Privacy statement.
How ZZ Car Services handles personal data, in plain language.
Last updated: 12 August 2026
Who is responsible
ZZ Car Services (Kebdanii.nl) operates this platform. For the account data of rental companies we are the data controller. For the customer data that rental companies enter (renters, drivers), the rental company is the controller and ZZ Car Services acts as processor. Contact: contact@zzcarservices.com.
What we store
Company accounts: company name, city, address, phone, email address of users, and invoicing details (Chamber of Commerce and VAT number). Rental administration entered by companies: customer names, phone numbers, identity document numbers, addresses, driving license details, bookings, contracts and invoices. We do not use tracking cookies or advertising profiles. Only functional session storage for logging in.
Why we store it
Solely to make the fleet dashboard work: managing cars, bookings, contracts, invoices and service alerts. Data is never sold or used for advertising.
Where it is stored
Data is stored encrypted in a Supabase database hosted on AWS in London (United Kingdom, covered by the EU adequacy decision). The website runs on Vercel. Transactional email is sent through Resend.
How it is protected
Every rental company has a strictly separated environment enforced at database level (row level security): no company can ever see another company's data. All traffic is encrypted with TLS; data is encrypted at rest. Accounts are created by invitation only.
How long we keep it
As long as the rental company has an account. When a company is removed, all its cars, bookings, customers, contracts and invoices are permanently deleted with it.
Your rights
Companies can view and edit their data directly in the dashboard and export it at any time via Settings. Renters who want access, correction or deletion of their data can contact their rental company (the controller); we support these requests. You can also reach us at contact@zzcarservices.com. You have the right to lodge a complaint with your data protection authority.