Review status. The data-flow descriptions below reflect the current site implementation. The proposed retention schedule, vendor contracts and final effective date still require approval. This review copy is not a claim of legal or insurer approval.
1. Notice at collection
We collect only information reasonably needed to answer a request, evaluate a driver and trip, provide a confirmed rental, operate accounts and security controls, communicate, keep required records, and respond to incidents or legal obligations.
| Category | Examples | Primary purposes | Proposed retention criteria |
|---|---|---|---|
| Identifiers and contact details | Name, email, phone, account ID, provider reference | Requests, service messages, account access, support, reconciliation | Open request or account life, then up to four years unless a longer legal hold applies |
| Trip and commercial records | Vehicle, dates, quote, status, mileage terms, charges, refund and cancellation records | Quote and trip administration, accounting, disputes, legal records | Generally seven years after the transaction or closure |
| Verification results | Provider result, expiration, document or certificate reference | Driver eligibility and handoff readiness | Result and evidence reference for the trip record; raw license images and selfies are not stored by Mells |
| Internet and security data | IP address, user agent, timestamps, session and request logs | Authentication, abuse prevention, debugging, site security | Session term plus a limited security-log period, proposed at no more than 12 months unless needed for an incident |
| Communications | Emails, texts, call notes, request notes, support messages | Responding to you and documenting decisions | Request or trip life, then up to four years unless a dispute or law requires longer |
| Browser choices | Theme, saved cars, saved dates, privacy preference | Remembering choices on your device | Until you clear browser storage or the item expires |
| Email preferences | Optional marketing choice and the time of that choice | Sending offers only after opt-in and honoring unsubscribe requests | While subscribed; a minimal suppression record may be retained to honor a refusal |
| Campaign and advertising data | Campaign labels, landing path and referring host; ad click identifiers only with advertising consent | Understanding which campaigns generate requests; optional Google Ads / Meta measurement | Campaign browser storage lasts for the tab; attribution attached to a request follows the proposed request-record schedule |
2. Sources of information
- Directly from you: request forms, account forms, messages, calls, signed documents, and information you provide at pick-up or return.
- From the checkout provider: the exact reservation reference, itemized transaction outcome, verification result, signed-document reference, and other evidence needed to reconcile the trip.
- Automatically from the site: technical request data, necessary cookies, local browser storage, and security events.
- From lawful operational sources: vehicle owners, service providers, authorities, or other parties involved in a collision, citation, dispute, or claim.
3. Driver and payment provider boundary
Wheelbase is the intended Phase 1 checkout provider after the Mells account and each vehicle are approved. The provider may ask you directly for driver-license information, identity evidence, card details, a security authorization, signatures, and a provider choice under its own notice and terms.
Mells is designed to retain the provider reference, result, amount, relevant version, and timestamp—not your raw card number, security code, license image, or selfie. If the provider flow is not active or a required result cannot be matched to the exact trip, Mells stops the direct checkout.
4. Service providers and disclosures
We may disclose the minimum necessary information to vendors that perform services for Mells and are subject to applicable contract terms:
- Cloudflare: hosting, content delivery, D1 database services, traffic security, and technical logs.
- Wheelbase, when activated: exact-reservation checkout, payment and security authorization, driver verification, provider options, and electronic signatures.
- Resend: account-verification, request-status and conversation-notification emails. If you separately opt into offers, your email and first name are also added to the Mells Rentals marketing audience. Marketing-email unsubscribe links are handled by Resend.
- Google Sign-In, if you choose it: authentication using your Google account identifier, name, email and verification status. Signing in does not opt you into marketing emails or advertising cookies.
- Google Ads and Meta, only when configured and allowed in Cookie choices: optional advertising measurement on public browsing/request pages. These providers may receive page and conversion events, page URLs, IP addresses, browser information and advertising identifiers. Mells does not deliberately include form contents, names, email addresses, phone numbers, VINs, licence details, private conversation text or booking-access tokens in advertising events.
- Google Fonts: font files requested by the browser from Google domains.
- unpkg: delivery of the Leaflet map library used by current map views.
- Esri: map tiles and attribution for fixed vehicle or service-area maps.
- Professional and legal recipients: accountants, lawyers, auditors, authorities, and parties needed to protect rights, satisfy law, or handle an incident.
When your browser requests a third-party font, library, or map tile, that provider can receive ordinary connection information such as IP address, browser details, the requested URL, and time.
6. California privacy choices
California law may give you rights to know or access personal information, request deletion, request correction, receive information about categories of disclosure, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service when exercising a right.
Whether or not every California Consumer Privacy Act threshold applies to this pilot, Mells accepts access, deletion, and correction requests through the contact methods below. We may need to verify your identity and match the request to our records. An authorized agent may submit a request with proof of authority; we may still verify directly with you when permitted.
Submit a request: email nikulinmells@gmail.com with “Privacy Request” in the subject, or call +1 234 980 5783. Do not email a driver-license image, card number, or password.
7. Security and data minimization
Mells uses access controls, server-side sessions, hashed credentials and tokens, restricted operator routes, and data minimization. No internet system can promise absolute security. If you believe information was exposed or a checkout link was forwarded, contact us promptly so access can be revoked and investigated.
8. Age limits
The Phase 1 provider flow is intended for drivers age 25 and older. Mells does not knowingly collect personal information from children through this service. Contact us if you believe a child submitted information.
9. Changes and contact
We may update this notice as the site, providers, or law change. The current version will show its effective date. Material changes will be presented through an appropriate notice before they apply when required.
Nikulin Rentals LLC d/b/a Mells Rentals
Los Angeles County, California
nikulinmells@gmail.com
+1 234 980 5783