Privacy Policy

Section 1

Introduction & Scope

RideCharter Inc. ("RideCharter", "we", "our", "us") operates the website at ridecharter.com and associated mobile applications. This Privacy Policy applies to all personal information collected through these channels when you interact with our bus charter and rental services.

By using our services, you consent to the data practices described in this policy. If you do not agree, please discontinue use of our services. This policy is effective as of January 15, 2025 and supersedes all previous versions.

Scope: This policy applies to customers, website visitors, corporate clients, job applicants, and any other individuals whose data we process. It does not apply to third-party websites linked from our platforms.

Section 2

Data We Collect

2.1 Information You Provide Directly

Account Data: Name, email address, phone number, and password when creating an account.
Booking Data: Pickup/drop locations, travel dates, passenger count, special requirements.
Payment Data: Billing address, card type. Full card numbers are processed by Stripe (PCI-DSS Level 1) and never stored on our servers.
Communications: Emails, support tickets, survey responses, and feedback you share with us.
Identity Verification: Government ID may be required for specific services (driver verification, corporate contracts).

2.2 Information Collected Automatically

IP address, browser type, device model, and operating system.
Pages visited, session duration, referring URLs, and click patterns.
GPS and location data if you grant permission in our mobile app.
Cookies, pixels, and similar tracking technologies (see Section 8).

2.3 Information from Third Parties

Social login data (Google, Facebook) if you choose social sign-in.
Corporate account data from your employer if booked through a business account.
Public business directory data for corporate lead enrichment.

Section 3

How We Use Your Data

Purpose	Legal Basis	Examples
Service Delivery	Contract	Process bookings, dispatch drivers, send confirmations
Payment Processing	Contract	Charge fares, issue refunds, generate invoices
Customer Support	Legitimate Interest	Answer queries, resolve disputes, manage complaints
Safety & Security	Legitimate Interest	Detect fraud, verify identities, prevent abuse
Marketing	Consent	Send newsletters, promotional offers, personalized ads
Analytics	Legitimate Interest	Improve features, measure performance, A/B testing
Legal Compliance	Legal Obligation	Tax records, regulatory filings, court orders

Marketing opt-out: You may unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by contacting privacy@ridecharter.com. This will not affect service-related communications.

Section 4

Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share data only in the following circumstances:

4.1 Service Providers

Payment: Stripe, PayPal (payment processing – PCI-DSS compliant)
Maps: Google Maps Platform (route display and navigation)
Analytics: Google Analytics 4, Hotjar (anonymized usage data)
Communications: Twilio (SMS), SendGrid (email), Intercom (live chat)
Cloud Hosting: AWS (US-based servers with SOC 2 certification)

4.2 Legal Disclosures

We may disclose your information when legally required by court order, government authority, or to protect the rights and safety of RideCharter, our customers, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you in advance and ensure the same level of data protection is maintained.

Our Promise: We never sell your data. Every third-party we work with is contractually bound to process your data only as instructed and to maintain appropriate security measures.

Section 5

Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA, or other applicable data protection laws:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete personal information.

Right to Erasure

Request deletion of your data ("right to be forgotten").

Right to Restriction

Limit how we process your data in certain circumstances.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or marketing.

To exercise any right, contact our DPO at privacy@ridecharter.com. We will respond within 30 days. California residents may also submit requests through our CCPA Request Portal.

Section 6

Data Security

We implement industry-leading security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

256-bit SSL/TLS

All data in transit encrypted

PCI-DSS Level 1

Payment processing compliant

SOC 2 Certified

AWS infrastructure audited annually

Pen Testing

Quarterly security assessments

Data Breach Protocol: In the unlikely event of a data breach affecting your personal information, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR Article 33.

Section 7

Data Retention

Data Category	Retention Period	Reason
Account & profile data	Life of account + 2 years	Service continuity
Booking & transaction records	7 years	Tax & legal compliance
Payment records	7 years	Financial regulations
Support communications	3 years	Dispute resolution
Marketing consent records	Until opt-out + 1 year	Proof of consent
Website analytics (anonymized)	26 months	Google Analytics default
CCTV / vehicle footage	30 days	Safety & incidents only

After the retention period, data is securely deleted or anonymized. You may request early deletion of your account data at any time, subject to legal hold requirements.

Section 8

Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience. You can manage cookie preferences at any time through our cookie banner or browser settings.

Type	Purpose	Examples	Opt-out?
Essential	Site functionality, login, security	Session cookies, CSRF tokens	No
Functional	Remember preferences	Language, currency, theme	Optional
Analytics	Usage statistics	Google Analytics, Hotjar	Yes
Marketing	Targeted advertising	Facebook Pixel, Google Ads	Yes

For a complete list of cookies we use and their purposes, see our dedicated Cookie Policy.

Section 9

Children's Privacy

Our services are not directed to children under the age of 13 (or 16 in the EU under GDPR). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at privacy@ridecharter.com. We will promptly delete such information.

For school or youth group bookings, the organizing adult takes full responsibility for ensuring appropriate consents are obtained from parents or guardians of minors traveling.

Section 10

Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Email

privacy@ridecharter.com

Mail

1250 Charter Blvd, Suite 400, NY 10001

Response Time

Within 30 days of request

Quick Summary