our mobile applications, open or click on emails we send you, or interact with our advertisements, we or third parties automatically collect certain information using technologies such as cookies, web beacons, clear GIF, pixels, internet tags, web server logs and other data collection tools. For more information, please see our  Cookie policy

When Participating in Surveys or Promotions

We collect:

  • Marketing preferences
  • Feedback on services provided

Information We Collect from Third Parties

Third parties provide us with additional information about you or your household, including:

  • Referral sources, such as third-party online booking sites (who provide us general contact information and a booking confirmation number to facilitate the rental), your employer (general contact information), credit unions, your insurance provider (general contact and policy information), vehicle sales sites (who provide us, upon your request, your contact information when you enquire about a specific vehicle for sale)
  • Where applicable, our Refer-A-Friend, or similar programmes;
  • Hotel, airline and membership clubs who provide us your general contact information and booking information;
  • Third parties who, for fraud prevention purposes, provide us with (if relevant) financial and identity-related verification and document authentication;
  • Credit and financing partners, including credit reporting agencies, who facilitate the completion of credit applications when financing a vehicle purchase or when applying for a business rental account;
  • Franchisees and fulfilment providers who provide us with information regarding your rental transactions;
  • Service providers, such as customer support (customer-service-related information and enquiries made by you), security services (footage of you from our CCTV system) and customer survey providers (your response to our customer service surveys);
  • Marketing providers who provide information to assist us to better communicate our products and services, including email acquisition services, data hygiene services, data brokers, and market research partners and platforms.
  • Social media content you have made available to the public

Our Vehicles

Connected car and telematics data

Our vehicles may be equipped with telematics devices such as pre-installed event data recorders, global positioning devices, OnStar® and other communications systems that may be connected to the Internet or cellular services. We (and at times the vehicle manufacturer and other authorised third parties) may collect information from these telematics devices and other services and technologies and use and share it as described below or as otherwise set out in this Privacy Policy. This information is associated with the vehicle only and maintained as de-identified or anonymised data and will only be linked for the purposes and in the situations described below.  Any information that is linked to you will be treated as personal information in accordance with this Privacy Policy.  You are responsible for informing passengers and other drivers that vehicle data is collected and used as described in this section.

You may also choose to accept or purchase optional devices that enable you to collect certain vehicle data.  Please refer to the manufacturer's terms and conditions and privacy policy. 

The use of telematics devices and other pre-installed services and technologies are subject to our rental terms and conditions and, in some cases, the vehicle manufacturer's and/or technology provider's terms and conditions and privacy policy.  For OnStar, information is available at www.onstar.com.  For other vehicle manufacturers, please visit here.  Some or all of these features may be turned on at all times, even when other services or other media in the vehicle are turned off.  If you are unsure whether your rental vehicle contains telematics devices or technologies or systems, please speak to a member of our team at the rental location.

 

Depending on your type of rental, we collect and use vehicle data as follows:

  • Fuel information: We use this information to facilitate recording and billing for fuel charges.
  • Odometer information: We use this information to facilitate billing for mileage charges (where applicable) and to help us manage our fleet. 
  • Vehicle diagnostic and performance information: We use such information to help us identify vehicle maintenance needs and to manage the fleet.   
  • Mobile device or app connections to help us issue certain commands to the vehicle to facilitate or expedite your rental or to facilitate your CarShare or Car Club transaction: For example, we collect information that enables us to remotely unlock or lock the vehicle doors.
  • Location information: We collect and use vehicle location information to:
    • Enable our roadside assistance providers to provide you with roadside assistance.
    • Enable emergency service providers to dispatch emergency services to you.
    • Assist us in recovering a vehicle we reasonably believe is lost, stolen or abandoned.
    • To facilitate the start and stop time for CarShare and Car Club billing purposes.  
  • Event data recorders: In certain claims situations we may use this information in connection with accident investigations and claims-related efforts. 
  • Legally Compelled Disclosure and Emergency Circumstances: We may share vehicle information, including location information, where legally compelled or in emergency circumstances.  In addition, in the United Kingdom and European Union, our vehicles are required to be equipped with eCall technology, which is activated if your vehicle is involved in an accident. eCall will automatically call and provide information regarding the accident to emergency services. We will also use, disclose and have access to this information.   

