1. Introduction and Scope
tbilicar.com ("we", "our", or "us") is a car rental booking platform operating in Tbilisi, Georgia. Our registered business operates in accordance with the legislation of Georgia, including the Law of Georgia on Personal Data Protection (as amended), and where applicable, the General Data Protection Regulation (GDPR) for customers accessing our services from the European Union.
This Privacy Policy applies to all personal data collected when you visit our website at tbilicar.com, make a car rental reservation, enquire about vehicle availability at Tbilisi International Airport, request hotel delivery to addresses in Saburtalo, Vake, Mtatsminda, or any other district of Tbilisi, or otherwise interact with our services.
By using tbilicar.com, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.
2. Who We Are and How to Reach Our Data Team
The data controller responsible for your personal information is tbilicar.com, operating from Tbilisi, Tbilisi, Georgia. For all privacy-related enquiries, data subject requests, or concerns, please contact us using the following details:
- Email: info@tbilicar.com
- Phone: +1 (872) 691-4137
- Mailing Address: Tbilisi, Tbilisi, Georgia
We aim to respond to all privacy enquiries within 15 business days.
3. Information We Collect
We collect only the personal data that is necessary to provide our car rental booking services. The categories of information we may collect include:
3.1 Personal Identification Data
- Full name as it appears on your government-issued identification
- Email address and telephone number
- Date of birth and nationality
- Driver's licence number, issuing country, and expiry date
- Passport or national identity card number where required by our partner rental agencies
3.2 Booking and Transaction Data
- Vehicle preferences, rental dates, and pickup or drop-off locations (such as Tbilisi International Airport or a specified address in the Old Town, Rustaveli Avenue area, or elsewhere in the city)
- Add-on selections including child seat requests, GPS navigator, insurance upgrade choices, and unlimited mileage options
- Communication records related to your booking enquiry or modification request
3.3 Payment Information
We do not store full payment card numbers on our servers. Payment transactions are processed securely by trusted third-party payment processors. We may retain limited transaction references, booking confirmation numbers, and currency information for accounting and fraud prevention purposes.
3.4 Technical and Browsing Data
- IP address and approximate geographic location derived from it
- Browser type, operating system, and device identifiers
- Pages visited on tbilicar.com, time spent, and referring URLs
- Cookie identifiers and session tokens (please see our Cookie Policy for full details)
3.5 Location Data
If you use our website on a mobile device and grant location permissions, we may collect approximate GPS coordinates to assist in showing relevant car rental options near your current position in Tbilisi or elsewhere in Georgia. Location access is entirely optional and can be revoked at any time through your device settings.
4. How We Use Your Information
Your personal data is used for the following purposes, each grounded in a lawful basis under applicable Georgian and EU data protection law:
4.1 Processing and Fulfilling Bookings
We use your identification, booking, and contact data to confirm car rental reservations, coordinate vehicle delivery to your hotel or Tbilisi airport, issue booking confirmations, and facilitate communication between you and our partner agencies. This processing is necessary for the performance of a contract with you.
4.2 Customer Support and Communications
We use your contact details to respond to enquiries, resolve disputes, and provide assistance during your rental period. This includes support relating to road trips from Tbilisi toward Kazbegi, Kakheti, Borjomi, or cross-border routes toward Armenia or Turkey.
4.3 Service Improvement
Aggregated and anonymised browsing data helps us understand which vehicle categories - such as automatic sedans, SUVs for mountain passes, or 7-seater family cars - are most sought after by visitors planning trips from Tbilisi. This processing is based on our legitimate interest in improving our platform.
4.4 Marketing Communications
With your explicit consent, we may send you promotional emails about seasonal car hire deals in Tbilisi, special offers on long-term rentals, or price drop alerts. You may withdraw consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly at info@tbilicar.com.
4.5 Legal Compliance and Fraud Prevention
We may process your data to comply with legal obligations under Georgian law, to detect fraudulent activity, to resolve legal disputes, and to enforce our terms of service.
5. Sharing Your Data with Third Parties
We do not sell your personal data to any third party. We share your information only with trusted partners who are necessary for delivering our services, and only to the extent required:
5.1 Partner Car Rental Agencies
Your booking details and driver identification data are shared with the local Tbilisi-based rental agency that fulfils your reservation. These partners are contractually required to handle your data securely and only for the purpose of completing your hire.
