Privacy Policy

Last updated: 2/20/2026

1. General Information

In compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable data protection laws, we inform you about the processing of your personal data.

Data Controller: Right Road
Address: Málaga, Spain
Email: info@right-road.com

2. Data We Collect

We collect the following types of data:

  • Identification data: Full name, email, phone number
  • Booking data: Pickup and destination addresses, service date and time, number of passengers
  • Payment data: Information processed through Stripe (we do not store banking details)
  • Browsing data: Cookies, IP address, browser type

3. Purpose of Processing

Your data will be used for:

  • Managing and processing your transportation service bookings
  • Sending confirmations and updates about your service
  • Payment processing through Stripe
  • Customer service and technical support
  • Compliance with legal and tax obligations
  • Service improvement (with your consent)

4. Legal Basis for Processing

The processing of your data is based on:

  • Contract performance: To provide the requested service
  • Consent: For commercial communications (if authorized)
  • Legal obligation: To comply with tax and legal requirements
  • Legitimate interest: To improve our services and security

5. Data Retention

Personal data will be retained for the time necessary to fulfill the purpose for which it was collected and to determine any liabilities that may arise from that purpose and data processing. Tax data will be retained for 6 years in accordance with applicable law.

6. Data Recipients

Your data may be shared with:

  • Stripe: For secure payment processing
  • Service providers: Hosting, email, cloud services
  • Competent authorities: When legally required

We do not sell or share your personal data with third parties for commercial purposes without your explicit consent.

7. Your Rights

You have the right to:

  • Access: Obtain information about your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data
  • Object: Object to the processing of your data
  • Restriction: Request limitation of processing
  • Data portability: Receive your data in a structured format
  • Withdraw consent: At any time

To exercise these rights, contact us at info@right-road.com. You may also file a complaint with your local data protection authority.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. We use SSL/TLS encryption, secure cloud storage, and strict access control.

9. International Transfers

Some of our service providers may be located outside the European Economic Area. In these cases, we ensure adequate safeguards through standard contractual clauses approved by the European Commission.

10. Changes to this Policy

We reserve the right to modify this Privacy Policy to adapt to legislative or jurisprudential changes. We recommend reviewing this policy periodically.