We retain vehicle information based on retention periods in accordance with our business needs and legal requirements.  We may use and store this data after the expiry of our contract with you.

Infotainment systems and vehicle manufacturer apps

If you pair a mobile device with our vehicles' navigation or infotainment systems and choose to use OnStar, Apple CarPlay, Android Auto or other similar third-party software or services on the vehicle or if you choose to use any navigational features on the vehicle's infotainment systems or other device, your personal information and other data may be transferred and stored on these systems. We cannot guarantee the privacy or confidentiality of such information. You should delete all such personal information and other data from these systems or devices before the vehicle is returned to avoid subsequent occupants of the vehicle accessing this information.

If you download a mobile app made available by a vehicle manufacturer or other third parties and register the vehicle in that app, your use of the app may result in the sharing of telematics data and other information (including location information and personal information) with the vehicle manufacturer or other third parties. Your use of these apps is strictly governed by the third-party mobile apps' terms and conditions and privacy policies. Before the vehicle is returned, you should either remove the app from your mobile device or delete the vehicle from the app.

 

Loyalty programmes and notice of financial incentive

You have the option of enrolling in one of our loyalty programmes. These programmes offer benefits related to your transactions with us.

There is no obligation to join one of these programmes; however, your employer may choose to use our loyalty programme to facilitate its company travel programme. If you or your company choose to enrol in one of these programmes, you may cancel your membership at any time by accessing our Global Privacy Portal on our Contact Us page. We offer you the opportunity to participate in multiple loyalty programmes, including Alamo Insiders, the Emerald Club and Enterprise Plus. Our collection of certain personal information about you, including name, address, email, phone number, driving licence information, date of birth, credit card or other payment information, company affiliation and frequent flyer programme information (where available) allows us to operate the loyalty programmes and provide participant benefits such as discounts, rental credits and vehicle benefits. You may have the option to link an Enterprise loyalty programme account with an account you have with a selected partner. When linked, Enterprise and the partner will share information as described at the time you link your accounts.

 

To view the benefits and terms of participation in the loyalty programmes, including a list of participating partner programmes and benefits, or to join, please visit:

Get low car rental rates with Alamo Insiders – Alamo Rent a Car

Emerald Club Benefits | National Car Rental

About Enterprise Plus | Enterprise Rent-A-Car

Partner Rewards Programme | Alamo Rent a Car

Partner Rewards | National Car Rental

 Enterprise Partner Rewards Programmes | Enterprise Rent-A-Car

 

The amount and nature of these benefits will be determined by the extent of your participation in the Enterprise loyalty programmes. We may adjust the terms of participation from time to time. Categories of personal information shared for targeted advertising

· Contact information

· Device information

· Geolocation (region only)

· Product preferences

· Commercial affiliation

· Professional information

· Transactional information

For categories of third parties who may receive personal information in connection with your loyalty account, please see the section above entitled "Who we share information with".

You may withdraw from the Enterprise loyalty programmes at any time, through our request form: Privacy web form (onetrust.com). Please be advised that we may continue to process information about you in connection with your transactions with Enterprise. If you choose to terminate your membership or exercise any rights to the deletion of your personal data, we may be unable to provide you with all of the benefits of the Enterprise loyalty programmes or associated partner programmes.

The price and service differences, such as discounts and credits, that are available to you through the Enterprise loyalty programmes are based upon our reasonable determination of the value that we receive from collecting and retaining personal information about you in connection with operating our business. This estimated value takes into account a variety of factors as permitted by law, including (but not limited to) our expenses incurred in collecting and processing the information, our expenses incurred in providing rewards to you and the estimated marginal revenue that we may derive from information related to a specific Enterprise loyalty programmes participant.

