Privacy Policy
Effective date: June 20, 2026 Last updated: June 20, 2026
1. General Provisions
This Privacy Policy (the "Policy") describes how the individual entrepreneur IE MARIIA MORGUNOVA (identification number: 35743997), operator of the MY.DRIVE service hosted at mydrive.club (the "Service", "we", "us", "our"), collects, uses, stores, transfers, and protects users' personal data ("you", the "User").
MY.DRIVE is an online car rental search and booking service that acts as an aggregator connecting Users with rental companies and car owners (the "Partners").
By using the Service, registering an account, or making a booking, you confirm that you have read this Policy and agree to the processing of your personal data on the terms set out herein. If you do not agree with this Policy, please do not use the Service.
Personal data is processed in accordance with the Law of Georgia "On Personal Data Protection" and, with respect to users from the European Union, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").
2. Who Is the Data Controller
The controller of personal data is:
- Name: IE MARIIA MORGUNOVA
- Identification number: 35743997
- Contact email for personal data matters: assist@mydrive.club
For any questions relating to the processing of your data, the exercise of your rights, or this Policy, you may contact us at assist@mydrive.club.
3. What Data We Collect
We collect personal data that you provide voluntarily, as well as data collected automatically when you use the Service.
3.1. Data You Provide
When registering an account, making a booking, or otherwise interacting with the Service, we may collect:
- first and last name;
- email address;
- contact phone number;
- passport or identity document details;
- driver's license details;
- age / date of birth;
- information about your chosen payment method (payment processing takes place directly between you and the Partner or a payment provider — see Section 5).
3.2. Data Collected Automatically
When you use the Service, we may automatically collect technical data:
- IP address;
- browser type and version, device type, operating system;
- data about your activity on the site (pages viewed, navigation history, visit time);
- cookie identifiers and similar technologies (see Section 7).
4. Purposes and Legal Bases for Processing
We process your data for the following purposes:
| Purpose of processing | Legal basis (GDPR) |
|---|---|
| Registration and management of an account | Performance of a contract (Art. 6(1)(b)) |
| Processing and arranging bookings | Performance of a contract (Art. 6(1)(b)) |
| Transferring data to Partners to provide the rental service | Performance of a contract (Art. 6(1)(b)) |
| Communicating with you (confirmations, support, notifications) | Performance of a contract / legitimate interest (Art. 6(1)(b), (f)) |
| Concluding electronic rental agreements signed via one-time code (OTP) | Performance of a contract (Art. 6(1)(b)) |
| Improving the Service, analytics, security | Legitimate interest (Art. 6(1)(f)) |
| Marketing communications and advertising | Consent (Art. 6(1)(a)) |
| Compliance with legal requirements | Legal obligation (Art. 6(1)(c)) |
Marketing communications are sent only with your explicit consent. You may withdraw your consent at any time.
5. Payment Processing
MY.DRIVE does not accept or store Users' payments. Rental payment is made directly between the User and the Partner (rental company) or through third-party payment providers. We do not have access to your full bank card details and do not store them.
6. Whom We Share Data With
Your data may be shared with the following categories of recipients:
- Partners (rental companies and car owners) — to the extent necessary to arrange and fulfill a booking (name, contact details, passport/ID, driver's license). The Partner processes this data as an independent controller in the course of providing the rental service.
- Technical and service providers — hosting, analytics, email distribution, support tools — acting on our behalf under the relevant agreements.
- Government authorities — where required by law, a court request, or to protect our rights and security.
We do not sell your personal data to third parties.
7. Cookies and Analytics
The Service uses cookies and similar technologies, as well as third-party analytics and advertising services, including:
- Google Analytics — web analytics;
- Yandex.Metrica — web analytics;
- Google Ads — advertising and ad campaign performance measurement;
- Facebook (Meta) Pixel — advertising and retargeting.
These services may set their own cookies and collect data about your use of the Service. You can manage cookies through your browser settings, as well as disable non-essential cookies through the consent banner on the site (where available). Disabling certain cookies may affect the functionality of the Service.
8. International Data Transfers
Because our Partners, service providers, and analytics services may be located in different countries, your data may be transferred to and processed outside Georgia and the European Economic Area. In such cases, we take measures to ensure an adequate level of data protection in accordance with applicable law (including standard contractual clauses, where applicable).
9. Data Retention
We retain your personal data no longer than necessary for the purposes set out in this Policy, or for the period required by applicable law (for example, for accounting and tax purposes). After these periods, data is deleted or anonymized.
10. Data Security
We take reasonable organizational and technical measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage of data can guarantee absolute security.
11. Your Rights
With respect to your personal data, you have the right to:
- obtain information about which of your data is being processed (right of access);
- request correction of inaccurate or incomplete data;
- request deletion of data (the "right to be forgotten");
- restrict processing or object to it;
- withdraw previously given consent to processing (for example, for marketing);
- receive your data in a structured, machine-readable format (right to data portability — for EU users);
- lodge a complaint with a supervisory authority (in Georgia — the Personal Data Protection Service; in the EU — the relevant data protection supervisory authority).
To exercise any of these rights, send a request to assist@mydrive.club. We will respond within the timeframes established by applicable law.
12. User Accounts
The Service may allow you to register an account. You are responsible for keeping your account login credentials confidential and for all actions taken using your account. If you discover any unauthorized access, notify us immediately at assist@mydrive.club.
13. Children's Privacy
The Service is not intended for persons under 18 years of age. We do not knowingly collect personal data of minors. If we become aware that we have received such data without consent, we will delete it.
14. Changes to the Policy
We may amend this Policy at any time. The current version is always published on the site with the date of the last update. We may additionally notify you of material changes through the Service or by email. Continued use of the Service after changes are made constitutes your acceptance of the updated Policy.
15. Contact
For any questions relating to this Policy and the processing of personal data, please contact us at assist@mydrive.club.