Privacy notice

Who controls your data

Dunfermline Taxi App is operated by Corporate Taxis Dunfermline Ltd (company number SC773560), registered in Scotland at 3 Allen Grove, Comrie, Dunfermline, Scotland, KY12 9XH, the data controller for this service. For privacy questions or requests, call or message +44 7465 222506.

What we collect

  • Account and contact details, including name, email address, and phone number.
  • Booking information, including pickup, destination, time, passenger count, vehicle needs, optional journey notes, status history, fare, and payment status.
  • Pickup or destination search text and the address, provider place identifier, and coordinates of a suggestion the customer selects. If the customer chooses to use their current location for pickup, we also collect that device coordinate and its address label.
  • A driver's precise foreground location while an approved driver is online, used to rank nearby drivers for automatic matching. Publishing stops when the driver goes offline or the app leaves the foreground.
  • Driver profile, vehicle, onboarding, availability, job-action, and earnings records.
  • Device push-notification registrations and standard server access logs. We do not use a separate analytics, crash-reporting, or advertising service.

Why we use it

We use personal data to create and secure accounts, provide bookings and dispatch, match available drivers, take test or approved production payments, send essential journey notifications, support customers and drivers, prevent fraud, resolve disputes, and meet legal or accounting obligations.

Depending on the activity, our lawful basis is taking steps at your request or performing the transport service, complying with legal obligations, or our legitimate interests in operating a safe and reliable dispatch service. We ask for device permission before using location or notifications.

Who processes it

Data is made available only where needed: to authorised dispatch staff, the assigned driver or customer, and service providers that run the app. These currently include Supabase for authentication and database services, Expo for push delivery and app builds, Stripe for card-payment processing, and Google Maps Platform for pickup and destination address suggestions and road-distance calculations. Address search, selected provider place identifiers, and route endpoints are sent to Google for those mapping features; Google does not receive payment or card information from us. The app does not store full card numbers. We do not sell personal data or use it for advertising tracking.

When an assigned driver chooses to open directions, the Driver app hands that journey's pickup or destination address—or its verified map pin—to Apple Maps on iOS or Google Maps on Android. This user-initiated handoff is then processed under that navigation provider's own privacy terms.

Google handles information as described in the Google Privacy Policy, which is incorporated into this notice. Use of Google Maps features is also subject to the Google Maps Platform Terms of Service.

Information may also be disclosed where required by law or necessary to protect the rights and safety of passengers, drivers, staff, or the public.

Retention and deletion

Account data is kept while the account is active. Push registrations are removed on sign-out, replacement, or deletion. Driver location is operational matching data and is not intended for indefinite retention. Booking, payment, accounting, safety, fraud-prevention, audit, or dispute records are retained only for the period needed for those purposes or required by law, then deleted or anonymised. Address-lookup rate-limit records contain only a profile identifier, request kind, and timestamp and are deleted after seven days; they never contain search text or lookup results. A server-confirmed address selection can be used for a booking for two hours and is queued for hourly deletion once three hours old. The booking keeps the address entered by the customer rather than an address returned by Google. Coordinates returned by Google are queued for hourly removal once 29 days old and always within 30 days; the selected place identifier, booking address, and quoted fare can remain with the booking record for the retention period described above. Google route distance is used only to calculate the fare and is not stored, and route duration is not requested.

Customers can initiate permanent deletion from Account and privacy in the app. Anyone can also use our public account-deletion page. Active journeys, refunds, disputes, or legal retention duties may need to be resolved before deletion completes.

Your choices and rights

You can deny or revoke location and notification permissions in device settings. You may also ask for access, correction, deletion, restriction, objection, or portability where those UK data-protection rights apply. Contact us on +44 7465 222506 so we can verify and handle your request.

You can complain to the UK Information Commissioner's Office if you are unhappy with how a privacy concern is handled.