Quick Links
YOUR DATA RIGHTS & HOW TO EXERCISE THEM
Last Updated: February 7, 2026
What Rights Do You Have?
Under Trinidad and Tobago Data Protection Act, you have the following rights regarding your personal data:
1. RIGHT OF ACCESS (DSAR)
What Is It?
You can request a copy of all personal data we hold about you. This is called a Data Subject Access Request (DSAR).
What Data Will You Get?
Your DSAR response will include:
- ✓ Your account information (name, email, phone)
- ✓ Verification status and verification date
- ✓ Booking and rental history
- ✓ Payment transaction history (last 4 digits of card only)
- ✓ Communication history (messages, support tickets)
- ✓ Account preferences and settings
Will NOT include: Internal fraud scores, law enforcement disclosures, password hashes
How to Request
Email us at: [email protected]
Include:
- Your full name
- Your registered email address
- Your account/booking ID (if available)
- A brief description: "I request a copy of my personal data"
Timeline
We will respond within 30 days of receiving your request.
Format
Your data will be provided in a portable format (CSV or JSON) that you can easily read and share with other services.
2. RIGHT OF CORRECTION
What Is It?
You can request that we correct any inaccurate personal information we hold about you.
Examples
- Incorrect phone number or email
- Misspelled name
- Wrong address or city
- Outdated contact information
How to Request
Option 1: Self-Service (If Available)
Log into your Fleet account and update your information directly.
Option 2: Email Our DPO
Send email to: [email protected]
Include:
- What information is inaccurate
- What the correct information should be
- Proof if applicable (government ID photo, etc.)
Timeline
Corrections will be made within 7 days of verification.
3. RIGHT TO DELETION (RIGHT TO BE FORGOTTEN)
What Is It?
You can request deletion of your account and personal data.
Important Limitations
We MUST retain the following for legal reasons:
- ❌ Transaction records: 7 years (Trinidad and Tobago tax requirement)
- ❌ Booking history: Until rental disputes/damage claims are resolved
- ❌ Identity verification record: Proof that verification occurred (but biometric images deleted)
We WILL delete:
- ✓ Login credentials and account access
- ✓ Account preferences and settings
- ✓ Support messages and communications
- ✓ Marketing preferences and email lists
- ✓ Biometric data (selfies/ID images) within 14 days
Consequences of Deletion
Once your account is deleted:
- You cannot log in or access your account
- Your booking history will not be visible to you
- You cannot make new bookings (you would need to register again)
- Vehicle owners can still reference past rental records
How to Request
Email: [email protected]
Include:
- Your full name and account email
- Statement: "I request deletion of my account and personal data"
- Brief reason (optional)
We will send you a confirmation email explaining what will and won't be deleted before finalizing.
Timeline
Account deletion completed within 30 days of request.
4. RIGHT TO DATA PORTABILITY
What Is It?
You can request your data in a portable, machine-readable format so you can transfer it to another service.
What Data Is Included
- Account information
- Booking and rental history
- Payment records
- Communications
Does NOT include: Raw biometric images (for security), internal notes, fraud assessments
How to Request
Email: [email protected]
Include:
- Your full name and account email
- Statement: "I request my data in portable format"
- Preferred format: CSV or JSON
Format
Your data will be provided in CSV (Excel-compatible) or JSON format that you can open in any spreadsheet or data tool.
Timeline
We will provide your portable data within 30 days of request.
5. RIGHT TO OBJECT / WITHDRAW CONSENT
What Is It?
You can withdraw your consent for us to process certain personal data.
Example: Withdrawing Consent for Biometric Processing
If you withdraw consent for biometric (selfie/ID) processing:
- Your account will be deactivated
- You cannot make new bookings
- Your biometric data will be deleted
- You can re-enable if you provide fresh consent
How to Request
Email: [email protected]
Specify what consent you're withdrawing (e.g., "biometric processing", "marketing emails")
Identity Verification
To protect your privacy, we verify your identity before responding to any data rights requests. You may be asked to provide:
- Your registered email address
- Your phone number on file
- Your most recent booking ID
- Government-issued ID (for sensitive requests)
No Fees
There is typically no charge for exercising your data rights. We only charge a fee if your request is manifestly unfounded or excessive (e.g., requesting 100 data copies per week).
Questions or Need Help?
Contact Our Data Protection Officer
- 📧 Email: [email protected]
- 📞 Response Time: Within 30 days
Information Commissioner (If We Don't Respond Adequately)
- 📧 Email: [email protected]
- 📞 Phone: (868) 622-3684
- 🌐 Website: www.ttinfo.gov.tt
You have the right to file a complaint with the Information Commissioner if you believe we have not properly responded to your data rights request.
Timeline Summary
| Request Type | Deadline |
|---|---|
| Data Access (DSAR) | 30 days |
| Correction | 7 days |
| Deletion | 30 days |
| Portability | 30 days |
| Withdraw Consent | Immediate |
Last Updated: February 7, 2026
Trinidad and Tobago Data Protection Act