Privacy Policy

Version 2026-09-21-draft5 — effective the date the attorney-approved text is published. This policy explains what personal information Gotham Dream Cars collects on www.gothamdreamcars.com, by phone and in person, why, who sees it, how long we keep it, and the choices you have. It is written to be read, not skimmed: it is short because we collect little.

1. Who we are

Gotham Dream Cars is a brand of SSR Exotic Rentals, LLC ("we", "us"), 475 Alfred Ave, Teaneck, NJ 07666. Phone (212) 957-4400, email hello@gothamdreamcars.com. We are the business responsible for your information whichever of our brand websites you use.

2. What we collect, and when

Visiting the website. Our website is a set of static pages and does not build a profile of your visit on our own systems, but it is not tracker-free: we use one advertising tag, described below, and nothing else. Five things happen in the background:

• Our web server records the standard access log for each request — your IP address, the page, the time, and your browser type — for security and troubleshooting only.
• Page fonts are loaded from Google Fonts, so your browser sends its request (including your IP address) to Google when a page loads.
• On the booking page, the delivery and collection address boxes offer Google's address suggestions. Google's script loads only when you click into one of those boxes, and while you type there your keystrokes and IP address go to Google to produce the suggestions — nothing else on the page does. You can ignore the suggestions and type the address yourself.
• Live availability checks and every form on the site pass through Cloudflare, which protects us against abuse and sees your IP address in the process. Forms use Cloudflare Turnstile to tell people from bots; Turnstile looks at signals from your browser and does not receive your name or the contents of the form from us.
• Google's advertising tag (gtag.js) loads on each page — unless your browser sends the Global Privacy Control signal, in which case it does not load at all. When it loads, it sets Google advertising cookies and sends Google your IP address, the pages you view and ad-click identifiers, so we can measure which of our Google ads lead to visits and bookings and so Google can show our ads to people who have visited our site. It never receives what you type into forms.

Nothing you type into the site is stored on the website itself. Forms go straight to our reservation system.

When you use a form or book. We collect what the form asks for and nothing more:

• Quote request, coming-soon signup, Dream Share interest, production shoot brief: your name, email, phone, and what you tell us about dates, location, car and occasion; for a shoot brief, your company and insurance-certificate details.
• Parking inquiry or signup: the above plus your vehicle's make, model, year, VIN, plate and insurance policy details.
• Dream Car Tour booking: your name, email, phone, the name of the second person in your spot, and the role each of you takes.
• Online rental checkout: your name, email, mobile phone, the car, dates and pick-up time, any delivery or collection address, the confirmations you tick (age, license, insurance, deposit) and the version of the Booking Terms you accept, with the time you accepted it.

When you pay. Card details are entered into a payment form provided by Stripe, our payment processor, and go directly to Stripe. We never see or store your full card number. Stripe keeps the card on file for the security deposit and the charges the Booking Terms and Rental Agreement describe, and gives us a reference to it, the card brand and its last four digits.

Before and during a rental. To verify you and to run the rental we collect your driver's license and proof of insurance (a photo through the secure upload link in your confirmation email, or in person at handover), your date of birth, an emergency contact, the same details for any additional driver, the signed Rental Agreement, condition photos and mileage and fuel readings for the car, and any toll, parking or traffic notice that arrives for your rental.

Vehicle systems. Our vehicles may be equipped with GPS or telematics that record location, speed and mileage while the car is out. Where a vehicle has them, the Rental Agreement says so, and we use the data for theft recovery, safety and to resolve disputes about a rental — not to market to you.

Talking to us. When you call, email or text us we keep the conversation with your booking so the next person who helps you knows what was said.

Photographs. Photos taken at a Dream Car Tour or an event are delivered to you through a private gallery. We do not use your image in our marketing without your permission.

3. Why we use it

• To answer your inquiry, quote, reserve and deliver the car, and run the rental, tour, parking or Dream Share plan you asked for.
• To verify your identity, license and insurance before handover, and to keep records of past rentals — including a decision not to rent to someone again — so that our fleet and our customers stay safe.
• To take payment, hold or charge the security deposit, and settle post-rental charges exactly as the Booking Terms and Rental Agreement allow.
• To handle tolls, violations, accidents, damage and insurance claims arising from a rental.
• To send the emails a booking needs: confirmations, receipts, reminders about documents and pickup, and notices about your reservation.
• To send marketing (Section 6), which you can stop at any time.
• To measure our Google advertising and reach people who have visited our site with our ads — using only the website-visit data the tag in Section 2 collects, never what you type into forms.
• To comply with law, respond to lawful requests, and protect our rights.

