Privacy Policy

1. Introduction

Book A Ride NZ ("we", "us", "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (bookaride.co.nz and bookaridenz.com) and our airport shuttle services.

This policy is designed to comply with the New Zealand Privacy Act 2020 and its 13 Privacy Principles. We are committed to being transparent about how we handle your personal information and ensuring your privacy rights are respected.

By using our services or website, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with this policy, please do not use our services or website.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Make a booking: Name, email address, phone number, pickup/dropoff addresses, flight details, passenger count, special requirements
• Create an account: Username, password, email address, contact preferences
• Make a payment: Billing information (processed securely through Stripe - we do not store full credit card details)
• Contact us: Name, email, phone number, inquiry details
• Subscribe to communications: Email address, communication preferences
• Submit reviews or feedback: Name, review content, ratings

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain information:

• Device information: IP address, browser type and version, operating system, device type
• Usage data: Pages visited, time spent on pages, links clicked, referring website
• Location data: Approximate geographic location based on IP address
• Cookies and tracking data: See Section 8 for detailed information

2.3 Information from Third Parties

We may receive information from:

• Payment processors (Stripe): Transaction confirmation, payment status
• Google Maps API: Distance calculations, route information
• Analytics providers: Aggregated usage statistics

3. How We Use Your Information

3.1 Primary Purposes

We use your personal information to:

• Provide services: Process bookings, arrange transportation, coordinate pickups and dropoffs
• Communication: Send booking confirmations, service updates, driver coordination
• Payment processing: Process transactions, issue invoices and receipts
• Customer support: Respond to inquiries, resolve complaints, provide assistance
• Service improvement: Analyze usage patterns, improve website functionality, enhance customer experience
• Safety and security: Verify identities, prevent fraud, ensure passenger and driver safety

3.2 Secondary Purposes

With your consent, we may also use your information to:

• Marketing: Send promotional emails, special offers, service updates (you can opt-out anytime)
• Research: Conduct surveys, market research, customer satisfaction studies
• Personalization: Customize website content, remember your preferences

3.3 Legal Purposes

We may use your information to:

• Comply with legal obligations and respond to lawful requests from authorities
• Enforce our Terms and Conditions and other agreements
• Protect our rights, property, and safety, and those of our users and the public
• Resolve disputes and investigate complaints

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

• Payment processors (Stripe): To process secure payments
• Email delivery: To send booking confirmations and notifications
• Cloud hosting providers: To store and manage data
• Analytics providers (Google Analytics): To analyze website usage
• Mapping services (Google Maps): To calculate distances and routes

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Drivers and Contractors

We share necessary booking information with our drivers and contracted transportation providers to fulfill your service request. This includes your name, contact number, pickup/dropoff locations, and service details.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website of any such change in ownership or control of your personal information.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government agencies). We will only disclose information to the extent necessary to comply with legal obligations.

4.5 Consent-Based Sharing

We may share your information with other parties when you have given us explicit consent to do so.

5. Data Security

5.1 Security Measures

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, use, alteration, or destruction:

• Encryption: SSL/TLS encryption for data transmission
• Secure servers: Data stored on secure, password-protected servers
• Access controls: Limited employee access based on role requirements
• Payment security: PCI-DSS compliant payment processing via Stripe
• Regular security audits: Periodic review of security practices
• Backup systems: Regular data backups to prevent data loss

5.2 Limitations

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to using industry-standard practices to safeguard your data.

5.3 Data Breach Response

In the event of a data breach that poses a risk to your privacy, we will notify you and relevant authorities in accordance with New Zealand Privacy Act 2020 requirements, typically within 72 hours of becoming aware of the breach.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

• Booking records: 7 years (for accounting and tax purposes)
• Account information: Duration of account plus 2 years after closure
• Communication records: 3 years from last interaction
• Marketing data: Until you unsubscribe or withdraw consent
• Website usage data: 14 months
• Legal compliance records: As required by applicable laws

After the retention period expires, we securely delete or anonymize your personal information.

7. Your Privacy Rights

Under the New Zealand Privacy Act 2020, you have the following rights:

7.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your information within 20 working days of receiving your request.

7.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal information. We will correct your information promptly upon verification of the correction request.

7.3 Right to Deletion

You have the right to request deletion of your personal information, subject to legal retention requirements. We will delete your information within 20 working days unless we have a legitimate reason to retain it.

7.4 Right to Withdraw Consent

Where we process your information based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

7.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt-out of marketing communications at any time by clicking "unsubscribe" in our emails or contacting us directly.

7.6 Right to Complain

If you believe we have breached the Privacy Act 2020, you have the right to complain to us first. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner:www.privacy.org.nz

7.7 How to Exercise Your Rights

To exercise any of these rights, please contact us at info@bookaride.co.nz with:

• Your full name and contact details
• Details of your request
• Proof of identity (for security purposes)

We will respond to your request within 20 working days. There is no fee for access requests unless the request is manifestly unfounded, excessive, or repetitive.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies and similar tracking technologies to enhance your experience, analyze site usage, and assist with our marketing efforts.

8.2 Types of Cookies We Use

• Essential cookies: Required for website functionality (e.g., maintaining your session)
• Performance cookies: Help us understand how visitors use our site (e.g., Google Analytics)
• Functional cookies: Remember your preferences and choices
• Marketing cookies: Track your browsing to show relevant advertisements

8.3 Cookie Management

You can control cookie settings through your browser preferences. However, disabling cookies may affect website functionality. Most browsers allow you to:

• See what cookies are stored and delete them individually
• Block third-party cookies
• Block all cookies
• Delete all cookies when you close your browser

9. Third-Party Services

9.1 Payment Processing (Stripe)

We use Stripe to process secure payments. Stripe's privacy policy governs their collection and use of your payment information. We do not store full credit card details on our servers.

9.2 Google Services

We use Google Maps API for distance calculations and Google Analytics for website analytics. Google's privacy policy governs their data practices.

9.3 Communication Services

We use a third-party email provider to deliver booking confirmations. They have access to your contact information only for the purpose of delivering communications on our behalf.

10. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately. If we discover we have collected information from a child under 13, we will delete it promptly.

11. International Data Transfers

Your personal information may be transferred to and processed in countries other than New Zealand, including countries where our service providers operate (e.g., United States for Stripe, Google services). These countries may have different data protection laws than New Zealand.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses approved by data protection authorities
• Service providers with adequate data protection policies
• Compliance with applicable data protection regulations

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: