Privacy Policy for iDRIVE Services

MBSA / iDRIVE (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, booking system, or contact us for transport services.

By using our services, you agree to the practices described in this policy.

---

2. Information We Collect

We may collect the following types of personal data:

• Contact details — name, phone number, email address

• Booking information — pickup/drop‑off locations, travel dates, passenger details

• Payment information — processed securely through third‑party providers

• Device & usage data — IP address, browser type, pages visited

• Communication records — messages, emails, WhatsApp enquiries

We only collect information necessary to provide safe, reliable private hire services.

---

3. How We Use Your Information

We use your data to:

• Provide and manage your bookings

• Communicate with you about your trip

• Improve our website and customer experience

• Ensure safety, compliance, and service quality

• Process payments and send receipts

• Meet legal and regulatory requirements (TfL, HMRC, GDPR)

We do not sell your personal information to any third party.

---

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Contract — to fulfil your booking

• Consent — when you voluntarily provide information

• Legal obligation — transport regulations, accounting, safety

• Legitimate interest — improving services, preventing fraud

---

5. Data Sharing

We may share your information with:

• Trusted service providers (payment processors, booking platforms)

• Regulatory bodies when legally required (TfL, police, HMRC)

• Technology partners who support our booking system

All partners follow strict data protection standards.

---

6. Data Storage & Security

We use secure systems to protect your information from loss, misuse, or unauthorised access.

Your data may be stored on encrypted servers within the UK or EU.

We take reasonable steps to ensure your information is handled safely at all times.

---

7. Data Retention

We keep your data only as long as necessary:

• Booking records: up to 6 years (legal requirement)

• Communication records: up to 12 months

• Payment records: according to financial regulations

After this period, data is securely deleted.

---

8. Your Rights (UK GDPR)

You have the right to:

• Access your personal data

• Request corrections

• Request deletion (where legally allowed)

• Object to processing

• Withdraw consent

• Request a copy of your data

To exercise your rights, contact us using the details below.

---

9. Cookies & Tracking

Our website may use cookies to improve performance and user experience.

You can disable cookies in your browser settings at any time.

---

10. Third‑Party Links

Our website may contain links to external sites.

We are not responsible for their privacy practices.

---