Privacy Policy

BMC Auto Rental (“BMC,” “we,” “our,” or “us”) operates this website at bmcauto.com from Northern Kentucky and serves customers in the United States. This Privacy Policy explains what information we collect from you, how we use it, who we share it with, and the choices you have. By using our website or submitting a form, you agree to this Policy.

1. Information We Collect

Information you provide directly

We collect the information you submit through our forms. Specifically:

• Quote / booking requests: first and last name, email, phone, mailing address (street, city, ZIP), pickup location, pickup and return dates and times, vehicle type, rental type, and any notes you choose to include.
• Contact form: name, email, phone (optional), preferred BMC location, subject, and message.

Information collected automatically

When you visit our site, our hosting provider and security tools may automatically record limited technical information such as your IP address, browser type, device type, referring page, and the time of your visit. We use this information for site operation, security, and abuse prevention. We do not use cookies or third-party analytics for advertising or behavioral tracking.

Our forms are protected by Cloudflare Turnstile, an anti-spam tool that may collect limited interaction data (such as mouse movement signals) to determine whether the submission is from a human. This data is processed by Cloudflare under its own privacy terms.

2. How We Use Your Information

We use the information you submit to:

• respond to your quote request, contact inquiry, or question;
• arrange, confirm, and follow up on rentals or services you request;
• maintain internal records of customer communications;
• protect against fraud, spam, and abuse of our forms; and
• comply with applicable legal obligations.

We do not sell your personal information, and we do not use it for targeted advertising.

3. How We Share Information

We share information only as needed to operate our business:

• BMC staff at the relevant location. Form submissions are routed to the BMC location you selected so a member of our team can contact you.
• Service providers we rely on to run the site. This includes our email provider (Google, used to deliver notification emails), Google Workspace / Google Sheets (used to keep an internal record of submissions), Cloudflare (used for spam protection on our forms), and our website hosting provider. These providers process data on our behalf under their own terms and security practices.
• Legal compliance. We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, safety, or property of BMC, our customers, or the public.

4. Data Retention

We retain form submissions and customer correspondence for as long as reasonably necessary to provide our services, maintain business records, and comply with our legal obligations. You may request deletion of your information by contacting us at the email below, and we will honor your request unless we are required to retain it for a specific legal or business reason.

5. Security

We use reasonable administrative and technical safeguards to protect the information you submit, including HTTPS encryption for data in transit and access controls on the inbox and spreadsheet where submissions are stored. No method of internet transmission or electronic storage is 100% secure, however, and we cannot guarantee absolute security.

6. Your Rights and Choices

You may contact us at any time to:

• request a copy of the personal information we have about you;
• request that we correct inaccurate information;
• request that we delete your information; or
• opt out of further communications.

Residents of California, Colorado, Connecticut, Utah, Virginia, and other states that grant statutory privacy rights may have additional rights under their state laws, including the right to know, the right to correct, the right to delete, and the right to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise any of these rights, contact us at the address below; we will not discriminate against you for exercising them.

7. Children's Privacy

Our website and services are intended for adults and are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information through our site, please contact us so we can delete it.

8. Third-Party Links

Our site may link to third-party websites (for example, U-Haul.com or our automotive inventory provider). Those sites are governed by their own privacy policies, and we are not responsible for their practices.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective date” above. Significant changes will be reflected on this page; we encourage you to review the Policy periodically.

10. Contact Us

Questions, requests, or concerns about this Privacy Policy or your information can be sent to us at: