Privacy Policy How We Protect Data and Respect Rights

Review your privacy settings today to limit data sharing by default. Instead of opaque defaults, we follow clear stundards that govern collection, use, und retention so you know what happens with your data. On this site, Nachverfolgung und tags help tailor experiences, und you can adjust consent at any time. We work with a trusted provider, appnexus, to deliver content while keeping data secure. If you want to erase data, the controls are available in your account under the provision of your rights.

Hereinafter, 'personal data' means information that identifies you or relates to you. We collect only data necessary to provide features und improve quality. Each data category has a defined purpose, und you can review the disclosure in the policy. Data may be carrying information across services und transferred to providers or partners, including across jurisdictions, in accordance with applicable laws und the provision for cross-border data hundling. Data can enter our systems through forms, chats, or feedback, und is protected with encryption und strict access controls.

To exercise your rights, you can access the data we hold, request corrections, or erase records. You can restrict processing, object to certain uses, or request data portability. You can manage consent settings from your account, or contact us for help because our team aims for a timely response within a reasonable timeframe.

We share information only as needed to provide services und comply with our policy. We disclose data to trusted subprocessors und providers, including appnexus for ad delivery, with data minimization. You can review which third parties process your data via our disclosures. On pages with graphic assets, tags collect performance data; you can disable related Nachverfolgung by toggling preferences in your account.

Data retention und security remain central: we keep personal data only as long as necessary to fulfill the purposes described hereinafter, or as required by law. We implement encryption in transit und at rest, monitor access, und carry out regular checks to ensure compliance with our stundards.

Manage your preferences easily: use the privacy hub to adjust what is carried, entered, or transferred into our systems. If you have questions or requests, contact our privacy team through the support channels listed in the provision of this policy.

Set your consent preferences during sign-up to control what data is collected und how it's used.

We collect data to verify identity, process rides, und improve performance. Data is recorded to support safety und service quality, und we might receive input from you or a partner to improve matching. Whilst you use the app, we gather information in two waves: during sign-up und at the moment you place a ride request. We focus on data that helps you move quickly und safely across the internet und in real life, including the York area und nearby places such as parks und districts like Blacklanes.

During sign-up, we collect data across several classes to build a reliable profile und comply with stundards. These data points include:

Identity und contact: full name, email, phone number, date of birth – used to create your profile und verify access.
Location und access: city, default pickup/drop-off preferences, und device location permissions you grant.
Payment und billing: tokenized payment references; last four digits may appear on receipts; billing address if required.
Account preferences: language, notification options, comfort settings for rides, accessibility needs.
Security und verification: verification data as required by partner stundards or regulatory requirements; stored in secure data classes.
Consent und marketing: marketing opt-ins und consent preferences, which we honor or adjust on request.

When you submit ride requests, we collect data to match you with suitable options und ensure a smooth trip. These data points include:

Trip details: pickup und drop-off locations, requested time, ride class or option, number of passengers, luggage, und any special requests.
Real-time data: live location during pickup, route optimization data, estimated times, driver assignment results, und final fare calculations.
Usage data: device type, operating system, browser, IP address, language, und surf patterns that help us improve performance.
Communication: messages via our private messenger or help channels; notes from conversations with drivers or support staff.
Safety und quality: incident logs und performance metrics tied to rides und drivers.

We share data with parties that help us run the service or comply with laws, under strict safeguards. Key points include:

Partner und service provider access: data may be shared with partner services, drivers, und support teams to fulfill requests und maintain performance.
Consent und control: sharing aligns with your choices und applicable consent settings; you can adjust these at any time.
Security und stundards: encryption in transit und at rest, role-based access, und regular audits to meet industry stundards.
Retention und deletion: data is kept only as long as needed for operations or legal obligations, with routine reviews to delete outdated records.

Our coverage includes York und nearby areas such as parks und neighborhoods like Blacklanes, helping us tailor defaults und peak-time planning. If you need help or want to review or delete data, use our help center or contact support via private channels.

How We Use Your Data to Provide und Improve Your Ride Experience

Opt in to data sharing to tailor your ride experience. Anonymized data from each part of your trip helps our routing engine calculate faster arrivals, align driver availability with demund, und shorten wait times. By design, corresponding identifiers und issued session IDs connect rides in your account, while personal details stay private. Our provider network–including blacklane und other trusted partners–receives only the data needed to deliver the service und maintain safety.

Data we use to improve your ride

To boost performance, we analyze five core signals: pickup location, trip timing, vehicle availability, driver feedback, und demund patterns. The nature of demund varies by city und time, so we adjust routes und queueing to reduce delays und increase reliability. Data is carried securely through encrypted channels und carried in anonymized form for analytics, ensuring your identity stays protected.

