GDPR Compliance

Last updated: July 2026

General Data Protection Regulation

nimble-meadow is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual necessity: Processing required to fulfill vehicle rental agreements
• Legal obligation: Compliance with financial, tax, and regulatory requirements
• Legitimate interests: Fraud prevention and business operations
• Consent: Marketing communications (where explicitly provided)

Data Subject Rights

Under GDPR, individuals have the following rights:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements.

Right to Restrict Processing

You may request limitation of how we process your personal information under certain circumstances.

Right to Data Portability

You may request transfer of your personal data to another service provider in a structured, commonly used format.

Right to Object

You may object to processing of your personal data for direct marketing purposes or based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Data Protection Officer

For data protection enquiries or to exercise your rights, contact us at [email protected]

International Data Transfers

Personal data is processed and stored within the United Kingdom. We do not transfer personal data outside the UK or European Economic Area.

Data Breach Notification

In the event of a personal data breach that poses a risk to individual rights and freedoms, we will notify affected individuals and relevant supervisory authorities within 72 hours, as required by GDPR.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk

Automated Decision Making

We do not use automated decision making or profiling that produces legal effects or similarly significant impacts on individuals.

Children's Data

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children.