PRIVACY POLICY

This Privacy Policy outlines how Preevo Limited (“Preevo”) collects and processes personal information from individuals who access its website (the “Website”), use the Preevo App (the “App”), or book services through any of Preevo’s booking channels. It also explains how that information is used and protected and sets out the rights available to affected individuals.

1. HOW PERSONAL DATA IS COLLECTED

Preevo obtains personal data through direct interactions with individuals and automated technologies.

1.1 DATA PROVIDED DIRECTLY

Personal data may be provided to Preevo via the Website, the App, or through direct communication by phone, email, or other contact channels.

The types of personal data collected directly include:

(i) identity data – such as first and last names;

(ii) contact data – including email address and phone number; where a booking is made on behalf of another individual, contact details of that individual may also be collected;

(iii) financial data – including bank card details (such as expiry date and CVV); the CVV is used solely to validate the card and is not retained after payment processing;

(iv) transaction data – covering payment details, pick-up and drop-off locations, journey dates, times, distances, amounts charged, related communications, and other booking-related data; this information is used to issue invoices and process transactions;

(v) technical data – such as IP address, browser type and version, time zone and location data, operating system and platform, and device identifiers (e.g. device ID, IDFA);

(vi) usage data – including information about how individuals interact with the Website and the App, such as App downloads and browsing or session history; and

(vii) journey feedback – Preevo collects feedback regarding driver performance.

1.2 DATA COLLECTED AUTOMATICALLY

When the Website or the App is accessed, Preevo may automatically collect some of the above categories of personal data, along with additional information about the device and user behaviour. This may occur through the use of cookies, server logs, and similar tracking technologies.

2. HOW PERSONAL DATA IS USED AND THE GROUNDS FOR ITS USE

Preevo uses personal data for the following purposes:

(i) to deliver its services for individuals;

(ii) to manage enquiries and provide customer support;

(iii) to enable communication between individuals and drivers via phone or chat; for this functionality, details such as the date, time, and content of the interaction are collected to assist with dispute resolution and enhance the safety and security of both drivers and customers;

(iv) to comply with legal obligations and to cooperate with regulatory bodies and law enforcement agencies;

(v) to carry out advertising and marketing activities, including tailored advertising that reflects stated preferences, and to assess the effectiveness of such efforts through analytics tools;

(vi) to analyse how its services are used in order to improve and adapt offerings to meet the needs of customers; and

(vii) to detect and prevent fraudulent use of its services, including through automated systems that analyse usage patterns.

Processing of personal data requires a lawful basis. In most cases, the relevant basis will be one of the following:

(i) the necessity to perform a contract – for example, to deliver Preevo’s services, send booking confirmations or process payments;

(ii) compliance with a legal or regulatory obligation; or

(iii) the pursuit of legitimate interests, such as analysing usage to inform future development of Preevo’s services, provided that such interests do not override the rights and freedoms of the individuals concerned.

In certain circumstances, consent may be requested for the collection and use of specific categories of personal information.

In some cases, the provision of personal data is required by law or under the terms of a contract. Failure to provide this data may result in a delay or inability to fulfil the relevant legal or contractual obligations. In such cases, affected individuals will be informed.

3. HOW PERSONAL DATA IS SHARED

Personal data may be disclosed to third parties under the following circumstances:

(i) exchange of journey details between passengers and drivers; as a means to deliver its services, Preevo will share certain details with the individual, including the driver’s full name, photo, and contact information; when a driver is assigned, they receive the passenger’s full name, pick-up location, and intended destination;

(ii) disclosure to service providers and business partners; to support the functions outlined in this Privacy Policy, Preevo may share personal data with trusted third-party service providers and business partners, including those offering technical infrastructure, analytics, or advertising services; professional advisers such as lawyers, auditors, insurers, and accountants may also be engaged;

(iii) sharing with law enforcement agencies, courts, regulators, government authorities, or other third parties; such disclosure may occur where Preevo reasonably believes it is necessary to comply with legal or regulatory obligations or to protect its own rights or those of a third party; and

(iv) asset buyers; in the event of a sale or transfer of all or a substantial portion of Preevo’s assets or business to another party, personal data may be shared with the acquiring entity; reasonable steps will be taken to ensure the acquiring party uses the information in accordance with this Privacy Policy.

4. DATA SECURITY AND STORAGE

Preevo applies technical and organisational measures appropriate to the level of risk associated with the personal data it processes. These measures are implemented to maintain the continuous integrity and confidentiality of that data.

Personal information is retained for the duration of the relationship between the individual and Preevo. Once that relationship ends, the information is retained only for a period necessary to:

(i) preserve business records for analysis and/or audit purposes;

(ii) comply with legal record-keeping requirements;

(iii) address or initiate any legal actions, whether potential or ongoing; and

(iv) manage any complaints related to Preevo’s services.

Once personal information is no longer required for the above purposes, it will be securely deleted. If complete deletion is not technically feasible, appropriate measures will be taken to ensure the data is effectively isolated and not subject to further processing or use.

5. INDIVIDUAL RIGHTS

Subject to applicable local legislation, individuals are entitled to exercise the following rights in relation to their personal data:

(i) access the personal data held about them;

(ii) request rectification of any inaccurate or incomplete personal data;

(iii) request the erasure of their personal data;

(iv) request restrictions on the processing of their personal data;

(v) object to the processing of their personal data;

(vi) receive their personal data in a structured, commonly used, and machine-readable format and have that data transferred to a third party (data portability); and

(vii) lodge a complaint with the relevant data protection authority.

In addition, individuals may object at any time to the processing of their personal data for marketing or data analysis purposes.

6. CONTACT INFORMATION

Preevo acts as the data controller and is responsible for handling and processing the personal information it collects. For any enquiries regarding the use or protection of personal information, individuals are encouraged to contact Preevo using the details below:

By Email: info@preevo.co.uk

By Post: Centurion House, London Road, Staines-upon-Thames TW18 4AX, United Kingdom.

Preevo is committed to working with individuals to resolve any privacy-related concerns in a fair and timely manner. If a concern has not been adequately addressed, individuals have the right to lodge a complaint with the United Kingdom’s data protection authority, the Information Commissioner’s Office (ICO), via their website at www.ico.org.uk or with the relevant supervisory authority in their jurisdiction.