 

Children's Privacy

Our websites and online marketing are not directed to, and Enterprise Holdings does not knowingly collect personal information from, children under the age of 18 or your country's age of minority. If you nevertheless believe that your child has provided us with their personal information and you need to let us know to delete it, please contact us using the link at the top of this page.

How We Use Information About You

We use the information we collect from you or about you to provide you with our services and for the following purposes:

Where it is necessary for the performance of a contract that governs the services we provide to you, including

  • To assist the transactions that you (or someone on your behalf) request, such as reserving, renting, purchasing, leasing motor vehicles, fleet management services or providing accident management services;
  • Unless where consent may be required by applicable law, to communicate important information regarding your reservation, rental, lease or purchase of a vehicle.  These communications are transactional in nature and will be sent to you via email, text or calls;
  • To provide customer service related to your interactions with us or to respond to your enquiry;
  • To enrol you in our loyalty programmes and send information relating to your ongoing membership of these programmes;
  • To enrol you in our CarShare and Car Club business, and to send information relating to your ongoing membership of these business.

Where necessary for us to comply with a legal obligation, including

  • To use and share information about your vehicle's location with emergency services in the event that you are involved in a road accident;
  • To use and share information with government and regulatory authorities when required by law, traffic regulation, or in response to legal process, obligation or request, including checking appropriate sanction lists or for maintaining public security.

Where it is necessary for our legitimate interests, as listed below, and where our interests are not overridden by your data-protection rights, including

  • To communicate important information about your rental and provide you with great service. These communications, which are transactional in nature, will be sent to you via email, text or calls;
  • To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services.  Unless where consent may be required by applicable law, your feedback may be requested via email, text or call.
  • To compile statistics and analysis about our customers' use of our websites, products and services. These statistics are used only to enable us to provide better customer service, products, features and functionality to you and other customers in the future;
  • Where permissible, to develop a profile of you and your interactions with us so that we can provide tailored offers, opportunities and services that may be of interest to you. To enhance your advertising experience, we use cross-device tracking. This means we may collect and combine data from your various devices to show you ads that are relevant to your interests;
  • To protect our legal rights and manage the security of our networks and property, including to protect our websites from spam and abuse. For example, we will use CCTV to ensure the security of our premises;
  • For loss prevention, we maintain a record of individuals whose past interactions with us indicate they may present a non-payment or safety risk;
  • To receive, use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement request, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims-processing purposes;
  • For fraud prevention purposes, to verify identity and authenticate identity-related documentation as well as additional points of contact for rental-related communications through personal references.
  • To use and share your information with third parties to permit us to pursue available remedies or limit damage that we may sustain and to enforce the terms of any rental agreement or our websites' terms and conditions;
  • To enable us to use vehicle data systems for purposes listed in the Vehicle Data section above, such as assisting in recovering a vehicle we reasonably believe has been stolen or abandoned, and to facilitate the vehicle return process (where remote return is available) and billing purposes;
  • Unless where consent may be required by applicable law, we may use personal information for marketing and promotional purposes to show you advertisements for products and/or services tailored to your interests on social media and other websites. 
  • To de-identify or aggregate personal information collected about you and use it for any lawful purpose;
  • To transfer your data as described in the "Global Data Transfers and Processing" section; and

  • To receive, use and share your information with third parties to prevent, detect and report fraud and protect our business interests and rights, privacy, safety and property, or those of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes.

