Legal
What we collect, why each piece of it is necessary, where it is held, and the rights you have over it.
Chauffeurs World Private Limited is the controller of the personal information described here. A record of where somebody will be, and when, is among the most sensitive information a company can hold. For most businesses a data breach is a fine. For this one it could put a person at risk. That is the reason this notice is short on what we gather and long on what we do not — we have designed the operation to need as little about you as possible, because the safest record is the one that was never created.
To arrange a journey: a name, an email address and a telephone number; the collection and destination points and the timing; the number of passengers and pieces of luggage, so the right vehicle is sent; and anything you choose to tell us about how you prefer to travel. For an airport collection, the flight number and whether you are arriving or departing. We do not ask for a date of birth or a passport number.
Where you are arranging travel for another person — an assistant, a concierge, a family office — we collect your own name, email, telephone and company alongside the passenger's name and contact details, so the coordinator knows who to speak to and the chauffeur knows who to meet. We also ask for a billing address and, if you have one, a VAT number, because a journey booked on account has to be invoiced to somewhere. Those are the only addresses we hold that are not a collection or destination point.
When a route is measured, the coordinates of the collection and destination points and of the road route between them are stored with the quotation, because a fare has to be explicable months later. If your booking reached us through a tagged link, the campaign or referral it came from is recorded. Our servers also keep short-lived technical records — a request's network address, in order to limit how often the booking form can be submitted from one place — which exist to keep the form usable rather than to tell us anything about you.
Your data stays in the region it came from and is not combined across regions. This is enforced in the software rather than promised in a policy: a process configured to read another region's data refuses to start rather than starting and reading it.
Access is granted by role and every access is recorded. Our general support team cannot open the most sensitive records at all. Your chauffeur receives what they need to complete the journey and no more, and your contact details are masked from them where the journey does not require direct contact.
We keep booking records for as long as we need them to run your account, answer a query about a past journey, and meet the tax and accounting obligations that apply in the country the booking was made in. Beyond that we delete rather than archive.
When you ask us to delete your data we destroy the key that unlocks it. That renders it unreadable everywhere it exists, including in backups, rather than only in the live system — which is the usual gap between a deletion request and a deletion.
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, and object to particular uses. Depending on where you live these rights come from the UK GDPR, the EU GDPR, or the equivalent law in your own country. We do not charge for answering, and we will not ask you why.
