Privacy illustration

Privacy Policy

This Privacy Policy explains how Glowlucky collects, uses, discloses and protects personal information related to our Australian car rental services. It applies to information provided through our website, booking processes, customer communications and in‑person interactions. We aim to handle personal information responsibly and to provide practical choices regarding communications and preferences.

Information we collect may include contact details (such as name, phone and email), driver identification, booking history, payment confirmations, location and timing of pickup and return, and communications you send to our team. When vehicles are supplied with connected services or telematics, limited operational data may be processed to support safety, maintenance and incident management. We request only the information that is relevant to arranging and managing your hire.

We use personal information to facilitate bookings, verify eligibility to drive, manage vehicle handovers and returns, process payments, respond to enquiries, and provide updates that relate to your hire. We also use aggregated and de‑identified information to understand service performance, plan fleet allocation and improve customer experience. Where marketing communications are involved, you may opt out using provided controls, and we will respect your choice.

We share personal information with service providers that assist our operations, such as payment processors, identity verification partners, IT hosting and support teams, and roadside assistance where required. These providers are engaged under appropriate safeguards and are permitted to use information only for the services they deliver to us. If required by applicable law or to respond to valid legal requests, we may disclose information to regulators or authorities. When vehicles involve third‑party technology, we aim to ensure technical measures support privacy by design.

Security measures are applied to help protect information from unauthorised access, alteration or misuse. These measures include role‑based access, encryption in transit where practical, and staff training focused on responsible handling. While *** method can be entirely free from risk, we work to reduce exposure and to respond promptly to issues. Retention periods are designed around legal requirements and operational needs; information is kept only for as long as necessary to support these purposes, after which it is de‑identified or disposed of securely.

Your choices include requesting access to your information, asking for corrections, and managing communication preferences. If you wish to make a privacy‑related request or raise a concern, please contact us using the details on our Contact page. We will respond within a reasonable timeframe and outline next steps. If a matter remains unresolved, you may consider guidance from the Office of the Australian Information Commissioner.

Our website may contain internal links such as Legal and Contact, which provide additional context about our services and responsibilities. We do not use external links in navigation for policy content. Any changes to this Privacy Policy will be posted here with an updated effective date. Material changes will be highlighted for clarity.

Cross‑border processing may occur when technology providers operate infrastructure outside Australia. In such cases, we seek arrangements that align with Australian privacy expectations, including contractual commitments and appropriate technical safeguards. We assess providers with reference to reliability, necessity for the service and their ability to support data protection practices.

Children’s information is handled with particular care. Our services are intended for licensed drivers. Where information about additional drivers or passengers is supplied by the primary renter, it should be provided only with appropriate authority. If we become aware that information has been supplied without such authority, we will review and address the situation.

If you have questions about this Policy or how Glowlucky manages personal information, please reach out via the details published on our Contact page. We appreciate opportunities to clarify our practices and to improve how we support renters throughout each stage of their journey.