This Privacy Policy explains how Lease to Own Car Rental L.L.C. ("Lease2Own", "we", "us" or "our") collects, uses, shares and protects personal data when you use the website lease2own.ae (the "Website"), submit an application, contact us or use our services. We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and other applicable laws of the United Arab Emirates.
1. Who is responsible for your data
The controller of your personal data is Lease to Own Car Rental L.L.C., Commercial License No. 1296004 issued by the Department of Economy and Tourism, Dubai, with its office at Office 3-13, Abdulrahman Hassan Mohammed Al Rostamani Building, Al Wasl, Dubai, UAE, P.O. Box 33890.
For any privacy question or request, contact us at info@lease2own.ae or by phone or WhatsApp at +971 55 841 9863.
2. What data we collect
Online application
When you apply through the Website, we collect your name, phone number and email address, details of the car you are interested in (make, model, year, mileage and the seller's price), the desired lease term and your consent choices. The application does not ask for documents. If we send you an offer, you may be asked to provide documents – your Emirates ID, passport, AECB credit report and bank statements for the last 3 months – through the secure link in the offer email.
Partner request
When a dealer, showroom or broker submits a partner request, we collect the business name, the contact person's name, position, phone number, email address and the information provided about the business.
Chat assistant
When you use the AI chat assistant, we collect and store the content of your conversation. The assistant does not ask for contact details; please do not share them or any documents in the chat.
Communications
When you contact us by WhatsApp, phone or email, we keep records of the correspondence and notes of our conversations with you.
Visit journey and technical data
When you visit the Website, we record technical information needed to operate and secure it, such as your IP address, browser and device type, pages visited, the referring website and the time of your visit. To understand which advertising and channels bring visitors to us, we record your journey on the Website, including the landing page and campaign parameters in the link (UTM tags and advertising click identifiers), and we attach this information to any application or request you submit. We also keep a log of your cookie consent choices (what you accepted or rejected and when) so that we can respect and demonstrate them.
Cookies and analytics
With your consent, we use analytics and marketing tools such as Google Analytics 4, Microsoft Clarity, Google Ads and Meta Pixel. These tools are loaded only after you consent. More details are available in our Cookie Policy.
Lease clients
If you enter into a lease with us, we also process data necessary to perform the contract, such as your driving licence, residential address, employment details, payment records, vehicle registration, insurance details, Salik and traffic fine records.
3. Why we use your data and on what legal basis
| Purpose | Legal basis under the PDPL |
|---|---|
| Reviewing your application, assessing the car and your eligibility, preparing a preliminary offer | Steps taken at your request before entering into a contract; your consent where you provide documents |
| Verifying your identity and checking your AECB credit report | Your consent; steps before entering into a contract; compliance with legal obligations |
| Preparing, signing and performing the lease agreement, including payments, insurance, registration, fines and buyout | Performance of a contract |
| Anti-money laundering, counter-terrorist financing and know-your-customer checks, record keeping and responding to authorities | Compliance with legal obligations under UAE law |
| Contacting you by WhatsApp, phone or email about your application or request | Your request; steps before entering into a contract |
| Operating the chat assistant and responding to your questions | Your request and consent when you use the chat |
| Handling partner requests and managing partner relationships | Steps before entering into a contract |
| Keeping the Website secure, preventing fraud and abuse | Our legitimate interests in protecting our business and users, to the extent permitted by the PDPL |
| Measuring traffic, understanding the effectiveness of advertising and improving the Website | Your consent (cookies and similar technologies) |
| Establishing, exercising or defending legal claims | Compliance with legal obligations; protection of our rights |
Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before it. If you do not provide information we need to assess an application or perform a contract, we may be unable to proceed with your request.
4. How we handle your documents
Documents you provide through the link in the offer email, such as your Emirates ID, passport, AECB credit report and bank statements, are used only to assess your application, verify your identity, check your credit report, prepare the offer and the lease agreement, and comply with our legal obligations, including AML and KYC requirements. We do not use them for marketing and we do not sell them.
Documents are transmitted over an encrypted connection directly to Credit Mind, the credit management system used by our team to review applications. Access is limited to authorised staff who need it for these purposes.
5. Who we share your data with
We share personal data only to the extent necessary for the purposes described above:
- Credit Mind – our credit management system, where our team reviews applications and manages client relationships.