Where you have given consent, as required by your country's applicable law, including

  • To assist us in providing you with the most appropriate vehicles, such as those with adaptive driving devices. In some cases, this will require us to infer or explicitly collect information about your health or physical condition;
  • To send one-time-use security tokens via text
  • Where applicable, to ask for your feedback by email, text or call, to assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services.
  • Where applicable, to ask if you want to receive by email or text promotional or targeted marketing communications, opportunities and services that may be of interest to you. These will include invitations to join our loyalty programmes, upgrade announcements, offers and discounts, online communications regarding an incomplete online membership form or reservation, and offers related to other services and products we offer. To improve your advertising experience, we use cross-device tracking to show you ads that are relevant to your interests. Some of these offers will be received in advertising on non-Enterprise sites, including on social media or other digital platforms;
  • Where applicable, to use vehicle information to assist and manage transactions that you have agreed to and to fulfil obligations under the Rental Agreement. 
  • You can choose to withdraw your consent at any time; however, such withdrawal does not affect the lawfulness of processing before your withdrawal.

Retention of Your Personal Information

We retain your personal information for as long as we need to fulfil our business purposes, as set out below:

Rental transactions

We may keep the data associated to your rental agreement for up to seven years from the date of the rental or in accordance with our business needs, subject to other local legal requirements. We keep records of payments you have made for two years from the date of the transaction (depending on the location of the rental). 

Car Sales

We keep the data associated to the sale of a vehicle for up to ten years from the date of sale, subject to other local legal requirements.

Claims

We keep the data associated to claims involving our renters or other individuals for the life of the claim and up to ten years from conclusion of our obligation, subject to other legal requirements

Customer-service-related queries

We keep general queries for three years, unless you make a complaint, in which case, we keep complaint data for seven years.

Marketing and analytical purposes

We keep data linked to cookies and other online identifiers up to three years. We keep other marketing information, such as email subscription and loyalty enrolment data, for up to seven years after your last interaction with us.

Disputes & law enforcement

If we are involved in litigation or a governmental or regulatory investigation, then we keep data throughout the period of litigation or investigation and for five years after that. If a settlement means that we must keep data for longer, then we keep data for the period required to administer the settlement. If we provide data to law enforcement agencies, we keep a record of this for one year beyond the end of the investigation.

Who We Share Information With

As a global provider of transportation solutions, we share your information as follows to provide a seamless transactional experience.  

Subsidiaries

We share your contact, driving qualification, transactional, loyalty and affiliation, health, optional information, claims information, car sales financial and personal information and car sale transactional information with our subsidiaries for providing the transactions you have requested and (with your consent and where applicable) for marketing purposes. See the Subsidiaries page for a list.  The list is subject to change from time to time and you should periodically review it for changes. Our subsidiaries' employees in our IT, marketing, operations and customer-service divisions will use your information, as described in this Privacy Policy, including, if required by applicable law, to send you information about products and services or respond to your enquiry.

Franchisees

The nature of the business and operations require us to share your contact information, and where applicable driving qualification, transactional, loyalty and affiliation and (if applicable) health information with our franchisees ("Franchisees").  See the Franchisees page for a list. The list is subject to change from time to time and you should periodically review it for changes.  For these transactions, the Franchisee is an independent data controller or equivalent under applicable law and will maintain its own privacy policy in respect of the rental data that you provide to the Franchisee. You are encouraged to check the privacy policy of the Franchisee that is applicable to your transaction.

To identify who is the data controller or equivalent under applicable law in respect of your personal information, see the Key Facts information provided in your rental reservation, the rental terms and conditions or visit the Contact Us page.

Fulfilment Providers

Rental Transactions

In certain countries, we may use a fulfilment provider to carry out your rental car transaction. For example, if you make a reservation for a car and driver in countries that require a driver, we will send your Contact and Transactional Information to the fulfilment provider in those countries. Where car and driver services are made available for you to reserve, these services are fulfilled by the company disclosed at the time of reservation. While made available through our branded websites, these companies are independent operators and you are encouraged to check the privacy policy of the company applicable to your transaction. See the Franchisee & Fulfilment Provider page for a list.

