Cookie Policy.

Cookies are small text files a website stores in your browser to remember things between pages or visits. Similar technologies include local storage (a browser data store), session storage, and tracking pixels. Privacy laws treat them all alike, so this policy covers them all.

Cookies are usually classed as: strictly necessary (the site can't work without them), preference, analytics, and advertising cookies.

Clubs Car Rental sets no cookies of its own on clubsrentalcar.com and uses no local or session storage of its own. This is verified against the site's own code, not a template statement — and it is a statement about our code: where a page loads an embedded third-party service, that service's own technologies apply, and one of them, our payment provider, can use cookies and browser storage while you are on this site. The next section names each one.

How we manage without them: your language preference is part of the page address itself (/en or /es), and your booking selection — location, dates, driver age — travels in the address of each page as you move from search to checkout. Nothing is written to your device, and nothing persists after you close the tab.

The web framework the site runs on may keep short-lived technical entries in your browser's session memory strictly to make navigation work (for example, remembering your scroll position). They contain nothing about you, are never sent to us, and expire when the tab closes.

We do not operate a cookie consent banner. Our own code places no cookie and no browser storage on any page of this site. The payment fields described below are the one part of the site that can, and they load only when a booking offers online payment and you choose it — never on any other page, and never if you pay at the counter instead. Whether that surface requires a consent mechanism is a question for our counsel; if the answer is yes, the mechanism ships with it and this page describes it.

Three features can load content from a third party — the first automatically where the map appears, the other two only if you choose to open them. Here is exactly what each one does:

• Locations map — the map of our three offices automatically requests map tiles from CARTO (basemaps.cartocdn.com), built on OpenStreetMap data, when the map renders. Like any web request, tile requests can transmit technical data to the provider: your IP address, your browser's user agent and, subject to your browser's referrer policy, the address of the page. In our audit, the tile requests we checked returned no cookies (no Set-Cookie headers were observed). We do not use the map for advertising, retargeting or profiling.
• Video-call scheduler — nothing from Cal.com loads until you choose to open "Schedule a video call". When you do, the booking calendar is provided by Cal.com inside an embedded frame and operates as an external service under Cal.com's own privacy and cookie policies; Cal.com processes the technical data of your visit and whatever you enter in its interface.

Once the scheduler is open, Cal.com's infrastructure sets a technical security cookie named __cf_bm, provided by Cloudflare as part of Cal.com's protection against automated traffic (bot management), with an observed lifetime of about 30 minutes. It is a third-party cookie set by Cal.com's infrastructure — not a Clubs Car Rental cookie.

Cal.com may also run its own internal measurement tools inside the scheduler — our audit identified PostHog and Google Analytics operating within Cal.com's environment — and it may process UTM or similar attribution parameters present in the visit. These analytics tools operate within Cal.com's service and are not integrated or controlled directly by this website; the processing happens inside the external service after you load the scheduler and is governed by Cal.com's privacy practices.

• Online payment — when a booking offers "Pay now", the checkout shows Stripe's payment fields for that option inside components Stripe, our payment provider, serves and controls. Opening the checkout while that option is available runs Stripe's payment library in your browser — even if you then choose to pay at the counter instead — and nothing from Stripe loads on any other page. Stripe documents that this library uses cookies and similar browser-storage technologies for payment functionality, authentication, security and fraud prevention. Because that library runs on this site, those cookies are set as first-party cookies on our own domain rather than on a Stripe domain: we have observed that they currently include __stripe_mid and __stripe_sid. They are placed by Stripe's technology, for Stripe's payment-security and fraud-prevention purposes, and we neither read them nor use them for any purpose of our own. If you choose to pay with crypto, Stripe takes you to its own crypto payment surface to connect your wallet, and anything set there belongs to that Stripe domain rather than to ours. For the same purposes Stripe collects risk signals about your browser, device and network and about activity during the payment session, and it may load a CAPTCHA-style challenge. Stripe states that this fraud-detection data is never used for advertising and is not rented, sold or given to advertisers, and that the activity signals are scoped to a single session on a single site rather than linked across sites. These are Stripe's technologies, used for Stripe's payment and fraud-prevention purposes under Stripe's own privacy and cookie policies — they are not Clubs Car Rental advertising or analytics cookies, and we do not use them to measure or profile you.

Links that leave our site — WhatsApp, phone, email, and Google Maps directions — open the respective service; those services apply their own policies once you're there.

We integrate no analytics scripts and no advertising or social-media pixels of our own — we cannot retarget you based on your visit to our site. (For the measurement tools Cal.com runs inside its scheduler, and for our payment provider's fraud-prevention technologies, see the embedded-services section above.)

One first-party request does exist, and it is not a cookie: if your browser blocks something our Content Security Policy disallows, it posts a short technical report to our own site so we can fix the problem. It stores nothing on your device, sets no identifier and is never used to measure or profile visitors. The Privacy Policy describes exactly which fields it contains.

If we ever adopt analytics, it will be privacy-respecting and aggregate-only (never used to identify you or build advertising profiles), and it will be disclosed on this page before going live.

You can block or delete cookies for any site in your browser's privacy settings (look for "Cookies and site data"). We set none of our own, so blocking cookies does not affect how this site works.

Blocking third-party cookies may affect the embedded services: the Cal.com scheduler, and the payment fields if online payment is offered. If either stops working you can still reach us — book a call by phone or WhatsApp, and pay at the counter.

Some browsers send "Do Not Track" or Global Privacy Control (GPC) signals. We do no tracking of our own and we do not sell or share personal information, so on our side there is nothing for these signals to opt you out of: we honor them by default, by design. Embedded third-party services respond to such signals under their own policies; the payment provider's technologies described above exist for payment and fraud prevention, not for advertising.

We review this policy at least every 12 months and whenever the site's actual behavior changes. The "Last updated" date above always reflects the current version. Any new cookie, storage use, or analytics tool will be described here before it ships.

Questions about this policy — we answer in English and Spanish:

• Email: info@clubsenterprise.com
• Phone: +1 800-437-5707
• WhatsApp: +1 (305) 632-2782

See also our Privacy Policy for how we handle personal information overall.