Privacy Policy

1. Data Controller

LVL IA — 15 rue de Lebisey, 14000 Caen, France — support@vtcconnectpro.net — SIRET 991 803 594 00019

2. Data Collected

• When making a booking request: first name, last name, email address, phone number, departure city and destination, requested date and time, number of passengers.
• Navigation data collected automatically: IP address (anonymised), browser type, pages visited, visit duration — via Google Analytics.
• No banking or payment data is collected by ViaTransfer.

3. Purposes of Processing

• Processing your ride request and connecting you with an available driver.
• Sending a booking confirmation email.
• Improving the site and services via traffic analytics (Google Analytics).
• Compliance with our legal obligations.

4. Legal Basis

• Performance of a contract (or pre-contractual measures): for processing your ride request.
• Legitimate interest: for usage statistics analysis.
• Consent: for non-essential cookies (analytics).

5. Data Recipients

• Partner VTC drivers: your contact details and journey information are shared with the driver who accepts your request.
• Resend (email service): for sending confirmations.
• Google Analytics: for traffic statistics (anonymised data).
• Supabase (database): data hosted within the European Union (eu-west-3 region).
• LVL IA does not sell or rent your personal data to third parties.

6. Retention Period

• Booking data: retained for 3 years from the date of the request.
• Navigation data (logs): maximum 13 months.
• At the end of these periods, data is deleted or anonymised.

7. Your Rights (GDPR)

• Under the General Data Protection Regulation (GDPR — EU Regulation 2016/679), you have the following rights:
• • Right of access to your personal data
• • Right to rectification of inaccurate data
• • Right to erasure ("right to be forgotten")
• • Right to restriction of processing
• • Right to data portability
• • Right to object to processing
• To exercise these rights, contact us at: support@vtcconnectpro.net
• You may also lodge a complaint with the CNIL (French data protection authority): www.cnil.fr

8. Security

LVL IA implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration. All communications between your browser and our site are encrypted via HTTPS/TLS.

9. International Transfers

Google Analytics and Netlify are US companies. Data transfers to the United States are governed by the European Commission's standard contractual clauses and/or the EU-USA Data Privacy Framework.