Privacy Policy

Who we are

Autospektr Rentals is the vehicle rental business of Autospektr Ltd., operating in Winnipeg, Manitoba. This policy covers rentals.autospektr.ca and the information you give us when you book a vehicle through it.

We are subject to the Personal Information Protection and Electronic Documents Act, the federal privacy law that applies to businesses in Manitoba.

What we collect

If you only browse the site, we do not ask you for anything. Our server and our network provider record the usual technical details of a web request, including your IP address, so the site can be delivered and protected from abuse.

If you book a vehicle, we collect what a rental agreement and Manitoba insurance require:

Your full name and date of birth, because the minimum rental age is 18 and we have to confirm it.
Your email address, phone number and home address, including city and country.
Your driver's licence number, issuing province or country, expiry date, and photographs of the front and back of the licence.
An emergency contact: their name, relationship to you, phone number and email address.
Details of the rental itself: dates, pickup location or delivery address, distance for delivery, and whether you hold a credit card.

When you photograph your licence, the reading of it happens inside your own browser. The photographs and the details read from them are then sent to us as part of your booking.

Why we need it

We collect this information to rent you a vehicle, and for nothing else. Specifically:

To confirm you are old enough to rent and hold a valid, unexpired licence.
To arrange MPI Rental Vehicle Insurance on the rental, which requires the driver's details.
To produce and sign the rental agreement.
To reach you about your booking, and to reach your emergency contact if we cannot reach you.
To recover the vehicle if it is not returned.

We do not use your information to advertise to you, and we do not sell it to anyone.

How we protect it

Photographs of your driver's licence are encrypted before they are written to disk, using AES-256-GCM. If encryption cannot be performed for any reason, the system refuses to store the image rather than saving it unprotected. The images are not reachable from the public web.

The whole site is served over HTTPS, so what you send us is encrypted in transit. Access to customer records is limited to Autospektr staff who need it to do their job.

How long we keep it

We keep the photographs of your driver's licence for one year after your rental ends, then delete them. That year covers a damage claim, a traffic ticket or a dispute that surfaces after the vehicle comes back.

The rental record itself, including your name, contact details and the licence number and expiry, is kept longer, because tax and business records law requires it. We keep it no longer than we have to.

Who we share it with

We disclose customer information outside Autospektr in three situations:

Manitoba Public Insurance, to arrange the insurance on your rental and to handle any claim.
Coughlin, our insurance broker, in connection with coverage and claims.
Police, or a collection agency, if a vehicle is not returned or an amount owed goes to collection.

That is the complete list. We do not share your information with advertisers, data brokers, analytics companies or marketing partners.

Outside services we use

Three outside services handle information for us, and use it only to provide their service to us.

Cloudflare delivers and protects this website, and sees the IP address of every request.
Google Fonts supplies the typefaces used on the site. Your browser requests them from Google, which discloses your IP address to Google.
Brevo, an email company based in France, sends our emails to you. It receives your name, your email address and what each email says, and keeps them on its servers in the European Union. It also records whether each email was delivered, when it was first opened and which links in it were clicked, and tells us, so we know you received it.

Your rights

Under Canadian privacy law you can:

Ask what personal information we hold about you, and get a copy of it.
Ask us to correct anything that is wrong.
Withdraw your consent, though we cannot rent you a vehicle without the information the agreement and the insurer require.
Complain to the Office of the Privacy Commissioner of Canada if you are not satisfied with how we have handled your information.

We will respond to a request within 30 days. We may need to verify your identity first, so that we do not hand your information to someone else.

Contacting us about privacy

To ask about this policy, to see what we hold, or to ask us to correct or delete something, contact us and say it is a privacy request so it reaches the right person.

Our phone number, email address and locations are on the contact page.

Changes to this policy

If we change how we handle personal information, we will update this page and change the date at the top. Material changes to what we collect or who we share it with will be reflected here before they take effect.