Legal

Privacy

What we handle, where it is kept and who else touches it — all of which is settled and stated in full below. The legal determinations on top of it are not settled, and those are marked rather than guessed at.

This notice is not finished

Kusicar's registered company name, legal form, registered address, register entry, tax identification and the person authorised to represent it are not published here yet. They will be taken from the registration documents and printed verbatim, not summarised. Until it is published, the rows below describe what happens rather than who is formally answerable for it.

No cookie banner, and no cookies to ask about

This is deliberate and it is engineered, not an oversight. There is no banner because there is nothing on this site to consent to.

The fonts are served from this site, not from a font network
Nothing on these pages loads from anyone else, so opening a page sends your address to no third party
The visitor count is cookieless and cannot follow you to another site
The only cookies anywhere are the sign-in cookies on the separate app our partners use, which exist to keep them signed in
There is no advertising, no tracking pixel, no social widget and no chat script

A build check enforces this: if any page ever started loading something from another company, the site would fail to release rather than quietly begin sending your address elsewhere.

What we handle, and what for

This is the whole list. If something is not here, we do not ask for it.

Your name, email address and phone number: To confirm the booking and to reach youThe support thread runs on the number you give us.
Your travel dates and flight number: To have the car and a person at the airport when you land
A scan of each driver's licence and passport: To obtain the Zanzibar driving permit every driver needsThis is the most sensitive thing we hold, and it is kept apart from the rest of your booking rather than alongside it.
Photographs taken at handover and at return: To record the condition of the car, for you as much as for usThey are what settles a disagreement about damage without either side relying on memory.

The grounds we rely on are still open

The grounds we rely on for each purpose below are being confirmed with counsel. We would rather leave this open for a few weeks than assert a basis and be wrong about the most sensitive documents we handle.

What we never handle

Two things worth stating because most rental sites cannot.

Card details. Nothing is charged now — the money is settled at the car, so no card number ever reaches this site or our systems
An account. Your booking page opens from a private link in your email, so there is no password of yours to leak and no profile to delete

The booking link is single-purpose and expires. It shows your booking and nothing else — never a document scan, and never anyone else’s booking.

Where it is kept, and who else touches it

Named with their location, because that is the part you cannot check for yourself.

Cloudflare: Serves this website, from the EUThe site is a set of static files. Reading it sends nothing to us.
Supabase: Database and sign-in, in Frankfurt (eu-central-1)Your booking record and the partner accounts live here.
Cloudflare R2: Stores the document scans and the condition photographs, in the EU
Resend: Sends the booking emailsOnly the emails that are part of your booking. There is no mailing list.
Cloudflare Web Analytics: Counts page views, without cookiesIt does not follow you between sites and there is no profile of you to build.

Your details are read in Zanzibar

Your details are stored in Frankfurt, and the people who meet you and hand over the car are in Zanzibar, so some of them are read there. The formal mechanism that covers that crossing is being put in place and named here.

The company that supplies the car

Kibabu Cars meets you, hands the car over and files your driving permit, so the people doing that see your details.

Who is answerable for what is undetermined

Kusicar and the company that supplies the car both handle your details, and which of us decides what happens to them is a determination we have not had made yet. Until it is, we will not describe a division of responsibility we cannot stand behind.

How long anything is kept

We are not going to give you a number we cannot keep.

No retention period is published yet

We are not publishing a number of days or months yet, because the automatic deletion that would honour it is not built. Saying otherwise would be a promise with nothing behind it. Ask us and we will delete what we hold, and the schedule appears here when it runs by itself.

Asking us about your details

Ask on the support thread. It reaches a person, and we would rather answer than have you go looking for a form.

Support number: +255 776 785 757WhatsApp or a normal call.
Data-protection contact: Being confirmedA dedicated data-protection contact is not appointed yet, and whether one is required is part of the same review. In the meantime, write to us on the support thread and it reaches a person.
The formal statement of your rights: Being confirmedIt follows from where the operating company is established, so it is written once that is settled rather than sketched now.
The authority you can complain to: Being confirmedWhether registration with the Zanzibar data-protection authority is required of us, of the company that supplies the car, or of both, is being checked. We will state the outcome either way.

None of that stops you asking today. Tell us what you want to know, corrected or deleted, and we will do it and tell you what we did.

Ask us about your details

Any question about what we hold, why, or getting rid of it.

Chat on WhatsApp