5.2 Payment Processors
Secure payment processing is handled by certified third-party processors. Your card data travels directly to these processors under industry-standard encryption and is never stored on our own servers.
5.3 Insurance Providers
Where you select a full coverage insurance or collision damage waiver option, relevant booking and driver details are shared with the insurance underwriter to validate your cover during the rental period.
5.4 Booking Technology Integrators
We use technology partners to power search, availability checking, and reservation management functions on tbilicar.com. These integrators act as data processors under our instruction and are bound by data processing agreements.
5.5 Legal and Regulatory Authorities
We may disclose personal data to Georgian law enforcement agencies, courts, or government bodies when required to do so by law or a binding legal order.
6. Data Retention Periods
We retain your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law. Our standard retention periods are as follows:
- Booking and transaction records: 7 years from the date of the transaction, in line with Georgian accounting and tax legislation
- Customer support communications: 3 years from the date of the last interaction
- Marketing consent records: Until consent is withdrawn, plus 1 year thereafter for compliance evidence
- Browsing and technical data: Up to 13 months from the date of collection
- Driver identification copies: 3 years from the completion of the rental, unless a longer period is required by our partner agency's obligations
Once retention periods expire, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.
7. Your Rights as a Data Subject
Under the Law of Georgia on Personal Data Protection and, where applicable, the GDPR, you have the following rights regarding your personal information:
7.1 Right of Access
You may request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request at no charge.
7.2 Right to Rectification
If any personal data we hold is inaccurate or incomplete - for example, an incorrectly recorded driver's licence number or email address - you have the right to request that we correct it without undue delay.
7.3 Right to Erasure
You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where you object to processing and there is no overriding legitimate interest. Deletion requests are subject to our legal retention obligations described in Section 6.
7.4 Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
7.5 Right to Object
You have the right to object to processing based on our legitimate interests, including the use of your data for direct marketing purposes. Upon such an objection to marketing, we will cease that processing immediately.
7.6 Right to Restrict Processing
In certain circumstances you may request that we restrict the processing of your data - for example, while we investigate a rectification request or consider an objection.
7.7 How to Exercise Your Rights
To exercise any of the rights listed above, please contact us at info@tbilicar.com with the subject line "Data Subject Request". We may ask you to verify your identity before processing the request. If you believe your rights have been infringed, you also have the right to lodge a complaint with the Personal Data Protection Service of Georgia (pdp.gov.ge) or the relevant supervisory authority in your country of residence.
8. Data Security Measures
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include:
- Encryption of data in transit using TLS protocols across all pages of tbilicar.com
- Access controls ensuring that only authorised team members can view personal booking data
- Regular security assessments and vulnerability reviews of our platform infrastructure
- Secure deletion procedures for data that has reached the end of its retention period
- Contractual obligations on all third-party processors to maintain equivalent security standards
Despite these measures, no data transmission over the internet can be guaranteed as completely secure. If you suspect any unauthorised use of your account or data, please contact us immediately at info@tbilicar.com.
9. Cookies and Tracking Technologies
tbilicar.com uses cookies and similar tracking technologies to operate the website, remember your preferences, and analyse usage patterns. For a full explanation of the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy. You may adjust your cookie settings at any time via the consent tool on our website.
10. International Data Transfers
Our primary operations are based in Tbilisi, Georgia. Where we transfer personal data to third-party processors or partners located outside Georgia, we ensure that appropriate safeguards are in place - such as standard contractual clauses or adequacy decisions - to maintain the protection of your data in accordance with Georgian law and, where applicable, the GDPR.
11. Children's Privacy
Our car rental services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 16. If you believe that a child has provided us with personal information without appropriate consent, please contact us at info@tbilicar.com and we will take prompt steps to delete such data.
12. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, applicable law, or industry best practices. When we make material changes, we will post the revised policy on this page with an updated effective date, and where appropriate, notify you by email. We encourage you to review this page periodically.
Effective date: 1 January 2025
13. Contact Us About Privacy
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how we handle your personal information in connection with your car rental in Tbilisi, please get in touch:
- Email: info@tbilicar.com
- Phone: +1 (872) 691-4137
- Address: Tbilisi, Tbilisi, Georgia
We are committed to resolving privacy concerns promptly and transparently, and to maintaining the trust you place in us when you choose tbilicar.com to explore Tbilisi and Georgia by car.