GDPR Compliance Policy

Effective Date Of This GDPR Compliance Policy: September 5, 2024

At AffordARide Transportation (“we,” “our,” or “us”), we are committed to protecting the privacy and personal data of individuals who interact with our services, including those located in the European Union (EU).  Even though we’re located and provide services in the United States of America, this GDPR Compliance Policy outlines your rights under the General Data Protection Regulation (GDPR) and explains how we collect, use, and protect your personal data when you use our services, including our website at AffordARide.com (“Site”).

1. Your Rights Under GDPR

As an EU resident, you have the following rights concerning your personal data:

  • Right to Access: You have the right to request access to the personal data we hold about you.
  • Right to Rectification: You can request corrections to any inaccurate or incomplete personal data.
  • Right to Erasure (“Right to Be Forgotten”): You can request that we delete your personal data, subject to certain legal obligations.
  • Right to Restriction of Processing: You can ask us to restrict the processing of your personal data in specific circumstances.
  • Right to Data Portability: You can request a copy of your personal data in a machine-readable format for your own use or transfer to another service provider.
  • Right to Object: You can object to the processing of your personal data in certain cases, such as for direct marketing.
  • Right to Withdraw Consent: If you have provided consent for us to process your data, you have the right to withdraw that consent at any time.

2. How We Collect Your Personal Data

We may collect personal data in the following ways:

  • Directly from You: When you contact us, book services, or fill out forms on our Site.
  • Automatically: Through the use of cookies, analytics tools, or tracking technologies when you visit our Site.

3. Types of Personal Data We Collect

The personal data we collect may include:

  • Identity Data: Name, email address, phone number.
  • Transaction Data: Payment details when you book services (processed securely via Square, with no financial data stored on our servers).
  • Technical Data: IP address, browser type, operating system, and other information collected via cookies.

4. How We Use Your Personal Data

We process personal data to:

  • Provide and manage our transportation services.
  • Communicate with you and respond to your inquiries.
  • Process payments and issue refunds.
  • Improve our Site and services through analytics.
  • Comply with legal obligations.

We will only process your personal data for the purposes stated above and will not use it for any other purpose without your consent, unless required by law.

5. Legal Basis for Processing Personal Data

We process your personal data based on one of the following legal grounds:

  • Contractual Obligations: To fulfill a contract with you, such as providing transportation services.
  • Legal Obligations: To comply with legal requirements.
  • Legitimate Interests: To improve our services, detect fraud, or provide customer support, where these interests are not overridden by your rights.
  • Consent: When you have given explicit consent, for example, for receiving marketing communications.

6. Data Retention

We will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, tax, or reporting requirements. When personal data is no longer required, we will securely delete or anonymize it.

7. Data Security

We are committed to protecting your personal data. We implement appropriate technical and organizational measures to prevent unauthorized access, disclosure, alteration, or destruction of your data. Payments are processed securely via Square, a 3rd-party processor, so no sensitive financial information is actually stored on our servers.

8. Sharing of Personal Data

We do not sell or rent your personal data to third parties. We may share your data in the following situations:

  • With Service Providers: We may share data with trusted third-party service providers, such as Square, who help us deliver our services.
  • Legal Compliance: We may disclose personal data if required to do so by law or in response to a valid legal request.

9. International Transfers

If we transfer personal data outside the European Economic Area (EEA), we will ensure that adequate protection measures are in place, such as using data transfer agreements based on EU-approved Standard Contractual Clauses or ensuring that the recipient country has been deemed to provide an adequate level of data protection.

10. Exercising Your GDPR Rights

If you are an EU resident and wish to exercise any of your GDPR rights, please contact us using the details provided below. We will respond to your request within one month, although in some cases this period may be extended by two months if the request is complex or numerous.

11. Contact Us

If you have any questions or concerns about this GDPR Compliance Policy or wish to exercise your rights, please contact us at:

AffordARide Transportation

Email: AffordARide@gmail.com
Phone: (469) 724-2913