Privacy Policy

1. Who is responsible

LimoFarmOut is a farm-out marketplace that is part of limousineworldwide.directory. It is operated by [Company legal name], [Address] ("we", "us").

We are responsible for the personal data of our users: posters, drivers and operators.

Passenger details on a job belong to the posting company's client relationship. The posting company decides what passenger data to share. We process that data to run the job for them.

For privacy questions or requests, email [privacy email, or support email].

2. What we collect

Account data

Name, company name, email address and phone number.
Sign-in records and active sessions.
Settings and preferences.

Job data

Pickup and drop-off places and times, vehicle type, price and job status.
Passenger names, passenger phone numbers, flight numbers and private notes that a poster adds.
Chat messages between posters and drivers.
Offers, counter-offers, cancellations, strikes and disputes.
Ratings, rating reasons and comments.

Driver data

Verification documents and photos, such as licences, insurance, registration and vehicle photos. See section 5.
Live location during an active trip. See section 6.

Payment data

Payment, refund, fee, payout and tax records.
Card and bank details are collected and held by Stripe, not by us. We see only limited details, such as the last four digits.
Identity checks for driver payouts are done by Stripe.

Call and message relay data

When drivers and passengers talk through our masked relay, Twilio carries the call, SMS or WhatsApp message. We keep records of when the relay was used. [Confirm whether call recordings or message content are stored.]

Technical data

Basic logs such as IP address, browser type and the time of requests. We use these to keep the service secure and working.

3. How we use it

To create and secure your account and sign you in.
To show, match, run and complete jobs.
To take payments, hold funds, pay drivers and issue refunds.
To verify drivers and remind them when documents are about to expire.
To connect drivers and passengers through the masked relay.
To handle cancellations, strikes and disputes.
To show ratings and keep the marketplace safe.
To prevent fraud and enforce our Terms.
To send service emails, such as sign-in links, job updates and receipts.
To meet tax, accounting and other legal duties.

We use aggregate, anonymised statistics about prices and reliability to run and improve the service. This may include future direct booking features. These statistics never include individual passenger data.

Legal bases (GDPR and UK GDPR)

Contract: to provide the service you signed up for.
Legal obligation: to keep payment and tax records.
Legitimate interests: to keep the service safe, prevent fraud and improve it.
Consent: where we ask for it. You can withdraw consent at any time.

We do not sell personal data. We do not use personal data for third-party advertising.

4. Passenger data

Passengers are the posting company's clients. We only use their data to run the job.

We never market to farm-out passengers.
Drivers see passenger details only for jobs they accepted.
Drivers reach passengers through a masked phone, SMS and WhatsApp relay. The relay works from acceptance until 30 minutes after the trip is completed. Neither side sees the other's real number through the relay.
Drivers must not contact passengers outside the job.

Passenger names, phone numbers, flight numbers, private notes and chat text are erased 180 days after a job closes.

If you are a passenger and have a privacy question, you may contact the company that booked your ride, or contact us.

5. Driver documents

Drivers upload documents so a person on our verification team can approve them before the driver takes jobs.

Documents are stored encrypted.
Only the verification team can view them. Every view is logged.
We send reminders 30, 7 and 1 days before a document expires.
Documents are erased when the driver deletes their account.

A background check is optional. If a driver chooses to provide one, we use it only for verification.

6. Location

During an active trip, the driver's live location may be shared with the poster for that job. This helps the poster follow the trip and help their client.

We do not share a driver's location when no trip is active. We may use trip location records to settle a dispute.

If we show maps, an optional maps provider may receive the addresses or map areas needed to display them.

7. Who we share it with

Other users

Drivers see job details. They see passenger details only once they accept the job.
Posters see the driver's name, professional photo, vehicle details, ratings and, during the trip, live location.
Drivers see rating comments, but not who wrote them.

Service providers (processors)

Stripe: payments, payouts and driver identity checks.
Postmark: email, including sign-in links.
Twilio: masked calls, SMS and WhatsApp relay.
Railway: hosting of the service and its database.
[Maps provider]: maps, if enabled.

These providers may only use the data to provide their service to us.

Others

We may share data if the law requires it, to protect people's safety, to deal with fraud, or as part of a sale or merger of our business. If our business changes hands, this policy will still protect your data.

8. How long we keep it

Passenger details and chat text: erased 180 days after the job closes.
Payment and tax records: kept as long as tax law requires, usually [number] years.
Driver documents: kept while the account is open, and erased when the account is deleted.
Account data: kept while the account is open. You can delete your account in the app.
Records of disputes, fraud or rule breaks: kept as long as needed to protect users and meet legal duties. [Set a period.]

9. Cookies and local storage

We use cookies and your browser's local storage only to keep you signed in and to remember your preferences.

We do not use advertising or tracking cookies.

10. Security

We sign you in with a one-time link sent to your email. We do not store passwords.
You can see and revoke your active sessions.
Driver documents are encrypted, and views are logged.
Data is sent over encrypted connections.

No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

11. Your rights

Depending on where you live, laws such as the GDPR, UK GDPR, Canada's PIPEDA and California's CCPA give you rights over your data. These include the right to:

Access the data we hold about you.
Correct data that is wrong.
Delete your data.
Portability: get a copy in a common format.
Object to, or ask us to limit, some uses.
Withdraw consent where we rely on consent.
Not be treated unfairly for using these rights.

You can delete your account in the app. For other requests, email [privacy email, or support email]. We may need to confirm your identity. We will answer within the time the law requires.

Some data we must keep, such as payment records for tax law. We will tell you if this applies.

You can also complain to your local data protection authority.

12. International transfers

Our service providers may process data in other countries, including the United States. Where the law requires, we use safeguards such as standard contractual clauses. [Confirm hosting regions.]

13. Changes and contact

The service is for business users and is not meant for children. We do not knowingly collect data from children.

We may update this policy. We will change the date at the top and tell you about important changes.

We handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This policy and any dispute about it are governed by the laws of Ontario and the federal laws of Canada that apply there, and are decided exclusively by the courts at Toronto, Ontario, Canada, as set out in our Terms of Service, without limiting any right you have to complain to a privacy regulator.

Contact: [Company legal name], [Address], Toronto, Ontario, Canada, [privacy email, or support email].