Skip to content
Legal

Privacy Policy

SlickExotics is an exotic-car rental operation in Irvine, California. This explains what we collect when you browse, book, and verify — and the choices you have. We wrote it to be read, not to hide behind.

Last updated — June 2026

01The short version

We collect what we need to rent you a car: your contact details, your booking, payment handled by our processor, and a verified driver's license. We keep it only as long as we need it, we don't sell it, and you can ask us to show you or delete it.

The one thing worth knowing up front: we never store a copy of your government ID. Identity verification runs through Stripe Identity, which holds the document — we receive only a pass/fail result and a few derived facts (like "over 18" and the license expiry).

02What we collect

Depending on how you use the site, that's:

Contact & leads
Name, email, and phone when you reach out, join the list, or start a booking.
Booking details
The car, dates, pickup/return, and any notes you add to a reservation.
Payment
Card payments and deposits are processed by Stripe. We don't see or store your full card number — Stripe does, under its own controls.
Identity verification
A verification result from Stripe Identity, plus minimal derived data (age-eligibility, license expiry, last-4 of the license number, document state/country). Never the ID image itself.
Insurance documents
If a booking requires proof of coverage, the certificate of insurance / declarations page you upload for concierge review.
Usage data
Standard server logs (IP, browser, pages) and — only with your consent — analytics about how the site is used.

03ID verification & insurance

Renting an exotic means we have to confirm two things: that you're a licensed, eligible driver, and — when required — that the car is covered. Here's exactly how we do that, and what we keep.

Driver's license & age. Verification is performed by Stripe Identity, a specialist vendor. You're sent to Stripe's own hosted flow to scan your ID and take a selfie — that document and photo go to Stripe, not to us. Stripe checks authenticity and a liveness match and returns a result. We store only: the verification status, Stripe's verification ID (a pointer, not the document), and minimal derived facts (an age-eligibility flag, license expiry, last-4 of the license number, and the issuing state/country). We never receive or store the raw ID image.
Insurance. When a booking requires it, you upload your certificate of insurance to private, access-controlled storage. A staff member reviews coverage before confirming — there's no automated insurance "score." These documents are never public, are reachable only through short-lived signed links by authorized staff, and are deleted on the retention schedule below.

Where a verification step isn't configured for a booking, it falls back to an attestation (you confirm you meet the requirements). Either way, we keep an audit trail of who passed which gate and when, so a rental decision is accountable.

04How we use it

  • To take and fulfill your reservation, and to staff and stage the car.
  • To verify you're an eligible driver and (when required) that the car is insured.
  • To process deposits and payments through Stripe.
  • To contact you about your booking, and — if you opt in — about offers.
  • To keep the site secure, prevent fraud, and meet our legal obligations.
  • With your consent, to understand how the site is used so we can improve it.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

05Who we share it with

We use a small set of vetted service providers ("processors") to run the business. They handle data on our behalf under contract and may not use it for their own purposes:

Stripe
Payments and deposits. See Stripe's privacy policy.
Stripe Identity
Government-ID verification — holds the document; returns a result to us.
Sanity
Content management for the site's fleet and editorial content.
Resend
Transactional and marketing email delivery.
Analytics
If you consent, a privacy-respecting analytics provider measures aggregate site usage (IP anonymized).

We may also disclose information when required by law, to enforce our agreements, or as part of a business transfer.

06Cookies & tracking

We use essential cookies to make the site and booking flow work, and — only with your consent — analytics cookies. You can change your choice at any time. Full detail is in our Cookie Policy.

07How long we keep it

  • Booking and transaction records: as long as needed for the rental, then for the period required for tax, accounting, and legal claims.
  • Verification metadata (status, token, derived facts): kept only while needed to support the rental and our records, then purged on schedule — and on a valid deletion request. The raw ID lives with Stripe under its policy, not with us.
  • Insurance documents: deleted after the rental and its review window close.
  • Marketing contacts: until you unsubscribe or ask us to delete you.
  • Analytics: retained in aggregate per the provider's settings.

08Your rights (California & EU/UK)

California (CCPA/CPRA). If you're a California resident, you have the right to know what we collect, to access a copy, to correct it, to delete it, and to opt out of any sale or sharing — and we won't discriminate against you for exercising these rights. We don't sell or share your data, but you can still tell us to delete it.

EU/UK (GDPR). If you're in the EU or UK, you also have rights to access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. Our legal bases are: performing your rental contract, our legitimate interest in running and securing the business, your consent (analytics/marketing), and compliance with law.

To make a request, use our contact form. We'll verify your identity (so we don't hand your data to someone else) and respond within the timeframe the law requires. You may use an authorized agent, and EU/UK residents may complain to their local data protection authority.

09Security

We protect data in transit with TLS and at rest with encryption, limit access to verification and booking data to authorized staff, and keep an audit trail. Our highest-risk data — your ID document — never sits with us at all; it stays with Stripe. No system is perfectly secure, but we designed this one to hold as little sensitive data as the job allows.

10Children

Renters must be 18 or older. The site isn't directed to children, and we don't knowingly collect information from anyone under 18.

11Changes to this policy

We'll update this page when our practices change and revise the date at the top. Material changes that affect cookies or consent will prompt us to ask again.

12Contact us

Questions, requests, or anything else — reach the team:

Phone
+1 (949) 431-4601
Location
Irvine, CA — serving Newport Beach
Hours
Mon–Sun, 8am–11pm PT