Privacy & Cookie Policy

1. Who we are

Lemon is an online platform that connects you with local car rental companies ("suppliers") in Albania. The data controller for this website is Lemon Car Rental (lemonrents.com).

For any privacy question or request, contact us at info@lemonrents.com or on WhatsApp at +355 69 746 3646.

2. Our role and the supplier's role

When you book, we pass your booking details to the supplier who provides the car. The supplier uses them to prepare and hand over the car and to enter into the rental contract with you, and is responsible for its own processing of your data under that contract.

3. What we collect

Depending on how you use the site, we collect:

• Booking details: name, email, phone number, pickup and return place and times, flight number if you give one, the car and cover you choose and the price.
• Account details if you create an account: email address and login credentials (passwords are stored only in hashed form by our login system).
• Messages you exchange with the supplier in the booking chat, and messages you send us on WhatsApp or by email.
• Payment: if you choose to prepay 13% online, your card details are entered directly with our payment provider POK (pokpay.io). We do not see or store your full card number.
• Technical data: IP address, browser and device type, and the pages you visit, as recorded by our hosting provider and, only if you accept cookies, by the analytics and advertising tools listed below.

4. Why we use it (legal bases)

• To take, manage and support your booking and pass it to the supplier: performance of a contract with you.
• To answer your questions and requests: performance of a contract or our legitimate interest in helping you.
• To keep accounting and tax records: our legal obligations.
• To keep the site secure and prevent fraud and misuse: our legitimate interests.
• To measure how our ads perform and to show you relevant ads: only with your consent, which you can withdraw at any time.

5. Cookies and similar technologies

Strictly necessary storage is always on, because the site cannot work without it: your language choice, your login session, your cookie choice and the email you booked with (kept in your browser only for the current tab, so the booking pages can find your booking).

Analytics and advertising tools are only used if you click "Accept" in the cookie banner. Until then they stay switched off (Google Consent Mode is set to "denied" and the Meta pixel is not loaded). These tools are:

• Google Analytics: how visitors use the site.
• Google Ads: measuring which ads lead to WhatsApp contacts and bookings. When you complete a booking, your email address is sent to Google in hashed (encrypted, one-way) form so the booking can be matched to an ad click ("enhanced conversions").
• Meta Pixel (Facebook/Instagram): measuring and improving our ads on Meta's platforms. It records page views, WhatsApp contact clicks and completed bookings.

You can change your choice at any time with "Cookie settings" at the bottom of every page. We also use Vercel Web Analytics, which counts visits in aggregate without cookies and without identifying you.

6. Who we share data with

We do not sell your personal data. We share it only with:

• The supplier of your rental, so it can provide the car.
• Service providers acting on our behalf: website hosting (Vercel), our servers and email, payments (POK), and WhatsApp (Meta) if you contact us there.
• Google and Meta, only for the analytics and advertising purposes above and only if you accepted cookies.
• Public authorities, when the law requires it.

7. International transfers

Some of these recipients are outside the European Union, including in Albania, where our suppliers operate, and in the United States (for example Google, Meta and Vercel). Where the law requires it, these transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

8. How long we keep it

Booking records are kept for as long as needed to provide and support the booking and then for as long as accounting and tax law requires. Account data is kept until you delete your account or ask us to. Analytics and advertising data is kept according to the settings and policies of Google and Meta.

9. Your rights

You can ask us for access to your data, to correct or delete it, to restrict or object to its use, or to receive it in a portable format, and you can withdraw consent at any time without affecting earlier processing. Write to info@lemonrents.com.

You also have the right to complain to a data protection authority, for example the authority in the EU country where you live (in Italy the Garante per la protezione dei dati personali, in Germany your federal state's data protection authority) or, in Albania, the Commissioner for the Right to Information and Personal Data Protection.

10. Changes

If we change how we handle personal data we will update this page and the date below.