Privacy Policy

1. Who we are

4N Rentals (“4N Rentals,” “we,” “us,” “our”) operates the exotic car and watercraft rental business at 4nrentals.com, headquartered in Santa Rosa Beach, Florida, and serving the 30A and Destin areas. This policy describes what information we collect through 4nrentals.com, how we use and protect it, and the rights you have over it. It applies only to this website; if you become a rental customer, your rental agreement will govern any additional information collected during the rental itself.

Questions, requests, or complaints: Destinrentals@icloud.com · (850) 797-9515.

2. Information we collect

2.1 Information you send us. The contact form on /contact collects the following, and only when you submit it: your name, email address, phone number (optional), vehicle or package interest, intended start date, rental length, and the body of your message. We do not collect payment information through the website. We do not collect government identifiers, financial account numbers, or precise geolocation.

2.2 Information collected automatically.When you visit any page, our hosting provider Vercel receives standard web request data: IP address, browser user-agent, page URL, referring URL, timestamp. Vercel uses this to serve the site, protect against attacks, and maintain operational logs. We use Vercel’s privacy-first Speed Insights product to measure Core Web Vitals (page-load and interactivity timings) and Vercel Analytics for aggregate pageview counts. Both are designed to avoid cookies and avoid persistent identifiers.

2.3 Spam prevention.The contact form uses a hidden “honeypot” field together with server-side validation to block automated and spam submissions. This inspects only the form fields you submit — it does not collect browser fingerprinting signals, does not set cookies, does not use persistent identifiers, and is not used for advertising.

2.4 Cookies and similar technologies.The website does not set any advertising or analytics cookies. We don’t embed third-party advertising SDKs, tag managers, or pixels. Vercel may briefly use sessionStorage for measurement (cleared when you close the browser tab) and the 4n-fleet-tab key in localStorage to remember whether you last viewed the Luxury, Everyday, or Group Travel fleet tab. You can clear localStorage at any time through your browser settings.

2.5 What we do not collect. We do not collect: government identifiers, payment information, financial account details, precise geolocation, biometric information, health information, immigration status, union membership, sexual orientation, racial or ethnic origin, religious or philosophical beliefs, political opinions, or genetic data.

3. How we use information

• Reply to your reservation inquiry by email or phone.
• Schedule and confirm your rental, then coordinate delivery.
• Provide customer support before, during, and after your rental.
• Improve site reliability and performance using aggregate, non-identifying analytics.
• Detect and prevent automated and spam abuse of the contact form (hidden honeypot field and server-side validation).
• Comply with applicable law and respond to legal process if required.

4. Legal bases for processing (EU / UK / Swiss residents)

Where the EU General Data Protection Regulation (“GDPR”), the UK GDPR, or the Swiss Federal Act on Data Protection (“FADP”) applies, our legal bases for processing personal information are:

• Consent — when you voluntarily submit the contact form, you provide consent for us to use the information to respond.
• Legitimate interest — aggregate analytics for site improvement; bot detection for security; standard operational logging.
• Legal obligation — record-keeping required by Florida or US federal law.
• Performance of a contract — once you become a rental customer, the data is processed to perform the rental contract.

5. How we share information

We share the minimum information necessary with the limited service providers that help us run the site and respond to you. None of these are advertising networks, data brokers, or analytics resellers.

• Resend (email delivery) — receives the body of your contact form submission so we can be notified by email. Resend privacy policy.
• Vercel (hosting, Speed Insights, Analytics) — processes web requests to serve pages, measure Core Web Vitals, and count pageviews in aggregate. Vercel privacy policy.
• Legal authorities — only when compelled by valid legal process (subpoena, court order, government request) or where required by law.

We do not sell or rent personal information. We do not share personal information for cross-context behavioral advertising.

6. International data transfers

Our hosting provider Vercel and our email provider Resend operate global edge and regional networks. Your information may be processed in the United States or in regions outside your country of residence. Where required by GDPR or UK GDPR, those transfers rely on the European Commission’s Standard Contractual Clauses or equivalent transfer mechanisms maintained by those providers.

7. Data retention

Reservation inquiry emails.We retain inquiry emails in our regular email account for as long as is reasonably necessary to honor an active or recent rental engagement — typically less than twelve (12) months from your last contact with us. You may request earlier deletion at any time.

Operational logs.Vercel hosting logs are retained per Vercel’s standard operational retention (typically thirty (30) days for request logs).

Analytics. Vercel Speed Insights and Vercel Analytics retain aggregate metrics; no individual record is associated with you, so there is nothing individual to delete.