- Insurers – our approved partner insurers, to arrange comprehensive insurance for the leased car under our fleet policy.
- Roads and Transport Authority (RTA) and other government bodies – when registering the car, transferring ownership to you, processing traffic fines and Salik, and whenever required by law.
- Sellers, dealers and partners – only as needed to purchase and deliver the car you have chosen, for example to confirm the buyer details and arrange handover.
- Al Etihad Credit Bureau (AECB) – where a credit report check is carried out with your consent.
- Service providers acting on our behalf, including our hosting provider Hetzner Online GmbH, our AI provider Anthropic (which powers the chat assistant), and analytics and advertising providers (Google, Microsoft, Meta) where you have consented to cookies.
- Professional advisers, auditors, banks and payment providers – where needed to process payments, keep accounts and obtain advice.
- Courts, law enforcement and regulators – where we are legally required to disclose data or need to protect our rights.
Our service providers may process your data only on our instructions and are required to keep it confidential and secure. We do not sell your personal data.
6. International transfers
The Website and the data you submit through it are hosted by Hetzner Online GmbH on servers located in the European Union (Finland). The European Union applies data protection standards (the GDPR) that provide an adequate level of protection for personal data, consistent with the requirements of the PDPL for cross-border transfers.
The chat assistant is powered by Anthropic, whose processing may take place in the United States. Analytics and advertising providers may also process data outside the UAE. Where data is transferred to a country that does not provide an equivalent level of protection, we rely on appropriate safeguards permitted under the PDPL, such as contractual commitments requiring the recipient to protect the data, restrictions on its use, and technical measures such as encryption in transit. We limit the data shared with the AI provider to the content of the chat, and we ask users not to share sensitive information in the chat.
7. How long we keep your data
- Applications that do not lead to a contract – documents are deleted within 12 months. Basic contact and application details may be kept for the same period to handle follow-up questions, unless you ask us to delete them earlier.
- Lease clients – data and documents are kept for the duration of the relationship and afterwards for the period required by UAE law, for example 5 years after the end of the relationship for anti-money laundering record keeping, or longer where needed to deal with a legal claim.
- Chat conversations – kept for as long as needed to respond and follow up, and in any case no longer than 12 months unless they form part of an application or contract.
- Partner requests – kept for the duration of discussions and any partnership, and then as required by law.
- Consent log and analytics data – consent records are kept for as long as needed to demonstrate your choices; analytics data is kept according to the retention settings of each tool.
8. How we protect your data
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include encrypted connections (HTTPS), access controls and role-based permissions for staff, secure hosting in professional data centres, regular backups, logging of access to systems, and confidentiality obligations for staff and service providers. No method of transmission over the internet is completely secure, but we work to protect your data and will notify you and the competent authorities of a data breach where required by the PDPL.
9. Your rights
Subject to the conditions and exceptions set out in the PDPL, you have the right to:
- access the personal data we hold about you and receive information on how it is processed;
- correct inaccurate or incomplete data;
- delete your data where it is no longer needed or processing is unlawful, unless we must keep it by law;
- restrict processing in certain circumstances, for example while the accuracy of the data is checked;
- object to processing, including processing for direct marketing and profiling;
- data portability – receive your data in a structured, commonly used format and have it transferred to another controller where technically feasible;
- withdraw consent at any time, including consent to cookies via the "Cookie settings" link in the footer of the Website.
To exercise any of these rights, email us at info@lease2own.ae or contact us by WhatsApp at +971 55 841 9863. We may ask you to confirm your identity before acting on your request. We will respond within the time limits set by the PDPL. If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office.
10. Children
The Website and our services are intended for adults. Our lease services are available only to clients aged 24 and over, and the Website is not directed at persons under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology or the law. The updated version will be published on this page with the date of the last update. Where changes are significant, we will take reasonable steps to inform you.
12. Contact us
If you have any questions about this Privacy Policy or how we process your data, please contact us:
- Email: info@lease2own.ae
- Phone and WhatsApp: +971 55 841 9863
- Post: Lease to Own Car Rental L.L.C., Office 3-13, Abdulrahman Hassan Mohammed Al Rostamani Building, Al Wasl, Dubai, UAE, P.O. Box 33890