Car Sale Transactions

In order to provide an appraisal value of a trade-in vehicle, Car Sales uses your Vehicle Identification Number (VIN) to run a vehicle history and value report on your vehicle.  After your purchase of a vehicle from one of our Car Sales locations, and at your request, to facilitate additional vehicle options (leather seats, tinted windows etc.) we will share your contact and (where applicable) car sales transactional information with the companies that provide those products or services. For these transactions, the fulfilment provider is an independent data controller or equivalent under applicable law and will maintain its own privacy policy in respect to the information that you provide to the provider. You are encouraged to check the privacy policy of the provider that is applicable to your transaction.

Our Service Providers and Business Partners

We will share your:

Contact, driving qualification, transactional, claims information, car sales financial and personal information and car sale transactional information

  • Payment, administrative and technical support providers
  • Our insurance replacement, corporate rental or other customers or partners to facilitate the vehicle repair, rental transaction and rewards programmes with Enterprise Holdings group members    
  • Vehicle recovery agents
  • Debt collection providers
  • Credit Reporting Agencies
  • Identity and address verification providers
  • Claims processors
  • Vehicle manufacturers and their vehicle repair providers and/or roadside assistance providers
  • Fleet providers
  • Other providers for vehicle repair and damage assessment purposes

Health Information

  • Claims processors
  • Adaptive device providers

Contact and transactional information

  • Toll and citation processors

Contact, Transactional, Loyalty and Affiliation Information:

  • For insurance replacement, corporate rental or other customers or partners to facilitate the rental transaction and rewards programmes with Enterprise Holdings group members;
  • Companies who conduct customer research or satisfaction surveys on our behalf;
  • Communication providers that send email, text and other marketing and service-related communications to you on our behalf; In the European Union, our communications provider, Twilio, may collect and process certain information from you as a controller to provide these services.   Please visit Twilio's privacy notice here to learn more about their data practices.
  • Customer support providers, such as the provider of our live chat feature, in order to provide you with customer service;
  • Commercial account partners to manage their account with us, including payment of amounts that may be owed to Enterprise under the rental agreement or other agreement. Please see their privacy policy for details about their privacy practices. 

Web and Mobile Information

  • Analytics and technology providers for location-based services and to analyse, enhance and manage our data in order to provide, maintain and improve our services;
  • Web and mobile application session replay partners allow us to replay user sessions to improve browsing experience and troubleshoot errors; and

Anonymised and De-identified information

  • Our advertising and marketing partners and third-party media properties, including social media sites, with whom we share aggregated or de-identified information about our customers, to allow them to send targeted advertising messages on our behalf (subject to confidentiality agreements as appropriate).

Government Authorities

Your personal information may also be shared with government authorities as outlined above.

Sale, Merger or Change in Control

Your information may also be transferred to another company in the event of a transfer, change of ownership, reorganisation or assignment of all or part of Enterprise Holdings' businesses or assets. This will occur if the parties have entered into an agreement under which the collection, use and disclosure of the information is limited to the purposes of the business transaction, including determining whether or not to proceed with the business transaction. If required by law, you will be notified via email or on our websites of any such change in ownership or control of your personal information or as otherwise may be required or permitted by law.

Testimonials

We may post customer testimonials on our websites which may contain your contact information. We use a third-party provider to manage this process. This provider is responsible for obtaining your consent as necessary, removing content upon your request and answering any questions you may have.

Social media platforms and networks

Some of our websites have features such as, plug-ins, widgets, and/or other tools made available by third parties that may result in information being collected or shared between us and the third party. The third party's use of your information is not governed by this Privacy Policy. You may have the right to opt out of our use of these technologies, as further described in this Privacy Policy.

If you use one of these social media websites and do not want them to collect data through our website and link it to your member data, you must log out of your user account before visiting our website and delete the relevant cookies. You can also block social plug-ins with browser add-ons. See the social media website for their plug-in instructions or see our Cookie Policy for more information.

Global Data Transfers and Processing

In order for us to operate and provide you with services globally, the information you provide to us or that we collect may be transferred or accessed by entities around the world. Enterprise maintains its global information systems primarily in the United States. If you provide to us or if we collect personal information about you outside of the U.S., we will transfer and maintain your personal information in the U.S. However, in limited circumstances, your personal data may be stored outside of the U.S., including where we use certain service providers such as call centre support, claims processors and IT providers.

