The right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Policy.  

The right of access. You have the right to obtain access to your information (if we’re processing it), and certain other information (similar to that provided in this Policy).

The right to rectification. You are entitled to have your information corrected if it is inaccurate or incomplete. You can request that we rectify any errors in information that we hold by getting in contact with us.

The right to erasure. This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information that we hold.

The right to object to processing. You have the right to object to certain types of processing, and you can exercise this right by contacting us using the details set out below.

The right to restrict processing. You have the right to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but will not use it further.

The right to data portability. You have rights to obtain and reuse your information for your own purposes across different services. If this right is applicable, we will provide you with an accessible copy of your information that will enable you to use a similar service elsewhere.

The right to lodge a complaint. You have the right to lodge a complaint about the way we handle or process your information with your national data protection regulator.

The right to withdraw consent. If we rely on your consent as our lawful basis for processing your information, you may withdraw your consent at any time. However, doing so does not mean that actions we have taken with your personal data while we had your active consent shall be made unlawful. You can withdraw your consent to the processing of your information at any time by contacting us using the contact details set out below.

After you cease to use our services, we will retain such  information that forms part of our corporate and tax records, so as to meet our legal obligations to governmental authorities, public bodies, our shareholders etc. for tax, accounting and reporting purposes .

When determining the relevant retention periods, we will take into account factors including:  

1. our contractual obligations and rights in relation to the information involved;

2. legal obligation(s) under applicable law to retain data for a certain period of time;

3. statute of limitations under applicable law(s);

4. (potential) disputes; and

5. guidelines issued by relevant data protection authorities.

Otherwise, we securely erase your information once this is no longer needed.

For further information on how long your information will be retained by Onto, please get in touch with us using the details set out below.

Any changes we make to our Policy will be posted on our website. We will advise you of significant changes to this Policy where we have your contact details.

Onto provides eco-friendly electric rental cars for drivers. “Onto” is the trading name of Onto Holdings Limited, a company registered in England and Wales with registration number 10479888. Our registered address is 3 Hermes Court, Hermes Close, Warwick, England, CV34 6NJ,

Onto collects, stores, processes and discloses (collectively "uses") your information in a manner which complies with data protection law as applicable in the UK and this Policy. In respect of the personal information we process, we are the data controllers.

If you have any queries or requests regarding the privacy of your personal information, or if you have any questions about this Policy, please contact us using the details set out below.

On the basis of entering into a contract with you or fulfilling our obligations under any contract, we use your information to:

1. Verify your identity in order to comply with applicable laws and regulations (Know Your Customer)

2. Check that you are qualified to drive and your driving history

3. Check your credit history for the purpose of credit and risk management (for the avoidance of doubt we do not undertake a full credit check)

4. Provide our rental car services to you/allow you to access our vehicles.

5. For customer service purposes, record phone calls and store chats,emails and any other contract enquiries

6. Respond to official inquiries from duly authorised governmental or judicial authorities. 

Where we have your consent we will use your information to:

1. Send updates/marketing to those who registered on our website and opted-in to receiving such information.

2. Please note that when we use your information on the basis of having your consent, you may withdraw this consent at any time. For further information please see the Your Rights section above.

Where we have a legitimate interest in processing your data to safeguard our legitimate interests or those of third parties insofar as this is necessary and provided that such interests do not prevail over your interests or fundamental rights and freedoms that require protection, we will use your information for:

1. Improvement of the quality of our products and services, evaluation and optimization of market analysis procedures and direct contact with customers, as well as measures for loyalty and service improvement, including personalisation through customer segmentation of the products and services you already use.

2. Improvement of process efficiency (e.g. for training our employees through telephone call recordings) and IT operations.

3. Maintaining  the security of our sites we will collect your information via CCTV.

4. Ensuring the safety of our vehicles we will collect your driving style, routes and journey footage through telematics and dashcams and will use such data to develop statistical and predictive criteria models. Further we may may periodically request information from the DVLA, regarding any current endorsements on your driving license or as to the current status of your license.