We do not sell your personal information and do not use it for automated decisions that have legal or similarly significant effects on you. The website-visit data shared with Google for advertising (Section 2) is the one advertising use we make; Sections 2 and 7 describe how to stop it.

4. Who we share it with

Only the businesses that help us do the above, and only what each one needs:

• Stripe for payments, deposits and cards on file.
• Cloudflare for website protection and the connection between the site and our reservation system.
• Google, whose advertising tag receives website-visit data as Section 2 describes, and whose fonts service receives your IP address when a page loads.
• Our email provider, and a customer-relationship platform we use to send marketing email and keep a record of who has asked not to hear from us.
• An electronic-signature service, if we send you a document to sign electronically.
• A photo-gallery service for event photos.
• Our accounting software, which mirrors payments and refunds.
• Insurers, adjusters and repair shops for a claim; toll, parking and motor-vehicle authorities and law enforcement when a notice, accident, violation, theft or unreturned vehicle requires it; and collection agencies or attorneys if an amount is left unpaid.
• Professional advisers, and a buyer or successor if our business is sold or reorganized, under the same protections.

Each provider is bound by its own contract with us to use the information only for the service it provides. We share nothing with data brokers, and nothing you type into a form — your name, contact details, license, insurance or booking information — is ever shared with an advertising service; Google's tag sees visits, not form contents.

5. How long we keep it

• An online checkout you don't finish: we keep your contact details and what you tried to book — the car, the dates and the price — so we can help if you call and so we can follow up about that car later (Section 6). We keep them until you ask us to delete them (Section 7), or until you book, when the booking rules below apply.
• Inquiries and quotes that do not become a booking: up to two years, so we can help if you come back.
• Bookings, payments, contracts and rental records: for the life of the rental and any claim, toll or violation from it, and then for the period tax and business-records laws require — generally seven years.
• Driver's license and insurance images: only as long as we need them to verify your booking, prepare the Rental Agreement and resolve any claim, toll or violation from your rental; then we destroy them securely.
• Your card: stays on file with Stripe for the booking's deposit and post-rental charges as the Booking Terms describe, and is removed when it is no longer needed for that purpose or when you ask.
• Web server logs: a short rolling period, measured in weeks.
• Marketing preferences, including that you unsubscribed: for as long as we need them to honor your choice.

6. Marketing, and your choices

Email. If you start an online checkout and don't finish, we may send you one email reminder within about a day, and we may email you later about the car you were looking at — for example when it is free for dates like yours. Every such email has an unsubscribe link, and one click ends them. Beyond that, we send marketing email only to customers and to people who have asked to hear from us; every marketing email has an unsubscribe link, and we honor it promptly. Booking confirmations, receipts and notices about a reservation you hold are not marketing and continue while the booking is active.

Text messages. We text you only with your consent, and only about your booking unless you have separately agreed to marketing texts. Reply STOP to any text to end them. Message and data rates may apply. Consent to texts is never a condition of renting.

Calls. We call about your booking. We do not make marketing calls.

7. Your rights

You can ask us, about the personal information we hold on you, to:

• confirm what we have and give you access to it, or a copy in a portable form;
• correct it;
• delete it, subject to the records we must keep (Section 5 says which);
• opt out of targeted advertising. The only such use we make is the Google advertising tag in Section 2, and your browser's Global Privacy Control signal stops it: when your browser sends GPC, the tag does not load at all. You can also opt out with Google directly at adssettings.google.com or via the industry tools at aboutads.info, and clearing or blocking cookies removes what the tag has set. We do not sell your personal information and do not profile you for decisions with legal or similarly significant effects, so there is nothing else to opt out of.

Email hello@gothamdreamcars.com or call (212) 957-4400. We will verify that the request comes from you (or from someone you have authorized), respond within 45 days, and tell you if we need up to 45 more. If we decline any part of a request we will say why, and you may appeal by replying to our answer; if the appeal is denied you may contact the New Jersey Division of Consumer Affairs. We never treat you differently for exercising these rights.

8. Security

Everything between your browser, the site, Cloudflare, Stripe and our reservation system travels encrypted. The public website holds no customer data at all; your information lives in our reservation system, which is access-controlled, logged and backed up, with license and insurance images kept in private storage that is never reachable from the web. No system is perfectly secure; if a breach ever affects your information we will notify you and the authorities as the law requires.

9. Age

Our customers are adults. You must be at least 18 to use our forms and at least 21 to rent, and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

10. Changes

When this policy changes, the new version and its effective date are published here, and the version in force when you booked is noted with your booking. Material changes that affect an active booking are also emailed to you.

11. Contact

SSR Exotic Rentals, LLC, 475 Alfred Ave, Teaneck, NJ 07666 · (212) 957-4400 · hello@gothamdreamcars.com