Where applicable, Enterprise enters into Standard Contractual Clauses or another approved mechanism for cross-border transfers. For EU, U.K. and Swiss data transfers to the U.S., please see the section immediately below. However, we will not rely on the Swiss-U.S. Data Privacy Framework or the U.K.-U.S. Data Privacy Framework until they enter into force, but we adhere to their required commitments in anticipation of their doing so.

 

EU-U.S. Data Privacy Framework, UK-U.S. Data Privacy Framework and Swiss-U.S. Data Privacy Framework

We participate in and have certified our compliance with the EU-U.S. Data Privacy Framework, the UK-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (the "Frameworks"). We are committed to treating all personal data received from European Union (EU) member countries, the U.K. and Switzerland in reliance on these Frameworks and their applicable principles.

To learn more about the EU-U.S. Data Privacy Framework and to view our certification, visit the U.S. Department of Commerce's website (https://www.dataprivacyframework.gov/s/) . With respect to information received or transferred pursuant to the EU-U.S. Data Privacy Framework, we are subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may be required to disclose personal information in response to lawful requests by U.S. public authorities, including to meet national security or law enforcement requirements.

Enterprise Holdings is responsible for the processing of personal data that it receives under the Frameworks and subsequently transfers to third parties acting as an agent on its behalf. Enterprise Holdings complies with the Frameworks' applicable principles for all onward transfers of personal data from the EU, the U.K. and Switzerland, including the onward transfer liability provisions.

If you have an unresolved privacy or data use concern that you feel we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://www.jamsadr.com/DPF-Dispute-Resolution.

Under certain conditions, as more fully described on the U.S. Department of Commerce's website (https://www.dataprivacyframework.gov/s/), you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

Franchisees/Fulfilment Provider/Corporate-Owned Locations

If you book a reservation to be fulfilled by a franchisee or fulfilment provider in another country or an Enterprise corporate-owned location (e.g. in the United States, Canada, Germany, Spain, France, Ireland and the United Kingdom), we will transfer your personal information to our franchisee, fulfilment provider or local affiliate in that country in order to facilitate your requested transaction.

Visit the Contact Us page for the data controller applicable to your transaction.

Your Rights

The data protection laws of the European Economic Area, United Kingdom, Switzerland, Brazil and Japan provide the following rights to covered individuals:

  • Opt-out of some collection or uses of your personal information, including the use of cookies and similar technologies and the use of your personal information for marketing purposes, and the anonymisation of your personal information for data analyses;

  • Access your personal information, rectify it, restrict or object to its processing, or subject to exemptions under law, request its deletion;

  • Receive the personal information you provided us to transmit it to another company;

  • Withdraw any consent provided (such withdrawal does not affect the lawfulness of processing before your withdrawal); 

  • Where applicable, lodge a complaint with your supervisory authority.

  • Contact our Data Protection Officer (DPO@ehi.com) or submit a privacy complaint by filling in our Global Privacy Portal form.

California

California residents have certain rights with respect to their personal information we have collected.  If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

  • Right to access your personal information we have collected and to know how we collect this information, why we collect it, and the types of parties we may have disclosed it to;

  • Right to correct inaccurate personal information;

  • Right to delete any personal information we have collected from you;

  • Right to opt-out of our sale(s)/sharing of your personal information and

  • The right not to receive discriminatory treatment for the exercise of your privacy rights.

Our use of cookies or other tracking technologies is deemed a "sale" or "sharing" under California law (in this context "sharing" means cross contextual behavioural advertising) of personal information. You can opt out by clicking the "Privacy Choices" button at the bottom of the website you are visiting.  

  1. The following categories of personal information disclosed are considered "sale"/ "sharing" under California law: device information and geolocation data.
  2. The following categories of third parties to whom personal information was disclosed are considered "sale"/ "sharing" under California law: social media platforms and networks.

