Privacy Policy

1. Who we are

CityzenCar (we, us, our) operates this website and arranges private transfer and chauffeur hire services worldwide. For the purposes of the General Data Protection Regulation (GDPR) and applicable EU data protection law, CityzenCar is the data controller responsible for your personal data.

Contact: support@cityzencar.com

2. What data we collect

We collect personal data that you provide directly when using our website or communicating with us:

• Identity and contact data: full name, email address, phone number.
• Booking data: pickup and drop-off locations, travel dates and times, passenger count, luggage requirements, vehicle preference, flight numbers, and special requests.
• Communication data: messages sent via our contact form or email correspondence.
• Technical data: IP address, browser type, device information, and pages visited — collected automatically through standard server logs.

We do not intentionally collect sensitive personal data unless you voluntarily include it in a special request field. Please limit such information to what is necessary for your journey.

3. How we use your data

We process your personal data to prepare quotes, confirm bookings, assign drivers, respond to enquiries, coordinate licensed transport partners, meet legal obligations, and protect the website against spam and abuse.

We do not sell personal data. We do not use your data for automated decision-making or profiling that produces legal effects.

4. Sharing your data

We share personal data only when necessary with partner operators and drivers who perform the service, with hosting and email providers bound by processing agreements, and with legal authorities when required by law.

Partner operators outside the European Economic Area receive data only where appropriate safeguards exist, such as Standard Contractual Clauses or adequacy decisions.

5. Data retention

• Quotation requests not converted to bookings: up to 12 months, then deleted or anonymised.
• Completed bookings: up to 7 years for accounting, tax, and legal claims purposes.
• Contact form messages: up to 24 months unless an ongoing relationship exists.
• Server logs: typically 90 days.

6. Your rights under GDPR

You may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing is consent-based, you may withdraw consent at any time.

To exercise these rights, email our support address. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

7. Cookies and tracking

This website uses only essential technical cookies required for basic functionality. We do not use third-party advertising cookies at launch.

8. Security

We implement appropriate technical and organisational measures including HTTPS, access controls, input validation, honeypot spam protection, and secure email transmission.

9. Children

Our services are not directed at individuals under 16. If you believe a child has submitted data through our forms, contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. The Last updated date at the top reflects the most recent revision.