Privacy Policy

A. Scope

This policy applies to personal information collected through the CPD Rental website, mobile application, customer account registration and login, email and SMS verification, vehicle search and booking, Stripe checkout, document and photo uploads, trip inspection submissions, customer support communications, admin-operated rental workflows, and related online and offline rental activities connected to our Services.

Our primary service area is Plainfield, Illinois 60586. CPD Rental operates an Online vehicle rental and car booking platform.

B. Information Collected

Depending on how you interact with our Services, we may collect the following categories of information:

• •Identity and contact information: name, email address, telephone number, date of birth, and home or billing address.
• •Eligibility information: age confirmation (minimum renter age is 21 as configured in our rental requirements), driver license number, driver license state, and driver license expiration date.
• •Account and authentication information: login credentials managed through our authentication provider, email verification status, and phone verification status.
• •Identification images you voluntarily upload: driver license front and back images, selfie photographs, personal insurance documents when requested, and profile photos.
• •Reservation and rental information: vehicle selection, pickup and return dates and times, rental agreement details, booking numbers, rental history, odometer readings at pickup and return, mileage allowance and overage calculations, fuel level at inspection, and internal notes related to your rental.
• •Payment and deposit information: payment status, transaction identifiers, Stripe checkout session IDs, Stripe payment intent IDs, Stripe customer and payment method identifiers, deposit authorization and release status, refunds, charge-related records, and billing correspondence. We do not store complete payment card numbers in our application database.
• •Vehicle condition documentation: pickup and return inspection photos (interior, exterior, and odometer), damage reports, claims-related documentation, and maintenance records associated with a rented vehicle.
• •Communications: messages you send through contact or support channels, booking-related notifications, and verification codes sent to your email or phone.
• •Fraud prevention and security information: account verification outcomes, document review status, audit log entries for administrative actions, and technical information reasonably needed to operate and secure the Services.
• •Device and usage information collected automatically: browser type, device type, IP address, server and application logs, and session or authentication tokens stored in cookies when you sign in or when authorized staff use the admin console.

Our mobile application may request camera access so you can capture driver license, selfie, profile, and trip inspection photos. The app may request photo library access for profile or inspection image selection. Based on our current application configuration, the mobile app does not request precise device location permissions.

CPD Rental does not access unrelated photos, contacts, files, messages, or other information stored on your device. We receive only information you intentionally provide, upload, or permit through an operating-system permission you approve.

Our current booking and account flows do not include a dedicated additional-driver registration feature. If you provide information about another person in a support message or document, we treat that information according to this policy.

C. How Information Is Collected

• •Directly from you when you create an account, submit a booking, upload documents or photos, complete checkout, contact us, or respond to verification prompts.
• •Automatically when you use our website or mobile app, including through server logs, authentication sessions, and cookies required to operate sign-in and admin access.
• •From Stripe when you complete checkout or when deposit authorizations, captures, refunds, or disputes are processed.
• •From Twilio Verify when we send or validate email or SMS verification codes during account registration or verification.
• •From Supabase, our database and authentication platform, when account profiles, bookings, documents, and related records are created or updated.
• •From authorized staff who record pickup, return, inspection, maintenance, damage, toll, ticket, or payment information during rental operations.
• •From insurance or claims documentation you or staff upload when required for a rental, damage, or claims process.

We do not routinely collect personal information from government or public records except where permitted by law and reasonably necessary for a specific rental, compliance, or enforcement matter.

D. Purposes of Use

We use personal information to:

• •Create, authenticate, and manage customer accounts.
• •Confirm identity, age, and driver eligibility for rentals.
• •Process reservations, rental payments, security deposit authorizations, refunds, extensions, and related billing.
• •Prepare, issue, and maintain rental agreements, invoices, and booking records.
• •Communicate booking confirmations, pickup and return details, payment status, verification steps, and account notices.
• •Provide customer support and respond to inquiries.
• •Review uploaded identification and insurance documents.
• •Record vehicle condition, mileage, fuel level, and trip inspection photos at pickup and return.
• •Investigate damage, tolls, tickets, claims, theft, misuse, fraud, and rental agreement violations.
• •Maintain business, accounting, and legally required records.
• •Operate, maintain, troubleshoot, and secure the website, mobile app, and internal admin tools.
• •Comply with law and respond to lawful requests from courts, regulators, or law enforcement.

