Privacy Policy

LadyCab Limited

Introduction

LadyCab Limited (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. We recognise that your personal information is precious, and we seek to handle it responsibly and transparently. This Privacy Policy explains how we collect, use, disclose, store and otherwise process your personal data in connection with our services (including our mobile or web booking platform), recruitment of drivers, operation of the fleet, and any other interactions you may have with us.


We are subject to the EU General Data Protection Regulation (“GDPR”) (Regulation (EU) 2016/679) and the Irish Data Protection Act 2018, and we seek to comply with all applicable Irish data protection legislation. Enterprise Ireland+2citizensinformation.ie+2

Who we are and how to contact us

  • Controller: LadyCab Limited.
  • Our DPO/Privacy contact: TBC at TBC and TBC.
  • If you have any questions or concerns about your personal data, or wish to exercise any of your data subject rights (see below), please contact us at the above address/email.

What personal data we collect


Depending on your interaction with us (as a passenger/customer; as a driver/fleet member; as a job applicant; as a website user; etc.), we may collect the following categories of personal data:


As a passenger/booking user:

  • Name, address, email address, telephone number. Payment information (card or online payment details) — note: payment
  • processing may be handled by a third-party, see section on third-party processors.
  • Booking information: pick-up and drop-off locations, times, journey details.
  • Device and usage information if you use our app or website: IP address, device identifiers, operating system, browser, app version, usage logs.
  • Location data (if you grant permission and use our app).
  • Customer feedback, ratings, complaints.


As a driver / fleet member:

  • Name, address, email, phone number, date of birth, licence number(s) (including driver licence, SPSV licence), PPS number or company tax reference, vehicle registration, insurance information, national car test (NCT) details, tax clearance status, photograph(s) for identification, bank account information for payments.
  • Recruitment/HR data (application form, CV, references, assessment information, training records).
  • Vehicle information: make/model, registration number, colour, inspection records, taximeter verification details, CCTV footage (in-vehicle, where applicable).
  • Records of journeys, fares, dispatch communications.


As a website/app visitor:

  • Information you provide via contact forms, newsletter subscriptions, feedback.
  • Cookies or similar technologies: IP address, browsing behaviour on our website/app, referral source, time and length of visit.


Special category or sensitive data:


We do not generally collect special-category data (such as health, race, religion) unless strictly required (for example in the case of driver medical fitness). If we ever do so, we will obtain explicit consent and/or ensure a lawful basis under GDPR and Irish law.

The purposes and lawful bases for processing your personal data


We process your personal data for the following purposes and applicable lawful bases:

  1. To provide and manage the LadyCab service (booking, dispatch, payments, driver allocation, customer support).
    • Legal basis: performance of the contract with you (Art 6(1)(b) GDPR) or taking steps prior to entering a contract; necessary for our legitimate interests (Art 6(1)(f)) in operating the service; compliance with our legal obligations (Art 6(1)(c)).
  2. Driver recruitment, onboarding, fleet management, vehicle and passenger safety (including background checks, licence checks, insurance verification, tax clearance, vehicle inspections, CCTV where applicable).
    • Legal basis: processing is necessary for compliance with our legal obligations under transport regulation (e.g., licensing under the National Transport Authority (NTA) framework), and for our legitimate interest in ensuring safety and regulatory compliance.
  3. Customer service, feedback, complaint handling.
    • Legal basis: legitimate interest in improving service, contractual obligation.
  4. Marketing and promotional communication (if you provide consent or you are an existing customer and the marketing is relevant).
    • Legal basis: consent (Art 6(1)(a)) or legitimate interest but balanced against your rights (you have a right to object).
  5. Analytics, service improvement, research (usage tracking, device/app behaviour, journey pattern analysis).
    • Legal basis: legitimate interests in improving our service; where profiling or automated decision‐making is involved we will provide suitable safeguards.
  6. Fraud prevention, security, legal claims and compliance.
    • Legal basis: legitimate interests or legal obligation.
  7. Retention and historical record-keeping (to meet regulatory, tax, insurance, litigation requirements).
    • Legal basis: legal obligation or legitimate interest.


We will always inform you, at or before the point of collection (or as soon as possible thereafter), of what processing we are carrying out, your rights, how long data is retained, and so forth.

Disclosure of personal data to third parties


We may share your personal data with the following categories of recipients:

  • Service providers and processors engaged by us (e.g., payment processors, IT infrastructure providers, analytics services, app/platform providers, background/driver check vendors).
  • Regulatory and licensing authorities, including the NTA, An Garda Síochána, Revenue Commissioners, Driver & Vehicle Computer Services Division (DVCS), National Standards Authority of Ireland (NSAI) where required. (See also example from NTA’s SPSV-licensing privacy statement.) National Transport+1
  • Law enforcement or fraud detection agencies if required.
  • The public or other users (in limited cases) when required by law, or when you have given consent.
  • Within our group or affiliates (if applicable).
  • Other passengers or drivers (e.g., ratings/feedback may be shared in anonymised or aggregate form).


