Privacy Policy

Last updated: 22 May 2026

Troisa Car Rental Tunisia ("Troisa", "we") respects your privacy. This policy explains what we collect when you use troisa.tn, why, how we protect it, and the rights you have over it. We aim for GDPR-equivalent standards because most of our customers are EU residents.

1. Data we collect

Booking data: name, email, phone, pickup/drop dates, hotel or pickup address, driver licence number (collected at the counter, not stored online).
Account data (if you register): first/last name, email, hashed password, currency preference.
Payment data: collected on arrival, not stored on troisa.tn. Card numbers are never logged.
Browsing data: pages visited, device type, browser, country, anonymous IP (collected via standard server logs and used to fix bugs and improve SEO/UX). Logs are kept 30 days.
Cookies: a session cookie (for currency and login state), plus Google Analytics 4 / Google Search Console behavioural data if you accept cookies.

2. Why we use it

Handle your booking, deliver the vehicle, and provide roadside support during your trip.
Send you the booking confirmation, receipt, and on-trip messages (WhatsApp / email).
Improve the site (analytics, A/B tests, bug reports).
Comply with Tunisian tax, insurance and road-traffic-law obligations.

We do not sell your data to third parties, run remarketing ads with it, or share it beyond what's strictly necessary to fulfil your booking.

3. Who has access

Troisa staff who handle your booking (dispatcher, counter agent, fleet manager).
Sub-processors we depend on: SMTP relay (Gmail / our mail provider), hosting provider (datacenter in Europe), Google Analytics (only if you accept analytics cookies), WhatsApp Business API.
Authorities only if legally required (insurance claim, accident report, court order).

4. How long we keep it

Booking records: 5 years (Tunisian tax/accounting requirement).
Account data: until you delete your account.
Email exchanges: 2 years.
Server logs: 30 days.

5. Your rights

Whether you're in Tunisia or the EU, you can ask us to:

Show you the data we hold on you.
Correct anything wrong.
Delete your account and personal data (subject to legal retention rules).
Export your booking history.
Withdraw consent for analytics cookies (re-enable by clearing your cookies).

Send any of these requests to contact@troisa.tn. We respond within 14 days.

6. Cookies

Strictly necessary cookies (session, currency, login) load by default. Analytics cookies load only if you accept them. You can decline analytics in your browser cookie controls without breaking the site.

7. Security

The site runs on HTTPS. Passwords are hashed (never stored in clear). Payment data is never persisted on our servers. Counter-collected ID copies are kept in a locked office.

8. International transfers

Some of our sub-processors (Google, Meta/WhatsApp) operate outside Tunisia. They have signed Standard Contractual Clauses or Adequacy Decision-compliant transfers.

9. Changes & contact

We may update this policy as the law or our processes evolve. The "last updated" date at the top reflects when. For any privacy question: contact@troisa.tn.

If your country has a data-protection authority and you feel we've mishandled your data, you have the right to file a complaint with them. We'd appreciate the chance to address it directly first.