DATA PROTECTION NOTICE

Last updated: October 2026

1. Who We Are

Harris (U.K.), trading as Harris Rentals, is the controller of the personal data described in this notice.

2. Personal Data We Use

Depending on the rental and the services provided, we may use:

• identity and contact details, including names, addresses, telephone numbers and email addresses;
• driving licence details, date of birth and other identification or eligibility information;
• rental, booking, account, billing and payment information;
• details of authorised drivers and other users of the vehicle;
• communications, complaints, claims and customer-service records;
• vehicle information, including registration, vehicle identification number, mileage, fuel or battery level and condition reports;
• telematics and connected-vehicle data, which may include location, journey, driving-event, diagnostic, security and usage information;
• accident, damage, breakdown, recovery, insurance and fraud-prevention information; and
• information stored in or transmitted through vehicle infotainment systems where a driver connects a device or account.

3. Why We Use Personal Data

• to arrange, provide and administer the rental and associated services;
• to verify identity, driving eligibility and compliance with the rental agreement;
• to take and manage payments, deposits, refunds, charges and debts;
• to allocate, maintain, repair, recover and protect vehicles;
• to provide roadside assistance and respond to accidents and emergencies;
• to investigate damage, misuse, unauthorised use, complaints, fraud, theft and legal claims;
• to manage insurance, penalties, tolls, parking charges and requests from public authorities;
• to keep records, comply with legal and regulatory obligations and enforce our rights; and
• to send marketing where permitted by law and in accordance with your preferences.

4. Lawful Bases

We use personal data only where a lawful basis applies. Depending on the purpose, we rely on:

• Contract, where processing is necessary to enter into or perform the rental agreement;
• Legitimate interests, including fleet management, asset protection, safety, fraud prevention, claims management, debt recovery and enforcement of contractual rights;
• Legal obligation, where processing is required to comply with applicable law;
• Vital interests, where necessary to respond to a serious accident or emergency; and
• Consent, where the law requires consent for a separate optional activity, such as certain marketing or non-essential cookies.

We do not ordinarily rely on consent for processing that is necessary to provide the rental service, protect the vehicle or administer and enforce the rental agreement.

5. Vehicle and Telematics Data

Rental vehicles may contain telematics, tracking, connected-vehicle, diagnostic or security systems. These systems may collect and transmit vehicle location, mileage, journey, driving-event, fuel or battery, fault, maintenance, collision, tampering and security information.

We may process this information to manage the rental and fleet, verify mileage and permitted use, arrange maintenance and roadside support, investigate accidents or damage, prevent fraud, locate an overdue, lost or stolen vehicle, recover our property and comply with legal obligations.

Location data may be processed automatically and may be accessed where reasonably necessary for an authorised purpose. Further information is set out in the Harris Rentals Vehicle Telematics Notice.

6. Drivers and Other Users

The customer must provide the Harris Rentals Privacy Notice and Vehicle Telematics Notice to every authorised driver or other vehicle user before that person first uses the vehicle. The customer must not disable, remove, obstruct, alter or interfere with any telematics, tracking, connected-vehicle, security, safety, emissions or diagnostic system.

7. Infotainment Systems and Connected Apps

If a driver or passenger pairs a phone or other device with a vehicle, or signs into an infotainment, navigation or manufacturer application, personal data may be transferred to or stored in that system and may also be processed by the vehicle manufacturer or application provider under its own privacy notice.

Before returning the vehicle, the customer and drivers should remove paired devices, personal profiles, contacts, messages, navigation history, destinations and account credentials, and should remove the vehicle from any connected application. Harris Rentals is not responsible for personal data left in the vehicle by a customer or driver, except to the extent required by law.

8. Sharing Personal Data

Where lawful and necessary, we may share personal data with:

• Harris Group companies supporting the rental operation;
• vehicle owners, funders, manufacturers and authorised dealers or repairers;
• telematics, connected-vehicle, IT, payment, communications and other service providers;
• maintenance, repair, bodyshop, inspection, recovery, breakdown and roadside-assistance providers;
• insurers, brokers, claims handlers, loss adjusters and professional advisers;
• debt-recovery, fraud-prevention and vehicle-recovery providers;
• police, courts, regulators, licensing bodies and other public authorities where lawful; and
• a purchaser or proposed purchaser in connection with a sale, merger, financing or other business transaction.

Some recipients, including vehicle manufacturers and insurers, may act as separate controllers for their own purposes and their privacy notices may also apply.

9. International Transfers

Some suppliers, manufacturers or service providers may process personal data outside the United Kingdom. Where Harris Rentals makes a restricted transfer, we will use an approved transfer mechanism and appropriate safeguards where required by data protection law.

10. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to perform the rental agreement, comply with legal obligations, maintain business and safety records, resolve disputes and establish, exercise or defend legal claims. Information relating to an accident, theft, claim, complaint, debt, investigation or legal obligation may be retained for longer where necessary. Further details are available in the Harris Rentals Privacy Notice and retention schedule.

11. Your Rights

Subject to applicable law and relevant exemptions, you may have rights to:

• access your personal data;
• have inaccurate personal data corrected;
• request erasure or restriction of processing;
• object to processing based on legitimate interests;
• receive certain personal data in a portable format; and
• withdraw consent at any time where consent is the lawful basis.

To exercise a right, contact info@harrisrentals.co.uk. We will normally respond within one month, although the law permits an extension in certain circumstances.

12. Security

We use appropriate technical and organisational measures intended to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure. Access is limited to personnel and service providers who need it for an authorised purpose.

13. Complaints

Please contact Harris Rentals first at info@harrisrentals.co.uk if you have a concern about how we use personal data. You may also complain to the Information Commissioner?s Office:

Information Commissioner?s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

Individuals in the European Economic Area may also contact their local data protection supervisory authority.

14. Changes to This Notice

We may update this notice where our services, vehicles, systems, suppliers or legal obligations change. The current version and its date will be made available on the Harris Rentals website.

Customer Acknowledgement