STAXY LTD (whose registered office is at East Barn, Kings Ash, Great Missenden HP16 9NP) ("we", "our" or "us"), acting as data controller, is committed to protecting and respecting your privacy. This notice (the "Privacy Notice") is designed to tell you about our practices regarding the collection, use and disclosure of information that you may provide via this website or our mobile applications (the "Platforms").
This Privacy Notice (together with our Terms and Conditions, any other documents referred to in it and our Cookie Notice) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
We may collect and process the following data about you:
You may give us information, including information that can identify you ("Personal Data"), when you use our Platforms, by filling in forms on the Platforms (such as the sign-up form), when you enter into any of our competitions, promotions or surveys, when you correspond with us by phone, e-mail or otherwise, and when you report a problem with our Platforms.
The information you give us may include:
2.1.1. Mandatory information required to register for the service we provide on our Platforms or to access other services provided by us, including your name, email address, mobile phone number and a password. All these fields are mandatory. STAXY will not be able to provide you with the services offered on our Platforms if the required information is not provided, consequently you will not be able to register for a user account on our Platforms;
2.1.2. Date of birth
2.1.3. Gender
2.1.4. Address
2.1.5. Photograph;
2.1.6. Details on your cars;
2.1.7. Your mini-biography;
2.1.8. A record of any correspondence between you and us;
2.1.9. A record of any correspondence between you and other users;
2.1.10. A record of any bookings you have made or trip related advertisements you have placed with or through our Platforms;
2.1.11. Details of accounting or financial transactions including transactions carried out through our Platforms or otherwise. This may include information such as your payment card or bank account details, details of trips or legs you have booked or offered through our Platforms;
2.1.12. Details of your visits to our Platforms and the resources that you access;
2.1.13. Your replies to any surveys or questionnaires, such as your reviews on the trips you have shared with other members of our community. Such information may be used for analytic user understanding purposes;
2.1.14. Information we may require from you when you report a problem with our Platforms or our service, such as the subject of your request for support;
2.1.15. Location information:
2.1.16. Passport, Driving Licence, ID Card and such other documents that you have agreed to provide to us.
2.2.1. If you sign up via social media authentication methods, STAXY will access certain Personal Data (e.g. first name, surname, picture, email, number of Facebook friends, etc.) in your social media account pursuant to the applicable terms and conditions of these social media platforms. We may also collect some of your Personal Data when you interact with third party social media features, such as "Like" functions.
2.2.2. With regard to each of your visits to our Platforms we may collect, in accordance with applicable laws and where required with your consent, information relating to the devices you use and the networks you are connected to when using our services. This may include the following information: your IP address, log-in information, browser type and version, browser plug-in types and versions, operating system and platform, advertising identifier, information about your visit including the URL clickstream to, through and from our Platforms, products you viewed or searched for, download errors, length of visits to certain pages, page interaction and any phone number used to call our customer service number. We collect this information through the use of various technologies including cookies (for further information please refer to our Cookie Notice).
2.2.3. We also collect aggregated information regarding your activity on our Platform (such as the amount of rides offered, your message response rate, etc.). Such information may be published on your public profile on our Platform.
2.3.1. Except regarding the categories of Personal Data mentioned in clauses 2.3.2, 2.3.3 and 2.3.4 below, your Personal Data will be stored for the duration of your relationship with us and then put beyond use:
2.3.2. The following categories of Personal Data may be stored for different durations:
2.3.3. In the event that your account is suspended or blocked, we will keep your data for a period of between 2 and 10 years in order to prevent you from circumventing the rules applying to our Platforms.
2.3.4. Background location data collected with your explicit consent (as described in 2.1.15) is processed to identify travel relevant to the specific service context (e.g., commuting for an employer-provided platform). Non-relevant location data identified during this process is deleted as soon as possible and held for no longer than 72 hours. Relevant travel history derived from this data is retained according to the general retention periods outlined in 2.3.1 unless specified otherwise for a particular service or feature.
