1. Who we are
This website is operated by [LEGAL ENTITY NAME] ("we", "us"), [REGISTERED ADDRESS], North Cyprus. We are the data controller for the personal data described in this policy. You can contact us at [CONTACT EMAIL] or through our contact page.
2. What personal data we collect
When you request a booking we collect the information you enter in the form: your name, email address, telephone number, pick-up and drop-off locations, full address where you provide one, flight number and arrival time for airport pick-ups, travel date and time, number of passengers, vehicle class, child-seat requirements, and any notes you add.
Technical data. When a booking is submitted we also record the IP address and browser identification (user-agent) of the device used. Our hosting and security provider processes connection data in order to deliver the site and protect it against abuse.
Administration records. Actions performed in our administration panel are logged together with the administrator's email address and IP address, for security and accountability.
We do not knowingly collect personal data from children, and we do not collect special categories of data such as health, religious or biometric information.
3. Why we use your data and on what legal basis
- To arrange and carry out your transfer — performance of a contract (GDPR Art. 6(1)(b)).
- To contact you about your booking — performance of a contract (Art. 6(1)(b)).
- To keep records required for accounting and tax purposes — legal obligation (Art. 6(1)(c)).
- To keep the website secure and prevent abuse — our legitimate interests (Art. 6(1)(f)).
We do not use your personal data for automated decision-making or profiling, and we do not sell it.
4. Who receives your data
We share personal data only with providers that help us operate the service:
- Cloudflare — content delivery, DNS and security protection. Processes connection data including your IP address.
- Our email provider — booking notifications and confirmations are sent by email.
- Telegram — booking notifications are delivered to our team through Telegram Messenger.
- Google Maps — our contact page embeds a Google map. When it loads, Google receives your IP address and may set cookies.
- OpenStreetMap (Nominatim) and OSRM — used to look up addresses and calculate routes when you use the booking form.
Each provider processes data under its own terms and applicable data protection law.
5. International transfers
We operate from North Cyprus and some of our providers are located outside the European Economic Area. Where personal data leaves the EEA we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
6. How long we keep your data
- Booking records: [RETENTION PERIOD, e.g. 5 years] for accounting and legal purposes.
- Administration and security logs: [RETENTION PERIOD, e.g. 12 months].
When a retention period ends the data is deleted or anonymised.
7. Your rights
Under the GDPR you have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and to object to processing based on legitimate interests. Where processing is based on consent you may withdraw it at any time.
To exercise any of these rights, contact us at [CONTACT EMAIL]. We will respond within one month. If you believe we have not handled your data properly, you have the right to lodge a complaint with the data protection authority in your country of residence.
8. Cookies
We use a strictly necessary cookie called admin_session, which is set only when an administrator signs in to the management panel. Visitors to the public website are not given this cookie.
Our security and delivery provider may set technical cookies that are necessary to protect the site and keep it available.
If we introduce analytics or marketing cookies in the future, we will ask for your consent before they are set.
9. How we protect your data
The website is served over encrypted HTTPS connections. Access to the administration panel requires authentication, passwords are stored only as cryptographic hashes, and administrative actions are logged.
10. Changes to this policy
We may update this policy. The revision date shown at the top of the page tells you when it was last changed.
11. Contact
For any question about this policy or about your personal data, contact [CONTACT EMAIL].