We do not operate a marketing email list or promotional messaging program in our current application code. If we later send marketing communications where legally required, we will provide an unsubscribe or opt-out method.

E. Disclosure of Information

We do not sell personal information. Based on our current website and application implementation, we do not share personal information for cross-context behavioral advertising, and we do not use third-party advertising or analytics trackers such as Google Analytics, Meta Pixel, or similar tools.

We may disclose personal information to service providers and other parties only as reasonably necessary to operate the Services, including:

• •Stripe, for payment processing, checkout, deposit authorization, refunds, and dispute handling.
• •Supabase, for database hosting, authentication, file storage, and related cloud infrastructure.
• •Twilio, for email and SMS verification through Twilio Verify.
• •SendGrid and/or Resend, when configured, for transactional email delivery such as message notifications.
• •Vercel or comparable hosting providers that operate the production website infrastructure.
• •Insurance companies, adjusters, repair facilities, towing providers, or roadside vendors when reasonably necessary for a claim, damage, or recovery matter connected to a rental.
• •Law enforcement, courts, regulators, or government authorities when required by law or reasonably necessary to respond to a lawful request.
• •Professional advisers, including attorneys, accountants, or auditors, under confidentiality obligations.
• •A successor or participant in a merger, financing, restructuring, or business transfer, subject to applicable law.

Service providers are authorized to process information only for legitimate business purposes related to the Services and are expected to protect it under contractual and legal obligations.

F. Driver's License and ID Documents

We collect driver license details and images, and may collect selfie photographs, to confirm your identity, verify driver eligibility, prevent fraud, and comply with rental requirements before or during a rental.

You should upload identification documents only through approved secure upload fields in our website, mobile app, or customer portal. These uploads are used only for rental eligibility, fraud prevention, agreement administration, claims, and related business purposes. They are not used to access unrelated information on your phone or device.

Access to identification documents is limited to authorized personnel and service providers with a legitimate business need, such as document review, rental operations, payment handling, or claims administration. Documents are stored in access-controlled systems, including private storage buckets for customer documents and related file metadata.

We retain identification information for as long as reasonably necessary for active or completed rentals, fraud prevention, claims, disputes, legal compliance, tax and accounting obligations, and recordkeeping, and longer where required by law.

G. Payments and Security Deposits

Rental payments and security deposits are processed through Stripe. When you pay online, you are redirected to Stripe Checkout or otherwise interact with Stripe-hosted payment flows. Security deposits may be authorized as a separate manual-capture hold on the payment method used for the rental, and may later be released, partially withheld, or captured according to the rental agreement and applicable payment network rules.

Our systems store Stripe identifiers such as checkout session IDs, payment intent IDs, customer IDs, and payment method IDs, along with payment status, amounts, and related booking records. Our application code is designed not to store complete payment card numbers, card verification values, or full magnetic-stripe equivalent data. Stripe processes and stores card details according to its own privacy policy and security practices.

We may receive transaction status, authorization results, refund results, dispute information, and limited payment metadata from Stripe needed to administer rentals and deposits.

H. Cookies and Tracking

Based on our current implementation, the Services use the following types of cookies and similar technologies:

• •Essential and authentication cookies, including Supabase authentication session cookies used for customer sign-in and session management.
• •Admin session cookies, including the cpd_admin_console_session cookie used to authenticate authorized staff in the admin console.
• •Browser local storage entries used for certain client-side application preferences and admin configuration in the browser.

We do not currently deploy non-essential analytics cookies, advertising cookies, or third-party behavioral tracking pixels in the website codebase. Because non-essential analytics or advertising cookies are not present, a separate cookie consent banner is not implemented at this time. If we add non-essential tracking in the future, we will update this policy and provide an appropriate consent mechanism where required.

You can control cookies through your browser settings. Disabling essential authentication cookies may prevent you from signing in or completing certain account functions.

I. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy. Retention depends on factors such as:

• •Whether your account remains active.
• •Whether a reservation or rental is pending, active, or completed.
• •Payment, refund, deposit, or chargeback status.
• •Insurance, damage, toll, ticket, theft, or fraud investigations.
• •Tax, accounting, and legal recordkeeping requirements.
• •Applicable statutes of limitation or regulatory obligations.

When information is no longer reasonably necessary, we delete, anonymize, or otherwise dispose of it, subject to legal exceptions and technical limitations of backup or log systems maintained by our service providers.