We will use the information we collect:
PURPOSES | LEGAL BASIS |
---|---|
3.1. to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information and services that you requested from us; | This processing is necessary for the performance of our mutual contractual obligations. |
3.2. to send you service-related information by email and/or text message and/or any other communication means (e.g. your booking confirmation); | This processing is necessary for the performance of our mutual obligations and/or carried out with your consent. |
3.3. to collect payments from you or to transfer to you the payments we collect on your behalf; | This processing is necessary for the performance of our mutual contractual obligations. |
3.4. to enable you to personnalise your user profile on our Platforms; | This processing is carried out with your consent. |
3.5. to enable you to communicate and interact with other members about our services or about the trips(s) you have/will share with other members and/or to organise such trips; | This processing is necessary for the performance of our mutual contractual obligations and/or carried out with your consent. |
3.6. to give you access to our support services and to enable you to communicate with our member relations team; | This processing is (i) necessary for the performance of our mutual contractual obligations, (ii) carried out with your consent and/or (iii) necessary for the establishment, exercise or defence of legal claims. |
3.7. to ensure compliance with (i) applicable laws, (ii) our Terms and Conditions, and (iii) our Privacy Notice. Certain breaches that we regard as inappropriate may lead to the suspension of your account; | This processing is necessary (i) for the performance of our mutual contractual obligations, (ii) for compliance with our legal obligations and/or (iii) for the establishment, exercise or defence of legal claims. |
3.8. to send you, in accordance with applicable laws and where required, with your consent, marketing materials and information necessary to facilitate the service or the booking process and to make you suggestions and recommendations about goods or services related to our services that may interest you. We also use your data to target you in order to serve our ads on social media platforms. You can learn more about how these features work, and the data that we obtain about you, by visiting the relevant sections of the third party social media platforms; and | This processing is based on your consent and/or our legitimate interest (i.e. providing you with meaningful advertising). |
3.9. to notify you about changes to our services; | This processing is necessary (i) for the performance of our mutual contractual obligations, (ii) for compliance with our legal obligations and/or (iii) the establishment, exercise or defence of legal claims. |
3.10. to verify the information contained in your Passport, Driving Licence, ID Card and other identity documents that may be collected from you at the time of registration or at any other time during your use of our Platforms; | This processing is based on (i) your consent, (ii) carried out for the establishment, exercise or defence of legal claims and/or (iii) for compliance with our legal obligations. |
3.11. to administer our Platforms and for internal operations, including troubleshooting, data analysis, testing, research, analytic and survey purposes; | This processing is based on our legitimate interest (i.e. ensuring the security of our Platforms and improving its features). |
3.12. to improve our Platforms to ensure that content is presented in the most effective manner for you and for your device; | This processing is based on our legitimate interest (i.e. providing you with meaningful content). |
3.13. to allow you to participate in interactive features of our service, when you choose to do so; | This processing is necessary (i) for the performance of our mutual contractual obligations and/or (ii) based on your consent. |
3.14. as part of our efforts to keep our Platforms safe and secure; and | This processing is based on (i) our legitimate interest (ensuring the security of our Platforms), (ii) carried out for the establishment, exercise or defence of legal claims and/or (iii) for compliance with our legal obligations. |
3.15. to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you. | This processing is based on (i) our legitimate interest (i.e. measuring and optimising the efficiency of our advertising campaigns) and/or (ii) your consent. |
3.16. to understand your travel patterns (e.g., commuting, travel to specific types of locations) using background location data, in order to provide improved travel recommendations, carbon emission monitoring, and aggregated insights relevant to the organisation providing platform access (e.g., employer, university). | This processing is based on your explicit consent provided when enabling the background location feature. |
4.1. When you use our services, some information about you is shared with the members of our communities, either on your public profile or during the booking process (e.g. we give your telephone number to the members with whom you will share a ride).
4.2. We may receive and send information about you, including your Personal Data, if you use any of the platforms we operate or from other STAXY entities and affiliates, for the purposes outlined in this Privacy Notice.
4.3. We are also working closely with third parties which may be the recipients of your Personal Data such as:
4.4. We only share your Personal Data with any of these third parties in the following cases:
4.5. In accordance with applicable laws and where required with your consent (such as for background location data), we may combine information about you, including your Personal Data and cookie information, we send to and receive from our business partners. We may use this information and the combined information for the purposes set out above. Aggregated and anonymised insights derived from user data, including location data, may be shared with external organisations on a commercial basis for understanding CO2 emissions and travel patterns, but this shared data will not be personal data.
