Privacy Policy: How We Handle Your Booking Details
Alpha Car Rentals collects information when you browse alphacarrental.pk or submit a booking or contact form. This policy covers its use, storage, service providers and requests for copies or deletion. Our office is in Block 13-D, Gulshan-e-Iqbal, Karachi; the contact page has the full address. Reach us by phone or WhatsApp on +92 311 2847167. Last updated: 4 October 2026.
What the booking and contact forms collect
The booking form asks for the car you want, your pickup date and reporting time, a return date, your name, mobile number, email address and pickup address, and, if you choose to add them, a map link and a note about your travel plans. The contact form asks for your name, email address, a subject and your message, with a phone number if you want to give one. When either form is sent, the saved copy also records the time it arrived, a shortened description of your browser (its user agent) and a one-way code made from your internet (IP) address rather than the address itself. Neither form asks for a CNIC or passport number or for payment card details.
Why we use your details
We use what you send to reply to you by WhatsApp, phone or email about your enquiry and quote; to arrange the booking, which means giving the driver assigned to it the pickup address and time he needs; to invoice companies that pay monthly; and to keep a record of what was agreed in case a question comes up later. The browser and internet address details are there to stop spam: the site accepts no more than 10 forms an hour from one internet address. Visit and click data from Google Analytics and the Meta Pixel shows us which pages and adverts lead to enquiries, so we know where to spend on advertising.
Where your form is stored and who can read it
The website is hosted by Netlify. A form you send is saved in this site's storage on Netlify, and a copy goes to Netlify Forms so that it reaches our booking team. Submissions are read by our team through a password-protected admin area and by the people who look after the website for us; that admin area uses its own sign-in cookie, which only staff ever receive. Like any web host, Netlify's servers receive your IP address and browser details when they deliver a page to you. Netlify, Google and Meta may process data on servers outside Pakistan.
Google Analytics
We use Google Analytics 4 to understand how the site is used. It records the pages you open, the car pages you look at, a form sent successfully and a tap on our call or WhatsApp links, along with general details such as your device type. Google uses your IP address to work out roughly where you are, to the level of a city or country, and says that Google Analytics 4 does not log or store IP addresses. Event-level data is kept for the retention period set in our Analytics account, which Google offers as 2 or 14 months; the totals in standard reports are not affected by that setting. Analytics never runs in the site's admin area. Google explains what it does with data from sites like ours on its page 'How Google uses information from sites or apps that use our services', at policies.google.com/technologies/partner-sites.
Meta Pixel and the Conversions API
We use the Meta Pixel to measure our adverts on Facebook and Instagram. In your browser it reports page views, the car pages you open, a form sent successfully (a lead) and taps on our call or WhatsApp links. When tracking is enabled and a form is sent, our server also reports that same lead to Meta through the Conversions API, so it is counted even if an ad blocker stopped the browser from doing it. That server message carries your email address and phone number only as SHA-256 hashes, one-way codes that Meta compares with the hashed details of its own users, so the address and number themselves are not sent. It also carries your IP address, your browser's user agent and the _fbp and _fbc values, which Meta asks to receive unhashed, along with the address of the page you sent the form from and whether it was a booking or a message. Your name, pickup address, dates and message are not part of it.
Adverts on Facebook and Instagram, and how to opt out
Meta is a third party, and it can use what the Pixel and the Conversions API send from this site, together with what it gathers elsewhere on the internet, to measure adverts and to choose and deliver the adverts it shows, ours included, under its own privacy policy. If you do not want your activity on websites like this one used to choose your adverts, open the account settings in Facebook or Instagram, go to Ad preferences and turn off the use of activity information from ad partners. The industry opt-out pages at aboutads.info/choices and youronlinechoices.eu offer a similar choice for the companies that take part in them.
Cookies and similar browser storage
Cookies are small text files a website keeps in your browser. The listed cookies are used for Google Analytics and the Meta Pixel, and Meta's script can also keep similar values in your browser's local storage. The _fbc cookie is only set when you arrive from a Facebook or Instagram link, such as one of our adverts, that adds a click code (fbclid) to the web address. The map of our office on the contact page is loaded from Google Maps: when it appears, Google receives your IP address and browser details and may set cookies of its own, under Google's privacy policy. You can block or delete cookies in your browser settings, and the site, the booking form and the contact form all keep working without them. Google offers a free Google Analytics opt-out browser add-on, and many ad blockers stop the Meta Pixel. Blocking the Pixel does not stop our server reporting a form you send, under the Conversions API disclosure. Global Privacy Control disables our analytics and advertising events, including server-side lead reporting.
