Privacy Policy

Hulk Cars Rental LLC ("Kivo Voyage"), Al Ain – Dubai Road, Dubai, United Arab Emirates, operates the Kivo Voyage website and mobile application. Trade of automobiles and light motor vehicles; operation of the Kivo Voyage travel-booking platform. We are the data controller for the personal information described in this policy.

• Account information: name, email address, password hash, preferred currency and language.
• Booking data: passenger names, passport details, date of birth, contact phone numbers.
• Payment information: billing address and last four digits of card (full card data is processed by our PCI-DSS-certified payment partner).
• Usage data: pages visited, search queries, click events, device type, browser version, and IP address.
• Communications: messages sent via our contact form or live chat.

• To process and confirm flight, hotel, and car-rental bookings.
• To send booking confirmations, e-tickets, and operational updates.
• To personalise search results and display relevant price alerts.
• To detect, investigate, and prevent fraudulent transactions.
• To improve our products through aggregated analytics.
• To comply with legal obligations, such as anti-money-laundering checks.

• Contract performance: processing necessary to fulfil your bookings.
• Legitimate interests: fraud prevention, security monitoring, and product analytics.
• Consent: marketing emails and non-essential cookies (you may withdraw consent at any time).
• Legal obligation: tax records, airline passenger data requirements, and applicable UAE data-protection rules.
• Where you are in the European Economic Area or United Kingdom, we also rely on the legal bases set out in the GDPR.

We share your data only with airlines, hotels, and car-rental providers strictly to fulfil your booking; payment processors operating under data-processing agreements; analytics sub-processors (e.g., Google Analytics); and regulators or law-enforcement authorities when legally required. We never sell your personal data to third parties for marketing.

Your data may be processed in the United Arab Emirates and in other countries where our suppliers or sub-processors operate. Where required, transfers are safeguarded by appropriate contractual clauses, adequacy decisions, or other mechanisms recognised under applicable law.

Booking records are retained for up to 7 years to comply with applicable commercial and tax requirements in the United Arab Emirates. Account data is deleted within 30 days of an account deletion request, unless retention is required by law. Analytics data is aggregated and anonymised after 26 months.

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data ("right to be forgotten").
• Portability: receive your data in a machine-readable format.
• Restriction: ask us to limit processing while a complaint is investigated.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent at any time without affecting prior processing.

We use essential, analytics, marketing, and preference cookies. You can manage your choices on our Cookie Settings page at any time.

We employ TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular penetration testing to protect your data.

We may update this policy periodically. We will notify you of material changes by email or via an in-app banner at least 30 days before they take effect.

Contact our Data Protection Officer at privacy@kivovoyage.com or write to Hulk Cars Rental LLC, Al Ain – Dubai Road, Dubai, United Arab Emirates. You may also lodge a complaint with the UAE Data Office or the supervisory authority in your country of residence, where applicable.