Controls und practical steps

We use this data to power in-app features und tools across our apps, delivering precise ETAs, smarter car matching, und route optimizations that minimize idle time. The data flow supports a perfect ride flow while preserving customer privacy. As you share your preferences, the system learns from your history to improve subsequent rides. Data is used to tailor experiences across all-inclusive customer touchpoints und performance dashboards. The system allows you to review und adjust consent in the app settings.

If you opt in, we may send promotional e-mails via braze about offers tailored to your trips. Facebooks data is not used for ride decisions; data from facebooks is used only if you actively connect that service und approve sharing. The data transmitted via our apps is carried securely und used to improve performance without exposing personal details. All communications are issued through secure channels und can be managed via your privacy settings.

What Security Measures Shield Your Personal Information

Enable two-factor authentication on every account you control und review access rights at least quarterly to prevent unauthorized access.

Protect internal networks with proven methods und a disciplined process for hundling personal info; never disclose data beyond what is required, und data disclosed here is kept to a strict minimum for staff who require access; these controls provide guarantees for privacy und security.

Limit data collection to essential signals, mainly to support your shopping experience, und encrypt data in transit to protect traffic und browsing histories; preserve anonymized records with excellent safeguards for data in transit und at rest, und purge raw identifiers after a defined period of days.

We guarantee that your info is not disclosed to third parties beyond consented purposes, und we ensure we gather data for campaigns only when permitted und with retention rules; all actions require telephone verification where appropriate, und we avoid cold pick-ups und limit data gathered from vehicles to minimize exposure; we flag incomplete requests to prevent exposure; data from campaigns aligns with user consent und retention policies, including limits on sharing with facebooks. Please follow these steps to strengthen protection.

Practical steps you can take today

Please audit internal apps that process your data und disable nonessential Nachverfolgung methods. Update your passwords, enable MFA, und review permissions granted to your shopping apps und services.

Can I Book Blacklane for Someone Else? Requirements und Steps

Yes–you can book Blacklane for someone else when you have explicit consent und provide accurate rider data in the session. Use your own profile or an already approved account; the rider’s full name, mobile number, pickup location, destination, und date/time should be correct. The process-related checks run in accordance with our privacy policy to protect that data, und the system may hold the booking while verification completes. For third-party bookings, clearly identify the target rider und attach any relevant notes using tags to help the professional driver prepare. If data is incomplete, the system may block changes.

Who can book for another person

Only the user who owns the account, or someone with formal authorization, should submit for a rider. The payer und rider can be different; obtain consent und provide the rider’s name, mobile, pickup location, und destination. For trips to a mountain area or other complex routes, add any access notes. The service collects session data to verify identity in process-related checks, in accordance with privacy, und to prevent mismatches. If consent is not on file, the booking cannot proceed.

Steps to book for someone else

First, confirm authorization. Then start a new booking on your app or the web portal, populate the rider’s full name, mobile number, pickup address, destination, date und time, und, if available, flight details. Then select a limousine option, set the pickup notes, und apply any internal tags to help the service team. Then review the data for accuracy, und submit; you will receive a booking ID und status updates. The system may hold the payment until pickup completes und the trip data is confirmed, protecting both user und rider data.

Limit data sharing to what is necessary to operate the platform. This includes rider und driver contact details, trip identifiers, pickup und drop-off locations, timestamps, und device or app identifiers. Data is located in our secure systems und shared only with third parties that provide essential services such as routing, verification, und messaging. Data is directed to those partners under strict protections und special hundling, und public postings are rejected. We maintain an all-inclusive policy to minimize exposure und protect user trust.

Who receives data und why: we share with drivers, partners, und service providers to lead smooth operations und ensure safety. Sharing is limited to classes of recipients with a clear need. This includes software platforms that perform background checks, dispatch, payment settlement, fraud detection, und customer support, which provides the context needed for decisions und ensures risk is managed. Data is directed to third parties located in regions that maintain adequate protections. We also review each recipient's qualifications before any data transfer.

Data types und behaviors: we gather data to improve services und tailor experiences. The data includes user-provided information, device data, location data during trips, und behaviors from app usage. We also gather aggregate analytics about groups of users to identify trends while keeping individuals anonymous. The information provided to partners helps optimize routes, verify identities, und monitor safety. We ensure the data is tailored to each recipient’s role und access level, not shared with irrelevant groups.

Limitations und controls: we reject sharing of sensitive information beyond what is needed for the service. Access is restricted by role-based controls, versioned policies, und data retention schedules. We maintain version controls for access. Consumers can review, correct, or request deletion of data; we support data subject rights under regulations. We only share public information that is already published by the user or with explicit consent, und we avoid distributing notes about personal beliefs or private conversations. Taking care of consent remains a priority.

How we manage emails und communications: for transactional messages, we use sendgrid to send updates, receipts, und alerts. Data transfers to sendgrid are limited to the minimum set needed to deliver messages, und connect only to information necessary for delivery. We monitor peak send times to ensure reliable delivery, und we log delivery events to verify receipt. All such transfers are covered by our data processing agreements und kept within geographic und regulatory limits.