J. Data Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we process. These measures include access controls for authorized staff, use of established service providers for authentication, database hosting, payment processing, and private file storage, and secure transmission through HTTPS for website traffic.

No method of transmission or storage is completely secure. We cannot guarantee that information will be 100% secure.

Please do not send driver license images, payment card numbers, or other sensitive information by unsecured email unless we specifically instruct you to do so through an approved secure process.

K. Data Breaches

If we become aware of unauthorized access to personal information under our control, we will investigate the incident and take reasonable steps to mitigate harm. Where required by applicable law, including the Illinois Personal Information Protection Act, we will provide legally required notifications.

L. Customer Privacy Rights

Depending on where you live and whether applicable law covers CPD Rental, you may have rights to request:

• •Access to personal information we maintain about you.
• •Correction of inaccurate personal information.
• •Deletion of personal information, subject to legal and operational exceptions.
• •A copy of certain information in a portable format where required by law.
• •Withdrawal of consent where processing is based on consent and withdrawal is permitted by law.
• •Information about how we disclose personal information to service providers.
• •Appeal of certain privacy decisions where required by applicable state law.

Privacy rights vary by state and apply only where the relevant law applies to our business. We may need to verify your identity before fulfilling a request. Admin deletion tools may be limited while active bookings or legally required records remain.

M. State-Specific Privacy Notice

Residents of states with comprehensive privacy laws — including California, Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states that may enact similar laws — may have additional rights if the law applies to CPD Rental.

California residents

If the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) apply to us, California residents may have rights to know, access, correct, and delete certain personal information, to limit use of sensitive personal information where applicable, and not to receive discriminatory treatment for exercising privacy rights.

Categories we may collect include identifiers, customer records, commercial information, internet or device activity, geolocation data derived from IP address or pickup location information you provide, audio/visual information in uploaded photos, and inferences reasonably derived from the above for rental eligibility and fraud prevention.

We use these categories for rental operations, payments, verification, security, legal compliance, and customer support. We disclose them to service providers such as Stripe, Supabase, Twilio, and email delivery providers for business purposes described in this policy.

Based on our current implementation, CPD Rentaldoes not sell personal information and does not share personal information for cross-context behavioral advertising. A “Do Not Sell or Share My Personal Information” link is not provided because that mechanism is not applicable to our current practices.

N. Children

Our Services are intended for adults who meet rental and driver eligibility requirements. They are not directed to children under 13. We do not knowingly collect personal information from children under 13 through a child-directed service.

Renters must meet our configured minimum age requirement of 21 and hold a valid driver license, as stated in our rental requirements.

O. Biometric Information

Based on our review of the current website and mobile application code, CPD Rental does not use automated facial recognition, face geometry analysis, fingerprint scanning, voiceprint analysis, or similar biometric identification technology.

Customers may voluntarily upload selfie photographs for manual identity verification and staff review. Those photographs are treated as uploaded identification images, not as biometric identifiers processed through biometric recognition technology.

P. Vehicle Telematics and Location

Our fleet management records may note whether GPS hardware is installed on a particular vehicle. However, our booking platform, customer website, and mobile application do not collect continuous vehicle location data, telematics feeds, or connected-car monitoring data from rental vehicles.

We do not state that all vehicles are untracked, because internal fleet records may indicate GPS hardware on some vehicles. We also do not represent that continuous active monitoring occurs through our Services. Mileage is recorded through odometer readings and rental inspection workflows rather than GPS telematics in the application.

Pickup location information displayed in the Services reflects our configured pickup address in Plainfield, Illinois, not real-time device geolocation from customers.

Q. Third-Party Links

Our Services may link to third-party websites or services, including payment pages operated by Stripe. Third-party sites and services have their own privacy practices. We encourage you to review their policies before providing personal information.

R. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the “Last Updated” date. Where required by law, we may provide additional notice.

S. Contact

To submit a privacy request or ask a question about this policy, contact us using the information below. Please include:

• •Your full name.
• •The email address or telephone number associated with your account or request.
• •The nature of your request.
• •Your state of residence, if you are exercising a state privacy right.

Do not include your full driver license number in an unsecured email.

Legal Entity

CPD Logistics LLC

Brand / DBA

CPD Rental

Privacy Contact Email

cpd.rental@gmail.com

Phone

224-428-7736

Mailing Address

1801 Rte 59, Plainfield, IL 60586

Website

https://www.cpdrental.com