We will not sell your personal data to third parties or use it for unrelated third-party marketing without your consent.

International transfers of data

Your personal data may be stored on servers located in Ireland, elsewhere in the EEA or operated by service providers subject to appropriate safeguards (e.g., EU Standard Contractual Clauses). If data is transferred outside the EEA, we will ensure that such transfer is lawful under GDPR (Arts 44–50) and that appropriate safeguards are in place.

Retention of personal data

We retain personal data only for as long as necessary for the purposes set out above, and/or to meet legal or regulatory requirements (whichever is longer). For example, for drivers and licences we may retain records for a specified number of years after licence expiry (as seen in NTA documents) National Transport+1. Once data is no longer needed, we shall securely delete or anonymise it.

Your rights (data subject rights)

Under the GDPR and Irish Data Protection Acts you have the following rights, subject to certain conditions:

  • The right to be informed about our processing of your personal data.
  • The right of access: you may request a copy of your personal data we hold.
  • The right to rectification: you can ask us to correct inaccurate or incomplete data.
  • The right to erasure (“right to be forgotten”) in certain circumstances.
  • The right to restrict processing in certain circumstances.
  • The right to object to processing including for direct marketing, or where we rely on legitimate interest.
  • The right to data portability: where processing is based on consent or contract and is carried out by automated means, you may ask for your data in a structured, commonly used machine-readable format.
  • Rights in relation to automated decision-making and profiling: if relevant we will provide meaningful information about the logic involved and your rights.

If you wish to exercise any of these rights, please contact our DPO using the contact details above. We will respond without undue delay and in any case within one month of a valid request (possible extension of a further two months where necessary and justified). If you are unhappy with how we handle your personal data or rights, you have the right to lodge a complaint with the Data Protection Commission (DPC) in Ireland: https://www.dataprotection.ie. citizensinformation.ie+1

Cookies and tracking technologies

On our website and/or app we may use cookies, web beacons, device identifiers, analytics tools, location tracking (if you grant permission) and similar technologies.
You will be presented with a cookie banner / preferences menu where required by Irish/EU law. You may disable non-essential cookies (but this may affect functionality).
For full details see our separate Cookie Policy [link].

Security of your personal data

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage — for example encryption, secure access controls, intrusion detection, restricted data access, regular audits and training. We ensure third-party processors we engage also adhere to high standards of security.

Children’s personal data

Our services are generally intended for users aged 18+ in Ireland. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us and we will delete it as required.

Identity Verification

For identity verification

Where identity verification is enabled, the app may process biometric data (facial imagery) to verify your identity and prevent misuse. The app may use depth data for liveness detection. This depth data is processed locally on your device and is not stored or transmitted. The app may ask you to take a selfie, which may be securely transmitted to our trusted Service Providers solely for verification purposes and is deleted after verification is completed. Biometric data is used only for identity verification and liveness detection, and not for advertising, marketing, or profiling.

Changes to this Privacy Policy

We may update this policy from time to time (for example if legal or regulatory changes occur, or our business changes). We will publish the updated policy on our website with an updated “Effective date”. We encourage you to review it periodically for any changes.

Additional notes specific to LadyCab

  • As a female-focused fleet (driver-recruitment and safety for women), we may collect additional safety-related data (e.g., driver training records, incident reports) — such data will be treated with heightened confidentiality and only processed for legitimate safety and operational reasons.
  • We are registered/licensed under the taxi/SPSV regulatory regime administered by the NTA and will cooperate fully with any lawful regulatory or enforcement bodies in Ireland.
  • We maintain a process for driver background verification, vehicle inspection, customer feedback and incident recording — personal data tied to these functions is processed strictly under the purposes and lawful bases set out above.
  • We provide data access or portability to drivers (for their journey logs, earnings, records) upon request, subject to any lawful restriction.

Contact details and DPO

Data Protection Officer:

Email: info@ladycab.ie

Postal: LadyCab Limited, Suite 11206, 26/27 Upper Pembroke Street, Dublin2, D02 X361, IRELAND.

If you have any questions about this policy or our data practices, contact us. You can also contact the Data Protection Commission at:

Data Protection Commission

21 Fitzwilliam Square South

Dublin 2

D02 RD28

Ireland

https://www.dataprotection.ie