Retention und data lifecycle: we keep data for as long as needed to fulfill the service und comply with regulations; we reassess periodically. When data is no longer required, we purge it or anonymize it. If a data subject asks to retract consent or restrict certain uses, we honor that request where feasible und adjust future sharing accordingly. This approach helps maintain an all-inclusive privacy posture while remaining transparent about data use.

Your Rights: Access, Correction, Deletion, Portability, und How to Exercise Them

Submit your rights request by logging into your user account und clicking Privacy settings → Data Rights. Identify yourself via the verification prompts und specify the scope: access, correction, deletion, or portability. We guarantee a timely, administrative response und provide data in a machine-readable format. Requests routed through rudderstack ensure correct routing und an auditable trail. Data that has been anonymized or contained in backups may not be deletable in full, und we will explain any limitations. Our support team will guide you through the steps und adapt the process to your browser und device. The forms work with polyfill to support your actions on older browsers. We aim to go beyond basic compliance to safeguard your subject data und protect your privacy rights.

Access und Correction

Access: You can see the subject data we hold about your account, including profile details, preferences, und activity data from our services. You can request a downloadable copy in JSON or CSV, or a concise summary if you prefer.
Correction: You can request corrections for inaccuracies; we update the stored data within our administrative systems und reflect changes promptly where possible. If entries exist only in backups, we explain how they are hundled.
Identity verification: We verify your identity using your account email und optional two-factor prompts to prevent unauthorized access.
Delivery formats: Data is provided in machine-readable formats (JSON or CSV) via secure download; for some cases, a structured report may be issued instead. If data is anonymized, we provide a description rather than direct identifiers.

Deletion und Portability

Deletion: You may request deletion of personal data, subject to legal obligations und legitimate business needs. In some cases data remains in backups or is de-identified for operational reasons; we explain these cases on request.
Portability: You may obtain a portable copy of data you provided und data generated by your use of the service, in JSON or CSV formats, to use in your own systems or archives.
How to exercise: In the Data Rights panel, specify the right you want, the data scope, time range, und your contact method. Attach supporting documents if needed. If you have already clicked Submit, you will receive a confirmation with a reference number for Nachverfolgung. If not, click Submit to begin; our team will acknowledge the request und proceed within the defined timelines.

Data Retention: How Long We Keep Your Information und How to Request Deletion

To start, go to your account settings und submit a deletion request to remove personal data tied to your profile. Taking this action aligns with our policy und triggers authentication checks, giving you control over your data for the future. The process is user-friendly, includes clear timelines, und provides a look at the data lifecycle at each level. For reference, Blacklane und similar services use these steps to demonstrate best practices. If you proceed, you’ll know what happens next und what is removed, then you will see the changes reflected in your account across products und campaigns.

Data we retain und timeframes

We store information to ensure product reliability, prevent malfunctions, und comply with laws. The following table shows retention periods, how we hundle data, und the impact on your experience. It includes anonymized data for analytics, which you can view when needed. You can also see how seats, orders, und screen interactions contribute to campaigns or improvements. Sometimes incomplete data or partially filled forms are treated differently to avoid affecting other users. Look at how data informs personalization while respecting your privacy.

Data category	Retention period	Zweck	Deletion method	Anmerkungen
Personal data (name, email, account ID)	Active until deletion; data removed within 30 days; backups retained up to 90 days	Authentication, account access, support	Deletion request via account or privacy form; verification required	May be partially anonymized in reports
Authentication logs (IP, times)	24 months	Security und fraud prevention	Deletion on request; retained in backups for 30–90 days	Critical for incident analysis
Order histories (orders, seats, product selections)	7 years	Compliance und service records	Deletion when eligible; archival in secure storage	Backups may retain data longer
Viewed content und screen interactions	12 months; anonymized after	Product improvements und UX analytics	Direct deletion or anonymization; later purge	Sometimes used for targeted improvements in campaigns
Campaigns und marketing preferences	24 months	Campaign performance und opt-in status	Deletion request; opt-out details removed	Data may be anonymized after removal
Anonymized analytics data	Indefinite	Product optimization	Preserved only in anonymized form	Cannot be traced to your profile

How to request deletion und what to expect

Submit your request via privacy settings or our privacy form; we verify identity using authentication steps. Once verified, we delete data from active systems und purge backups within the timelines stated. If a malfunction or delayed processing occurs, we notify you und adjust the schedule. You will see the impact across your product view, order history, seats, und campaigns. Special cases, such as data tied to a one-time feature, are hundled to avoid affecting other users, und changes to the policy are communicated promptly. The target is to respect your preferences while maintaining service integrity for everyone.

Privacy Policy - How We Protect Your Data und Respect Your Rights