8. Data security

We use industry-standard administrative and technical safeguards to protect the information we hold, including:

• HTTPS everywhere. The entire site is served over TLS, with HSTS preload enforced by our hosting provider.
• Content Security Policy blocking unexpected scripts, frames, plugins, and form actions.
• Permissions Policy denying access to camera, microphone, geolocation, payment, USB, and other powerful browser features the site does not use.
• Server-side input validation (Zod schema) on the contact endpoint, rejecting malformed submissions before they reach our email provider.
• A hidden honeypot field blocks automated and spam abuse of the contact form before submissions are processed.
• Minimum-necessary access — only the 4N Rentals owner and authorized agency operators see inquiry email content.
• Encryption in transit and at rest by our hosting and email providers.

No system is perfectly secure. If we ever become aware of a security incident that affects your information, we will notify you and the relevant authorities consistent with applicable law.

9. Your rights (general)

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete information we no longer need to keep.
• Export the information you provided in a portable format.
• Object to certain processing.
• Restrict certain processing pending verification or correction.
• Withdraw consent where processing is based on consent.
• Not be discriminated against for exercising any of these rights.

To exercise any of these rights, email Destinrentals@icloud.comwith your request. We will respond within forty-five (45) days, or sooner where required by law, and at no cost to you. We may verify your identity using the email address on file.

10. California residents (CCPA / CPRA)

If you reside in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), gives you additional rights:

• Right to know what personal information we collect, use, share, and sell.
• Right to delete personal information we collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of.
• Right to limit use of sensitive personal information — we do not collect or process sensitive personal information for purposes that trigger this right.
• Right to non-discrimination for exercising any of these rights.

Categories of personal information collected in the last 12 months: identifiers (name, email, phone), commercial information (rental interest), internet activity (Vercel hosting + privacy-first analytics).

Categories shared with service providers: identifiers, commercial information, internet activity — with Resend and Vercel only, for the purposes described in Section 5.

Categories sold or shared for cross-context behavioral advertising: none.

To submit a CCPA request, email Destinrentals@icloud.com. An authorized agent may submit a request on your behalf with written, signed authorization. You may also designate an authorized agent under California Civil Code § 1798.135.

11. Other US state privacy laws

If you reside in a US state with a comprehensive consumer privacy law — including but not limited to Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Tennessee (TIPA), Indiana (ICDPA), New Jersey (NJDPA), Delaware (DPDPA), and Florida (FDBR), and others as they are enacted — you may have rights similar to those described in Sections 9 and 10. To exercise them, email Destinrentals@icloud.com.

12. EU / UK / Swiss residents (GDPR + UK GDPR + FADP)

In addition to the general rights in Section 9, residents of the European Economic Area, the United Kingdom, and Switzerland have the right to lodge a complaint with their local data protection supervisory authority. We do not currently have an EU representative because we do not target the EU market; if you believe this is incorrect for your circumstances, please contact us.

13. Children

4nrentals.com is not directed at children under thirteen (13), and we do not knowingly collect personal information from children under thirteen consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has submitted information through our site, email us and we will delete it promptly.

14. Do Not Track signals

We do not track you across third-party sites for advertising, so there is nothing to opt out of via Do Not Track. We honor opt-out signals from the Global Privacy Control (GPC) browser setting where applicable.

15. Third-party links

The site links to our profiles on Instagram and Facebook, and may link to third-party services such as Google Maps or Turo from time to time. Once you click an outbound link you leave 4nrentals.com and the destination’s privacy policy applies. We do not control and are not responsible for the privacy practices of third-party sites.

16. Changes to this policy

We may update this policy as our practices change or as new laws take effect. The “Effective” date at the top of the page reflects the latest revision. Material changes will be communicated by updating that date and, where appropriate, by direct notice to active rental customers. Continued use of the site after a change constitutes acceptance of the updated policy.

17. Governing law and disputes

This policy is governed by the laws of the State of Florida, without regard to its conflict-of-laws principles. Where you have rights under a specific state or country’s privacy law (Sections 10, 11, 12), those laws apply to the processing of your personal information.

18. Contact

4N Rentals
Santa Rosa Beach, FL
Destinrentals@icloud.com
(850) 797-9515

This privacy policy is provided as a comprehensive baseline drafted with full knowledge of the 4nrentals.com implementation. It is not legal advice. We recommend reviewing with a licensed attorney before relying on it for compliance in any specific jurisdiction.