5. Detection, prevention and investigation of crime, in particular fraud 

If you contact us through our website or over the phone, register for an account, register your interest or otherwise communicate with us, we may collect the following information that you give to us:

1. Your name

2. Your email address

3. Your address

4. Your postcode

5. Your country

6. Mobile telephone number

7. Date of birth

8. Nationality

9. Country of birth

10. UK residency  

11. Driving license details (number, expiry, location and scanned copy)

12. DVLA check code (although this is only temporarily and expires after use)

13. Your preferences

You only have to provide personal data necessary for us to provide you with the service. In this context, you need to communicate any data necessary for the establishment, performance or termination of the service, including any changes to your personal data. Without this information, Onto will usually have to refuse to enter into a contract with you or may no longer be able to perform an existing contract and may have to terminate it.

Information we collect automatically when you visit our website:

1. We use Cookies and other similar technologies to collect your information when you visit our website.

2. For more information about how Cookies work and how they are used to collect your information please see the Cookies Policy outlined below.

As we use your information, circumstances may arise in which we transfer your information outside the EEA or the UK (as the case may be). For example, the servers used to host your information could be located in a third party country, such as the United States of America. 

Nevertheless, when your data is transferred in this way we ensure that your data privacy is adequately maintained by adhering to certain safeguards approved under data protection laws. [ If you wish to find further information or to obtain a copy of the safeguards put in place to protect your information when it is transferred outside the EEA, please contact us using the details set out below.]

We take care to adopt appropriate technological and organisational measures to protect the security of the personal information used by Onto. For example, your information is securely backed up and password protected with access limited to an appropriate range of Onto individuals.

Please direct your queries to [email protected] or 0800 030 6840.

A cookie is a simple text file of letters and numbers that is stored on your browser or the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive.

Our website uses cookies to distinguish you from other users of our website. This helps us to improve user experience when you use our website and allows us to improve our site

Cookies provide us with useful information, which we use to improve our website and identify some of your preferences. When you revisit our website, Onto’s computer server will recognise the cookie, giving us information about your previous visits and in turn helping us to analyse how users interact with our sites so we can make improvements. This is statistical data about our users' browsing actions and patterns, and does not identify you as an individual.

We use Cookies and similar tracking technologies on our website. Some of these are necessary for the operation of the website, while others are used to support and improve your experience of the website and tailor content to you.

1. Managing Cookies

   1. You may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. If you block all cookies (including essential cookies) you might not be able to access all parts of our site.

   2. For more information on cookies and how to manage your preferences, please see http://www.allaboutcookies.org/.

We use the following types of Cookie on our driver portal:

1. Google analytics - These cookies are used to collect information about how visitors use our website and WordPress blog. We use the information to compile reports and to help us improve the website

2. "Cross-Site Request Forgery" protection - https://www.squarefree.com/securitytips/web-developers.html#CSRF

3. django_language - These cookies are used to understand what language the website should be delivered to you in.

4. Login token - These cookies are used to remember your login credentials so you don’t need to login on numerous occasions.

5. We use the following types of Cookies on our main website

   1. Google analytics - These cookies are used to collect information about how visitors use our website and WordPress blog. We use the information to compile reports and to help us improve the website

   2. Facebook, Google Ads, Scale Digital and TikTok Pixel - These cookies are used to collect information to improve the user experience, understand what kinds of visitors use our service and show them more relevant content.

   3. Plugin cookies  - These cookies are used to collect information to help us improve the website and make it easier to use.

1. We will share your information with our third party service providers who need your data to fulfill our contractual and legal obligations, the data processors used by us who may receive data for these purposes are companies in the categories of customer verification checks, customer service, IT services, logistics, printing services, telecommunications, debt collection, accounting and business administration as well as sales and marketing, in particular:().

   1. We share your data with our hosting service provider, Digital Ocean, who are located in the USA.

   2. We may share your data with insurers. The insurer will then be controllers of the information provided to them, rather than processing it on our behalf. The data shared will include data that we collect to monitor driving and may be used as evidence in any incidents.

2. In the event that Onto is acquired by a third party or enters into any type of reorganisation, merger or business sale your information will be shared with or transferred to our successor, assignee or acquirer.

3. We may also disclose information about you to law enforcement authorities or other government officials, if we are required to do so by law, or when we believe disclosure is necessary or appropriate.

4. We may provide information to the DVLA, local authorities and other relevant organisations seeking to collect any fines or penalties including private parking operators.

5. Please note that Onto is not responsible for the privacy notices and practices of other websites, even if these are accessed using links from our own website.