PRIVACY POLICY

1. INTRODUCTION

RIDEWING, a trading division of Kingdom Holidays Group Ltd ("we", "us", or "our"), is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data when you visit www.ridewing.co.uk or book our transportation services.

For the purpose of the UK General Data Protection Regulation (UK GDPR), the Data Controller is: Kingdom Holidays Group Ltd 491 Sipson Road, West Drayton, UB7 0JB, Greater London, United Kingdom. Company Number: 11730934

2. DATA WE COLLECT ABOUT YOU

We may collect, use, and store different kinds of personal data which we have grouped together as follows:

• Identity Data: First name, last name, and title.
• Contact Data: Email address, mobile phone number, and billing address.
• Transfer Data: Pickup and drop-off addresses, flight numbers, train arrival times, and passenger counts.
• Technical Data: IP address, browser type, time zone setting, and operating system used to access our website.
• Financial Data: Payment card details (processed via secure third-party payment gateways; we do not store your full card details).

3. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

• To Perform a Contract: To process your booking and ensure the driver can locate you.
• Communication: To send you booking confirmations, SMS alerts regarding driver arrival, and respond to your inquiries.
• Legal Compliance: Where we need to comply with a legal or regulatory obligation (e.g., tax records).
• Safety: To facilitate emergency contact between you and your driver.

4. DATA SHARING & DISCLOSURE

As Ridewing acts as a booking agent, we must share specific information to fulfill your service:

• Local Affiliates/Drivers: We share your name, phone number, and transfer details with the licensed local partner assigned to your journey.
• Payment Processors: We share data with secure third-party payment providers (e.g., Stripe, PayPal) to process your transaction.
• Professional Advisers: Including lawyers, auditors, and insurers where necessary.

We do not sell your personal data to third-party marketing companies.

5. INTERNATIONAL DATA TRANSFERS

Because Ridewing offers global transportation services, your data (name and phone number) may be transferred to affiliates outside the United Kingdom or the European Economic Area (EEA) to facilitate your specific booking in those regions. We ensure that these partners agree to protect your data with similar levels of security.

6. DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

• Our website uses SSL (Secure Sockets Layer) encryption.
• Access to your data is limited to employees and partners who have a business "need-to-know."

7. DATA RETENTION

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we must keep basic information about our customers (including Contact, Identity, and Transaction Data) for six years after they cease being customers for tax purposes.

8. YOUR LEGAL RIGHTS

Under UK data protection laws, you have the right to:

• Request access to your personal data.
• Request correction of any incomplete or inaccurate data.
• Request erasure of your personal data (where there is no good reason for us continuing to process it).
• Object to processing of your personal data.
• Request the transfer of your data to you or a third party.

To exercise any of these rights, please contact us at support@ridewing.co.uk.

9. THIRD-PARTY LINKS

Our website may include links to third-party websites (such as flight trackers or maps). Clicking on those links may allow third parties to collect data about you. We do not control these third-party websites and are not responsible for their privacy statements.