Development status
This website version is a development draft and has not yet received final production legal approval.
The uploaded Privacy Policy contains several statements that do not match the current application implementation, including direct collection of complete payment-card details and references to CRM, telematics, and other services that have not been verified as active.
Those claims are therefore not presented as current website behavior here.
Scope
Royal Servicess LLC operates a self-drive vehicle-rental website and related customer and staff workflows.
This draft describes information handled by the current website for account access, booking, vehicle requests, driver verification, payment reconciliation, rental agreements, pickup, return, and customer support.
Information handled by the current application
Account information
Information such as name, email address, phone number, account status, and profile information provided by the customer.
Reservation information
Selected vehicle, requested pickup and return dates and times, booking references, booking status, and related customer requests.
Driver-verification information
Driver-licence information and licence files voluntarily uploaded through the customer account or reviewed by authorized staff.
Agreement information
Agreement versions, acceptance records, electronic signatures, finalized agreement documents, and associated booking data.
Rental-operation records
Records used for vehicle release, pickup, return, completion, and related staff actions.
Security and session information
Authentication, secure-session, CSRF-protection, rate-limiting, and application-log information required to operate and protect the website.
Payment information
The approved application architecture uses Stripe Checkout for online payment entry.
The Royal Servicess Laravel application is not designed to store complete payment-card numbers or card security codes.
The application stores the booking and payment records needed to reconcile payment status, payment events, refunds, deposits where applicable, and related transaction references.
Verified Stripe webhooks, rather than a browser success page, are used as the authoritative online payment confirmation mechanism.
Driver licences, signatures, agreements, and private files
Driver-licence uploads, signatures, agreement snapshots, and finalized agreement PDFs are treated as private information.
These files are kept outside the public website directory and are accessed through authorized application workflows rather than direct public file links.
Customer access is restricted to records associated with the customer's own account. Staff access is subject to authentication, account status, role, and authorization controls.
How information is used
- Create and maintain customer accounts.
- Process reservation requests and check physical vehicle availability.
- Review driver information before vehicle release.
- Create and maintain booking-specific rental agreements.
- Reconcile online payment status and process supported payment actions.
- Operate pickup, vehicle release, return, and rental-completion workflows.
- Deliver transactional account, booking, payment, and agreement communications.
- Protect the application, investigate errors, and maintain administrative audit records.
Service providers and required disclosures
Royal Servicess may use service providers necessary to operate the website and rental workflow, including hosting, payment-processing, and transactional email services.
Information should be limited to what is necessary for the relevant operational purpose and may also be disclosed where required by applicable law, legal process, fraud investigation, dispute resolution, or vehicle-rental operations.
Application security
The current Laravel application uses authentication, authorization, CSRF protection, validation, secure sessions, rate limiting, database query protections, and role-based access controls.
Sensitive customer documents are kept outside the public web root and require application authorization for access.
Important administrative and operational actions are designed to be recorded so that security-sensitive changes can be reviewed.
Account information and correction
Customers can maintain applicable profile information through their account and may contact Royal Servicess regarding information that appears inaccurate.
Some booking, payment, agreement, security, dispute, tax, or operational records may need to remain available where required for legitimate business or legal purposes.
Final privacy-contact details and the final production retention policy remain pending business and legal approval.
Your account remains separate from the public website.
Sign in to review the customer-facing information and rental records available through your account.