Privacy Policy
This policy explains what personal data we collect when you use our taxi app, website and booking service, why we collect it, who sees it, how long we keep it, and what rights you have. It is written to meet the Faroese Act on the Protection of Personal Data (Dátuverndarlógin) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is [COMPANY LEGAL NAME], registration number (V-tal) [V-TAL], [STREET ADDRESS], [POSTCODE TOWN], Faroe Islands. Email: [EMAIL]. Phone: [PHONE].
2. What we collect
- Your account. Your name, email address and phone number, and the way you sign in. When you sign in with Google, Apple or Facebook, the provider gives us your name, your email address and an identifier for your account with them. We ask the provider for nothing else: we never see your password, your contacts, your posts or your calendar, and we never post anything on your behalf. When you sign in by email we send a one-time code to that address.
- Your bookings. Pickup and destination addresses, pickup time, the number of passengers, any flight number you give us, your notes to the driver, the price, and what happened to the booking (confirmed, declined, cancelled, completed).
- Payments. The amount, the currency, the time, and the reference and status our payment provider ePay returns. Card and wallet details are entered on ePay's pages and are never stored or seen by us.
- Your location. Only when you choose "my location" or pick a place on the map, the app sends that position to us once, to fill in the pickup or destination. The app does not track you, and it does not use your location in the background.
- Technical data. The app version and platform, a token that lets us send notifications about your bookings to your device, and the IP address and time of requests in our server logs, kept for security.
We do not use advertising identifiers, analytics trackers or cookies for advertising. The website uses only the cookie that keeps you signed in.
3. Why we use it
- To carry out your bookings (performance of a contract): the driver needs to know where to pick you up, where to take you, when, and how to reach you.
- To take payment and keep accounts (contract and legal obligation): bookkeeping law requires us to keep records of payments.
- To keep the service safe (legitimate interest): preventing fraud and abuse, keeping sign-ins secure, and diagnosing faults.
- To tell you about your booking (contract): confirmations, changes, the driver's arrival, and receipts, by notification and by email.
- To answer your complaints and requests (legitimate interest and legal obligation).
We do not use your data for marketing unless you ask for it, and we never sell it.
4. Who sees it
- Our drivers and office staff see the name, phone number and booking details they need to carry out your ride.
- ePay (Worldline) processes your payment under its own privacy policy.
- Google, Apple or Facebook see that you signed in to our service with their account, under their own privacy policies. Nothing about your bookings is sent to them.
- Our hosting and email providers store and transmit data on our behalf under contracts that bind them to this policy; our servers are in the European Economic Area. The Faroe Islands are recognised by the EU as providing adequate data protection.
- Authorities receive data only where the law requires it, for example the police on a lawful request or the tax authority for accounting records.
5. How long we keep it
- Your account stays until you ask us to delete it, or after [ACCOUNT INACTIVITY PERIOD] without a booking.
- Bookings and payment records are kept for five years after the end of the financial year, as the Faroese bookkeeping act requires, and then deleted. The booking's addresses are removed from everyday use [RIDES RETENTION] days after the ride and remain only in the accounting record.
- Locations you send live only in the booking they were used for.
- Server logs are deleted after [LOG RETENTION] days.
- Notification tokens are removed when you sign out on the device or when the device stops answering.
6. Your rights
You may ask to see the data we hold about you, correct it, have it deleted, receive it in a portable form, restrict its use, or object to its use for our legitimate interests. Your name, email and phone number you can change yourself in the app under Account.
Deleting your account and data. Send an email to [EMAIL] from the address on the account, and we delete your account, its bookings and sign-in data within 30 days. We keep only what bookkeeping law requires, which is the payment record without your address data, and we tell you when it is done. If you signed in with Facebook, the same email removes everything we received from Facebook; you may also remove our app in your Facebook settings, which tells us to do the same.
If you believe we handle your data wrongly, please write to us first. You may also complain to the Faroese Data Protection Authority, Dátueftirlitið (www.dat.fo), or, where GDPR applies to you, to your own country's supervisory authority.
7. Security
Data travels encrypted (HTTPS) between your device, our servers and our providers. Access to booking data is limited to the staff and drivers who need it, each with their own sign-in. Sign-in tokens are per device and can be revoked by signing out. We keep backups to restore the service after a fault; they are kept for [BACKUP RETENTION] days.
8. Children
The service is for adults. We do not knowingly create accounts for anyone under 18; a child's ride is booked by an adult on that adult's account.
9. Changes
We may update this policy. The current version is always at this address, with its date at the top. If a change matters to you, for example a new use of your data, we tell you in the app before it takes effect.
10. Contact
[COMPANY LEGAL NAME], [STREET ADDRESS], [POSTCODE TOWN], Faroe Islands. Email: [EMAIL]. Phone: [PHONE].