 

 

Virginia, Colorado and Connecticut 

If you are a Virginia, Colorado or Connecticut resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

  • Right to confirm the processing of and access to your personal information;

  • Right to correct inaccurate personal information we have collected from you;

  • Right to delete any personal information we have collected from you; and

  • Right to opt-out of targeted advertising. 

Colorado, Connecticut and Virginia residents have the right to appeal the decision we have made in connection with your privacy rights request. Please submit all appeal requests by replying to the communication resolving your original request or emailing us at privacyrequests@ehi.com.

Nevada

 

While we do not sell your data, under Nevada law, residents still may submit a request to not have their data sold.  If you are a Nevada resident you can exercise this right by accessing our Global Privacy Portal on our Contact Us page.

 

Canada

 

If you are a resident of Canada, outside of Quebec, you have the right to:

  • Access your personal information and rectify it;

  • Withdraw any consent provided; and

  • Where applicable, lodge a complaint with your supervisory authority.

Quebec

  • Quebec residents have certain rights with respect to their personal information we have collected. If you are a Quebec resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations: Right to access any personal information we have collected about you;

  • Right to correct your personal information if you discover that any of it is inaccurate, incomplete or out of date;

  • Right to request that we delete any personal information we have collected from you;

  • Right to object to and restrict the processing of your personal information that is no longer accurate or necessary; 

  • Right to withdraw your consent given for processing of your personal information; and

  • Right to receive any personal information we have collected from you in a structured, commonly used and machine-readable format 

Exercising your rights

You may exercise any applicable rights described above by accessing our Global Privacy Portal on our Contact Us page.  If you wish to lodge a complaint with a supervisory authority in Europe, you may contact the necessary supervisory authority. In Canada, you may contact the Privacy Commissioner of Canada by visiting https://www.priv.gc.ca/cu-cn/index_e.asp or at Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec, K1A 1H3. 

We may require additional information from you to verify your identity and residence before we can process your request.  For California, Virginia, Colorado and Connecticut residents, wishing to exercise rights under their state's privacy law, you may be required to provide your driving licence or official state identification document in order to provide proof of residence.  Please be sure to redact your photograph and all identifying information, other than your name, address and driving licence number.  We also reserve the right to restrict access to your information or to limit your rights (e.g., if such disclosure is prohibited by law or if the rights of another individual might be violated).  In some instances, this may mean that we are able to retain your personal information even if you withdraw your consent.

California residents may appoint an authorised agent to make a CCPA request on your behalf by completing and signing the form available here.

If you live in British Columbia, Alberta, or Quebec, please refer to the following resources. In British Columbia, you may find information on how to exercise your rights at the British Columbia Office of the Information and Privacy Commissioner website. In Alberta, you may find information on access requests and making complaints here. In Quebec, you may find information on your privacy rights here at the Quebec Access to Information Commission website.

 Global privacy controls

 

We generally recognise commercially recognised opt-out preference signals (e.g., Global privacy controls (GPC)). Recognition of this signal applies only to the specific device and/or browser that communicates the signal and does not cross over to all devices/browsers you use to access the services we provide.

 

Marketing preferences

You will be able to opt out of direct marketing communications from Enterprise Holdings and our subsidiaries, affiliates and franchisees by following the instructions in each communication you receive.  You may also contact us directly using the link at the top of this page.

You can opt out of display ads you see on non-Enterprise sites by clicking on the ad choices icon in the ad or by changing the privacy settings on the website.

Changes to These Policies

As necessary, we will update our Privacy Policy and Cookie Policy to reflect changes in our privacy practices. If we make any material changes, we will notify you by email (sent to the email address specified in your account) or by means of a notice on this site or as otherwise may be required or permitted by law, prior to the change becoming effective. We encourage you to periodically review this site for the latest information on our privacy practices.

Contact Us

For questions or enquiries related to privacy and data protection, please visit our Contact Us page and submit your request through our Global Privacy Portal.