How long we keep your details
Booking and contact requests are kept for as long as we need them to deal with your booking, invoice it, keep our business records and answer any question about a past trip, and our team can delete a request at any time. To stop spam, the site keeps one more record: a counter for each internet address that sends a form, holding the address, how many forms came from it and when that hour's count began. Only the last hour counts towards the limit, the counter is kept until the next form from the same address replaces it, and it is used for nothing else. Google and Meta keep the data they receive under their own retention rules, under their privacy policies.
Asking for a copy, a correction or deletion
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Send the request on WhatsApp to +92 311 2847167 or through the contact page, from the phone number or email address you used on the form, so we can find your record and know the request comes from you. We will reply on WhatsApp or by email and tell you when it has been done. Data that has already reached Google or Meta is handled under their own privacy settings and policies, which explain how to manage it.
WhatsApp, phone calls and changes to this policy
Most bookings are confirmed on WhatsApp. Messages you send us there travel through WhatsApp, a Meta service that has its own privacy policy, and they stay in our WhatsApp account as the record of your booking. Calls to +92 311 2847167 are ordinary phone calls. If we change what the site collects or which services handle it, we will update this policy and the date shown on it.
Google Maps features: terms and privacy
Our office map and Google customer-review features are subject to the Google Terms of Service and the Google Maps/Google Earth Additional Terms of Service, incorporated here by reference. By using these Google Maps features, you agree to those terms.
The Google Privacy Policy is incorporated into this policy for these features. Google receives your IP address and browser details when its map or reviewer profile images load, or when you open a Google link, and may use cookies under its own policy. Where customer-review cards are displayed, our server retrieves them from Google Places with the available author attribution. We do not add those public reviews to your booking record or keep a stored review feed. Google selects which reviews are returned and their order; the Google Maps profile provides the full review history.
Optional booking location pins
You can add pickup and drop-off pins to an enquiry, or use a written address instead. Your browser requests location permission only when you choose “Use my current pickup location”; we do not track your location in the background. When you send the form, any pins you include are saved privately with your enquiry and included in the booking notifications used by our team to arrange your trip. Pins are not included in our analytics events or the website's WhatsApp greeting. Opening a pin on Google Maps shares that location with Google under its own terms and privacy policy.
Google Maps disclosure updated 21 October 2026.
Cookies used on alphacarrental.pk
| Cookie | Used for | What it does | How long it lasts |
|---|---|---|---|
| _ga | Google Analytics | Tells one browser's visits apart from another's | Up to 2 years |
| _ga_ followed by our property code | Google Analytics | Keeps track of the current visit | Up to 2 years |
| _fbp | Meta Pixel | A browser code Meta uses to measure our adverts | 90 days |
| _fbc | Meta Pixel | Records the Facebook or Instagram click that brought you to the site | 90 days |
| Staff sign-in cookie | Admin area only | Keeps our staff signed in; visitors never receive it | 24 hours, or until sign-out |
Questions people ask
Do you send my phone number to Facebook?
Not as a readable number. When you send a form, our server passes Meta your phone number and email address only as SHA-256 hashes, together with your IP address, your browser details, Meta's own browser codes and the address of the page you sent it from. Meta compares the hashes with the hashed details of its users to count the enquiry against our adverts. Your name, address and travel plans are not sent.
Can I use the website with cookies turned off?
Yes. You can browse and send forms with cookies blocked. Cookie blocking alone does not prevent server-side lead reporting. Global Privacy Control disables our tracking, including server-side leads.
Who sees the pickup address I enter?
Our booking team, the people who look after the website for us, and the driver assigned to your booking, who needs the address and time to collect you. The address is stored on Netlify, which hosts the site, and it is not included in anything sent to Google Analytics or Meta.
Does the website ask for my CNIC or card details?
No. Neither form asks for a CNIC or passport number or for payment card details, so please do not type them into the message box. Payment is made in cash, by bank transfer, by card or online payment, or against a monthly invoice for companies, after your booking quote.
How do I get my details deleted?
Message +92 311 2847167 on WhatsApp, or write to us through the contact page, from the phone number or email address you used on the form, and say what you would like deleted. We will find the record, remove it from the site's storage and from Netlify Forms, and confirm when that has been done.
Book your car
Questions about your data? WhatsApp +92 311 2847167 or write to us through the contact page.