4.6. We draw your attention on the fact that if you decide to share your information, including Personal Data, with us through our business partners' connecting services, any of our business partners' privacy policies and/or notices may also be applicable to you, in addition to this Privacy Notice. We do not control the collection and/or the processing of your information eventually made by our business partners on their own platforms.
5.1. We may review, scan, or analyse the messages you exchange with other members of our community through our Platforms for fraud prevention, service improvement, customer support purposes, enforcement of the contracts entered into with our members (such as our Terms and Conditions). For example, in order to prevent the circumventing of our online booking system, we may scan and analyse messages sent through our Platforms to check that they do not include any contact details or references to other websites.
5.2. We will never scan or analyse your messages with other members of our community for commercial and advertising purposes. We may use automated methods to carry out the moderation of these messages, but no automated individual decision-making is performed in this regard.
In accordance with applicable laws and where required with your consent, we may use the information you give us on our Platforms for electronic direct marketing purposes (e.g. (i) receiving our newsletters, invitations to our events or other communications that we think may interest you or (ii) serving you with targeted advertising on social media platforms or third parties websites). Your background location data, if you consent to its collection, may be used to help tailor suggestions and recommendations as described in section 3, but will not be directly used for serving third-party targeted advertising unrelated to our services.
For electronic marketing communications: You can withdraw your consent at any time by (i) unticking the relevant box in your member account, (ii) clicking on the unsubscribe link we provide in each STAXY communication sent to your attention or (iii) contacting us using the contact details provided in section 13 below.
For targeted ads and content:
7.1. You are entitled to receive a copy of your personal data that is in our possession ( your right of data access ).
7.2 You may request the deletion of personal data or the correction of inaccurate personal data ( your right to erasure and rectification ). Please note that we may keep certain information concerning you, as required by law, or when we have a legal basis to do so (e.g., our legitimate interest to keep the platform safe and secure for other users, or legal requirements for financial data retention). You can review and request corrections to your travel history derived from location data via the platform features.
7.3 You have the right to object at any time (i) to the processing of your personal data for the purpose of direct marketing, or (ii) to the processing of your personal data for other purposes on grounds relating to your particular situation ( your right to object to processing ). Please note that in the latter case, this right only applies if the processing of your personal data is based on our legitimate interest. Processing based on your explicit consent (such as background location tracking) can be stopped by withdrawing your consent (e.g., disabling the feature in the app settings).
7.4 You have the right to restrict the processing of your personal data ( your right to restriction of processing ). Please note that this only applies if (i) you contested the accuracy of your personal data and we are verifying the accuracy of the personal data, (ii) you exercised your right to object and we are still considering, as foreseen by the applicable law, whether our legitimate grounds to process your personal data in that case override your interests, rights and freedoms; or (iii) your personal data has been processed by us in an unlawful way but you either oppose the erasure of the personal data or want us to keep your personal data in order to establish, exercise or defend a legal claim.
7.5 You have the right to receive and/or have us transfer to another data controller a subset of personal data, that concern you and that you provided us with, and which we process for the performance of our contract or because you previously consented to it, in a structured, commonly used and machine-readable format ( your right to data portability ).
7.6 To exercise your rights, or withdraw consent for processing like background location tracking, you can use the settings within our Platforms where available, or contact the Group Data Protection Officer (see under Article 13).
7.7. You also have the right to make a complaint to the relevant data protection supervisory authority (in the UK, this is the Information Commissioner's Office - ICO) or to seek a remedy through the courts if you believe that your rights have been breached.
To find out more, please see our Cookie Notice.
Where you have chosen a password which enables you to access certain parts of our Platforms, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Our Platforms may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy practices and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Personal Data to these websites.
Any changes we may make to our Privacy Notice in the future will be posted on this page. Where appropriate, we will notify you or seek your consent, especially for significant changes impacting how your data is processed. Please check back frequently to see any updates or changes to our Privacy Notice.
If at any time you would like to contact us with your views about our privacy practices, or with any enquiry relating to your Personal Data, including exercising your rights or withdrawing consent, please use one of the following means:
Version dated 13 January 2025