1. WHO WE ARE
MyKabbi ("we", "us", "our") is a private hire taxi booking platform operated from Belfast, Northern Ireland. We act as a data controller for personal data collected via the MyKabbi passenger and driver apps and this website.
If you have any questions about how we handle your data, contact us at privacy@mykabbi.com.
2. WHAT DATA WE COLLECT
We collect the following categories of personal data:
- Account data: name, email address, phone number, and password when you register.
- Location data: pickup and drop-off points you enter, and real-time GPS location during an active ride.
- Payment data: card details processed securely by our payment provider (Stripe). We do not store full card numbers.
- Ride history: records of trips taken, including route, fare, date/time, and driver details.
- Device data: device type, operating system, app version, and push notification token.
- Support data: messages and records from any interactions with our support team.
3. HOW WE USE YOUR DATA
We use your personal data to:
- Match you with available drivers and process your bookings.
- Process payments and issue receipts.
- Provide in-app safety features, including live journey sharing and SOS alerts.
- Maintain and improve the MyKabbi platform.
- Send service notifications such as booking confirmations and driver arrivals.
- Comply with legal and regulatory obligations.
- Investigate safety incidents, complaints, and fraud.
4. LEGAL BASIS FOR PROCESSING
We process your personal data on the following legal bases under UK GDPR:
- Contract performance: to fulfil bookings you request.
- Legitimate interests: to improve the platform, detect fraud, and maintain safety.
- Legal obligation: to comply with licensing, tax, and regulatory requirements.
- Consent: for marketing communications, which you may withdraw at any time.
5. DATA SHARING
We do not sell your personal data. We share data only with:
- Drivers: your first name and pickup location are shared with your assigned driver to complete the booking.
- Payment processors: Stripe processes card payments under their own privacy policy.
- Mapping providers: we use mapping APIs to display routes and provide navigation.
- Regulatory authorities: licensing bodies, PSNI, or HMRC where we are legally required to disclose.
6. DATA RETENTION
We retain your account data for as long as your account is active. Trip records are retained for 7 years to comply with tax and licensing obligations. If you delete your account, we will delete or anonymise your personal data within 90 days, except where longer retention is required by law.
7. YOUR RIGHTS
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data (subject to legal obligations).
- Object to or restrict processing in certain circumstances.
- Request a portable copy of your data.
- Withdraw consent for marketing at any time.
To exercise any of these rights, email privacy@mykabbi.com. We will respond within 30 days.
8. COOKIES
The MyKabbi website uses essential cookies required for the site to function. We do not use tracking or advertising cookies. We use basic analytics to understand how our website is used, which may involve anonymised data.
9. SECURITY
We use industry-standard encryption and security measures to protect your personal data. Payment data is handled exclusively by PCI-DSS compliant processors. We conduct regular security reviews and limit access to personal data to authorised staff only.
10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page and, where changes are significant, notify you via the app or email.
11. COMPLAINTS
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.