Privacy policy

This policy applies to personal data processed by Tripza Cars Limited in connection with our website and apps (including any successor domain names), our booking journeys, customer support, and related services. It does not cover third-party sites we link to; their policies apply there.

You may provide directly:

• Identity & contact: name, email address, phone number.
• Booking details: pick-up / drop-off addresses or labels, dates and times, passenger count, flight numbers where provided, intermediate stops, special requests, and similar journey data.
• Payment-related data: we do not store full card numbers on our servers; payments are handled by our payment provider (see below).
• Account / auth: if you use sign-in features, identifiers and profile data held by our authentication provider.
• Communications: messages you send us (email, forms, chat, or support tickets).

We may collect automatically:

• Technical data: IP address, browser type, device type, approximate location derived from IP, and cookies or similar technologies (see our Cookie policy).
• Usage data: pages viewed, referring URL, and interactions with our site (where analytics are enabled).

We process personal data for the following purposes:

• Contract — to take steps at your request before a contract, perform our agreement with you (e.g. arrange and administer your transfer booking, send confirmations, handle amendments and support).
• Legitimate interests — to operate and improve our website and services, prevent fraud and abuse, analyse aggregated usage, and keep records for disputes and legal claims (balanced against your rights).
• Legal obligation — to comply with law, regulation, or competent authority requests (including transport and tax record-keeping where applicable).
• Consent — where required for optional marketing cookies or marketing emails; you can withdraw consent at any time.

We share personal data only where necessary, with categories of recipients such as:

• Transport operators / drivers — to fulfil your booking (typically name, contact phone, journey and flight details).
• Payment processors (e.g. Stripe) — to take payment securely; they process card data under their own terms and as our processors.
• Supabase (secure cloud database and authentication) — to store booking records, customer details, and run our application on encrypted servers.
• Hosting & infrastructure — to deliver our website and related services.
• Professional advisers — lawyers, accountants, or insurers where required.
• Authorities — when we are required to disclose by law or to protect vital interests.

We require processors to protect your data appropriately and to process it only on our instructions, except where they are controllers in their own right (e.g. payment schemes).

Some of our providers may process data outside the UK. Where we transfer personal data to countries not subject to an adequacy regulation, we use appropriate safeguards (such as the UK International Data Transfer Agreement / Addendum or standard contractual clauses) as required by UK data protection law.

We retain personal data only as long as needed for the purposes above. Booking and payment records are typically kept for up to 7 years after the journey where required for Transport for London (TfL) compliance, tax, accounting, and legal claims. Marketing data is kept until you unsubscribe or withdraw consent. Support logs are kept for a shorter operational period unless a dispute requires longer retention.

We may send service messages about your booking without separate consent (e.g. confirmations and driver updates). Promotional emails or SMS are sent only where you have opted in or we have another lawful basis; you can opt out at any time using the unsubscribe link or by contacting us.

Under UK data protection law you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data or complete incomplete data.
• Erase data in certain circumstances (“right to be forgotten”).
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests or to direct marketing.
• Data portability for data you provided, where processing is automated and based on consent or contract.
• Withdraw consent at any time, where processing is consent-based (without affecting earlier lawful processing).
• Lodge a complaint with the ICO (Information Commissioner's Office).

To exercise your rights, contact us using the details at the top of this page or via Help / contact. We may need to verify your identity before responding.

Personal data is stored on secure servers (including Supabase in the EU/UK or equivalent regions with appropriate safeguards). We implement technical and organisational measures to protect data against unauthorised access, alteration, disclosure, or destruction. Payment card data is handled by Stripe and is not stored on our servers in full.

Tripza Cars Limited is committed to UK data protection law. Where required, we are registered with or will register with the Information Commissioner's Office (ICO) as a data controller. Our registration reference will be published here when allocated.

To exercise your rights (access, correction, erasure, restriction, portability, or objection), contact us via Help / contact with the subject line “Data protection request”. We will respond within one month in most cases, as required by UK GDPR.

Our services are not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have done so, please contact us and we will delete it promptly.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. If that changes, we will update this policy and explain your rights.

We may update this policy from time to time. The “Last updated” date will change when we do. For material changes we may provide additional notice (e.g. on the website or by email). Continued use of our services after changes constitutes acceptance where permitted by law.

Our Terms & conditions and Cookie policy form part of how we operate our service alongside this privacy policy.