Last updated: [date]. This is a draft prepared for legal review and is not yet in effect.
1. Who we are
ShiftVoy operates the website shiftvoy.com, a marketplace for booking car rentals and chauffeur-driven transport from independent companies in Jordan, Saudi Arabia and the United Arab Emirates. [Registered company name, address and business registration number to be added.] This policy explains what personal data we collect, why, and the choices and rights you have. It applies to customers booking through the site and to the companies and individuals who register as rental or transport partners.
2. The data we collect from customers
When you book, register an account, or contact us, we may collect: your name, email address and phone number; for car rentals, the driving licence details, age and, for additional drivers, the name, age and country of residence that you or the main driver provide; payment information needed to process your booking deposit, handled by our payment gateway provider (see section 6); your booking history, and any review or rating you leave; and, if you sign in with Facebook, the basic profile information (name, email address) that Facebook shares with us with your permission. If you book as a guest, we still collect your name, email and phone number to create and manage the booking, and identify your booking using a temporary, non-identifying token stored in a cookie on your device rather than a full account.
3. The data we collect from rental and transport companies
Companies that register as partners provide business information including company name, contact details, tax or business registration number, logo, and verification documents (such as a trade or transport licence), and, once approved, payout details including bank account holder name, bank name, IBAN and SWIFT code, billing email and VAT number, and emergency and booking contact details. This information is used to verify the company, process their payouts, and display their public profile (company name, logo and rating) to customers; banking details are never shown publicly and are used only for payouts.
4. Cookies and similar technology
We use: a cookie that remembers your chosen display currency; for guest bookings, a temporary cookie, valid for one hour, that lets you view and manage a booking you made without an account, without identifying you personally; standard WordPress and WooCommerce cookies for signed-in sessions and checkout; and a cookie that remembers your chosen site language. We do not currently use advertising or cross-site tracking cookies. You can control or delete cookies in your browser settings, though some parts of the site, such as staying signed in or completing checkout, may not work properly without them.
5. Why we use your data
We use your data to: create and manage your booking or account; verify rental and transport companies and their listings; process payments and payouts; provide customer support; send you booking confirmations, updates and, if you agree, service or marketing communications; show public reviews and ratings; and meet our legal and accounting obligations.
6. Who we share your data with
We share the minimum data needed to deliver your booking with the rental or transport company you book with, for example your name, contact details and, for car rentals, driver information, so they can prepare and deliver the service. We use third-party providers to help run the site, including: our payment gateway provider, to process card payments (we do not store your full card number); Meta/Facebook, if you choose to sign in with Facebook; an email verification service, to confirm your email address when you register; and our website hosting provider. Each of these providers only receives the data it needs to perform its function, and is responsible for protecting it under its own privacy policy. We do not sell your personal data.
7. International transfers
Because ShiftVoy operates across Jordan, Saudi Arabia and the United Arab Emirates, and uses service providers that may process data in other countries, your data may be transferred to and processed in a country other than the one you are in. [Counsel to confirm the appropriate safeguards and disclosures for cross-border transfer under the data protection laws of each country ShiftVoy operates in or serves.]
8. How long we keep your data
We keep booking records for as long as needed for accounting, tax and legal purposes, and account data for as long as your account is active. If you ask us to delete your account, we will do so except for data we are required to keep by law, for example completed booking and payment records.
9. Your rights
Depending on where you are, you may have the right to ask us for a copy of the personal data we hold about you, to correct it, to ask us to delete it, or to object to or restrict certain uses of it. To exercise any of these rights, contact us at support@shiftvoy.com. [Counsel to confirm the specific rights and response timeframes required under the data protection laws of Jordan, Saudi Arabia and the UAE, and whether a designated data protection contact or officer is required.]
10. Children
ShiftVoy is not intended for use by anyone under 18, and we do not knowingly collect personal data from children.
11. Security
We take reasonable technical and organizational measures to protect your data, including encrypting payment data in transit and limiting who can access booking and company records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy from time to time. The version published on this page applies from the date shown at the top.
13. Contact
Questions about this policy or your data can be sent to support@shiftvoy.com.