Privacy policy

This policy explains what personal information Drivoholic collects, why, who can see it, how long it is kept and what you can ask us to do. It covers the Drivoholic website (the car inventory, the rental companies’ pages, customer accounts and support) and the console rental businesses use to run their business.

Who we are

Drivoholic is a car rental website where customers book cars from rental businesses in Pakistan and the UAE, and the software those businesses use to run their fleet. It is run from Wahab Garden, Mian Channu, Punjab, Pakistan. You can reach us at drivoholic@gmail.com or +92 307 6570064.

Drivoholic is responsible for your Drivoholic account and for the support cases you send us. Each rental business is responsible for its records of the rentals you make with it (your bookings, payments and messages with that business), and Drivoholic keeps those records on the business’s behalf. For a question about a rental, contact the business first; we will help it answer you, and you can always ask us.

What we collect

• Your Drivoholic account, if you rent cars: your name, email, phone, city and country, and a password that is stored only in hashed form and can never be read by anyone. One account books with any business on Drivoholic.
• Accounts of the people who work for rental businesses (owners and staff): name, email, phone and a password stored the same way.
• Rental records a business keeps in Drivoholic: its branches, vehicles, bookings, maintenance, payments, enquiries and messages with its customers. A business only receives your details when you book with it, message it or send it an enquiry. Looking at its cars shares nothing.
• Reviews you write after a rental: your rating and your words.
• Support cases you send Drivoholic: what you tell us, the booking it is about, and the replies.
• Account requests and messages sent from this website: your name, email and, if you give them, business name, phone, city, fleet size and message. With an account request, the payment for your plan: the plan and period, the amount, the transaction reference, the date, the account paid to and the receipt you upload.
• Payments. For a card payment we keep only the card brand and last four digits, never the full card number, expiry or security code. For a bank transfer, or a JazzCash / Easypaisa payment in Pakistan, we keep the transaction reference and, if you attach one, the screenshot of the transfer. For Drivoholic subscriptions we keep the payment reference, amount and the proof you upload.
• Technical information needed to run the service securely: sign-in times, the IP address of requests (used for rate limits and security records) and an activity history of changes made in each business.

Cookies

We use only the cookies needed to keep you signed in and to protect forms from forgery, and your browser’s storage for preferences such as dark mode and the country you browse. We use no advertising or tracking cookies and no third-party analytics.

Why we use it

• To provide the service: show the inventory and the companies’ pages, take and manage bookings, record payments, publish reviews, send the emails the service needs (invitations, password links, booking and payment updates, plan reminders) and give support.
• To answer a support case: we read the booking it is about and your messages with the business about that booking, and we may share the case with the business so it can answer you.
• To reply to account requests and messages, and to set up new businesses.
• To keep the service secure: prevent misuse, investigate problems and keep records of administrative actions.
• To keep the financial records the law requires.

We do not sell personal information and do not use it for advertising.

Who can see it

• A rental business you book with, message or send an enquiry to sees your name, email, phone and city and your dealings with it, never your rentals with other businesses. Inside a business, each person sees what their role allows.
• You see your own bookings, payments, messages and support cases with every business.
• Reviews are public on Drivoholic, shown with your first name and the initial of your last name; the business can reply to them.
• Drivoholic’s administrators see what they need to run the service, including the list of Drivoholic accounts and which businesses each one has dealt with. If they need to look inside a business’s account to help it, that access is read-only, limited in time, recorded, and the owner is emailed when it starts. Reading a booking for a support case is recorded too.
• We use hosting, storage and email-delivery providers to run Drivoholic. They process information only on our instructions and may store it outside Pakistan and the UAE; we choose providers that protect it appropriately.
• We disclose information if the law requires it.

How long we keep it

• Your Drivoholic account: while you use it. Ask us and we will close it and delete your account details; the records of rentals you made are the businesses’ records and are kept as the law requires (for example financial records).
• A business’s account and records: while the business uses Drivoholic. When a business account is closed we delete or return its records on request, except what the law requires us to keep.
• Support cases: with the account or business they belong to, as a record of what was reported and answered.
• Account requests and website messages: while we are in touch about them; ask us and we will delete yours. A payment sent with a request is a financial record and is kept like other payment records.
• Backups are kept for a limited time and then overwritten.

How we protect it

Each business’s data is kept apart: the system refuses to show one business another’s records, and only you see your rentals with different businesses together. Connections are encrypted, passwords are hashed, payment screenshots are stored privately, sign-ins and sensitive forms are rate limited, and invitation and password links expire.

Your choices

You can change your details in your profile at any time, ask for a copy of them, ask us to correct them, or ask us to delete them where we are not required to keep them. Use the contact form or email drivoholic@gmail.com; we reply within 30 days. Drivoholic is for adults; we do not knowingly collect information about children.

Changes to this policy

We will publish any change on this page with its new date, and email account holders before a significant change takes effect.

Effective 1 November 2026