Welcome to the Fair Trade Fares (FTF) Driver Privacy Policy. This Privacy Policy applies to your interactions with the FTF App (“the APP”), our website www.FTFtaxi.com “(the Website”)or any other web pages or materials that we oversee. In this Privacy Policy, “Platform” means the App and the Website.
The App and website are operated by Fair Trade Fares Ltd, a company incorporated in Scotland and with its registered office at Bonnington Bond, Suite 49a, 2 Anderson Place, Edinburgh, Scotland, EH6 5NP (“we”, “us” and “our” below). We are committed to a policy of protecting the rights and privacy of individuals in accordance with the Data Protection Act 2018, the General Data Protection Regulation (GDPR), the UK GDPR and all other EU domestic UK data protection legislation (“the Data Protection Legislation”). This statement sets out our privacy policy and explains what we do with the personal information that we collect from our users. Please read the following to understand our views and practices regarding personal information. If you have any questions or concerns regarding this statement, you should contact us using the details given at the end of this statement.
Please note that this policy applies only to our App and website and not to the apps or websites of other organisations to which we may provide links. We are not responsible for the privacy policies or practices of such third parties and you should make your own enquiries in respect of them.
DRIVER PERSONAL DATA RETENTION
Your personal data will be stored as long as you have an active Driver Account. If your account is closed, personal data will be deleted (according to the policies set out in this section) from the databases, unless such data is required to be retained for accounting, dispute resolution or fraud prevention purposes. In more detail:-
-
Booking records will be retained for 12 months as per the PHV Operator license requirements;
-
Journey history data will be stored for 3 years, after which the data will be anonymized.
-
Data required for accounting purposes will be stored for 7 years after the last journey.
-
Financial data regarding Services provided to Riders will be stored for 3 years after the last journey.
If the App has not been used for 3 years, we will notify you and ask you to confirm whether your Driver Account is still active. If no reply is received, the account will be closed and personal data will be deleted unless such data is required to be stored for accounting, dispute resolution or fraud prevention purposes.
In the event that there are suspicions of a criminal offence, fraud or false information having been provided, the data will be stored as long as necessary according to the internal, legal, and regulatory requirements. In case of payment disputes, data will be retained until the claim is satisfied or the expiry date of such claim.
WHAT TYPES OF DRIVER PERSONAL DATA WE COLLECT AND PROCESS
We will collect and process the following data about you:
Information you give us (“Submitted information”): This is information you give us about you by filling in forms on the Platforms, or by corresponding with Us (for example, in writing, by e-mail or chat). It includes information you provide when you:
-
download the App;
-
register a Driver Account on either of the Platforms;
-
subscribe to, request and/or use any of the Services;
-
register a bank account through which payments may be made or taken in relation to a Journey;
-
Share data via either Platforms social media functions;
-
report a problem or complaint with either of the Platforms; with the Services; or arising out of a Journey.
-
Personal Information
The information you give us may include your name, residential address, e-mail address, date of birth, phone number, username, password and other registration information; financial, bank and credit card information; personal description and photograph; vehicle registration; driving licence; other vehicle documentation; and local authority licencing documentation.
Information we collect about you and your Device. Each time you use either of the Platforms We will automatically collect the following information:
-
Device Information
technical information, including the type of device you use, the mobile phone number used by the Device, your mobile operating system, the type of mobile browser you use and time zone setting;
-
Log Information
Details of your use of the Platforms including, but not limited to traffic data, and other communication data, whether this is required for Our own billing purposes or otherwise and the resources that you access;
-
Location information
We also use GPS technology to determine the location of you and your Device when you are online waiting to receive a job or when you are on a Journey whilst you are logged into any user account that you have created with Us;
-
Third-Party Information
Information we receive from other sources. We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, and credit reference agencies). We will notify you when We receive information about you from them and the purposes for which We intend to use that information.
USES MADE OF THE INFORMATION
We use information held about you in the following ways:
-
FTF collects and uses personal data for the purposes of providing the App and for ensuring the safety of riders and drivers. This includes the following:
-
To register you with a Driver Account
-
Making you aware of Ride Requests and other services under our contract
-
Managing the payments under the transportation contract between you and a Rider
-
Processing the payment due to you as a result of any transportation contract you have with a Rider
-
Collect and recover any other money owed to us by you
-
We may use the personal data provided to resolve service quality issues or to improve our apps or for reasons related to security including but not limited to complying with law enforcement information requests when applicable;
-
We use contact details to notify you of updates to the App
-
we may contact you within the app with promotional messages regarding the App, such as opportunities for working extra hours at the weekend or during busy times
-
We collect data of the routes taken by the App users to analyse the geographic coverage in order to make recommendations to the drivers
-
Personal data related to instant messages directly in the App are processed in order to provide service and customer support (including resolving disputes between driver and Rider), for security purposes as well as to improve our products and services, and for analysis
-
We will hold and process your personal data for at least the time during which your account is activated and then in accordance with our legal obligations
-
We collect data about journey statuses, time and Rider feedback to encourage user safety, promote compliance with our terms and conditions, and make sure we’re providing a quality and enjoyable service to everyone. Customer support data and correspondence is collected for the purposes of feedback, and resolving disputes and service quality issues.
-
Data may be processed on the ground of legitimate interest in investigation detecting and preventing fraud and other malicious activities
-
Record of any requests for your information made by law enforcement.
-
The prerequisite for the use of the App is Drivers agreeing to the processing of identification and geolocation data.
FTF also has the option to employ Personal Information and other data related to you to generate de-identified and/or aggregated information. De-identified or aggregated information does not qualify as Personal Information, and FTF is entitled to utilise this type of information in numerous ways. These uses include:
-
Assessing the level of interest and utilisation of different sections or functionalities within the FTF Services by visitors.
-
Conducting research for the purpose of internal analysis.
-
Engaging in analytics to gain insights and make informed decisions.
-
Pursuing any other legally permissible purposes that serve the organisation's objectives.
-
In essence, de-identified and aggregated information is valuable for statistical analysis, trend identification, and research, while also safeguarding individual privacy by removing personal identifiers.
DIRECT MARKETING
If you receive an unwanted email from us, you have the option to unsubscribe by clicking the unsubscribe link located at the bottom of the email. Once you initiate this process, we will handle your request promptly, typically within a reasonable timeframe after we receive it.
It's important to note that while you can opt out of receiving future promotional emails, we may continue to send you certain non-promotional communications related to FTF and our services. These non-promotional communications are typically essential for account management, service updates, or other critical notifications, and you may not have the option to opt out of receiving them.
SECURITY
We are committed to protecting the privacy of your personal data. We use appropriate standards of technology and operational security to protect personal information including a secure server and network firewall connection.
THIRD-PARTY SHARING
We may share any information we collect with service providers who assist us in delivering the FTF Services. These service providers play essential roles in supporting and enhancing our services, and we may disclose your information to them for the following purposes:
-
Furnishing the FTF Services themselves.
-
Providing hosting, IT, and related services.
-
Offering information and services you've specifically requested.
-
Managing payment processing (the current provider is Stripe, please refer to their privacy policy https://stripe.com/en-gb/privacy
-
Conducting customer service activities.
‘COOKIES`
We do not use ‘cookies’ on the Driver App. However third parties we are using to provide services, such as Stripe, Mapbox, Firebase or Google Cloud may use cookies, which would be out of our control. Please refer to the third party’s own privacy policy for further information.
TRANSMISSION OF DATA OVERSEAS
In certain circumstances, we may transfer your personal information to countries outside the United Kingdom or the European Economic Area. This may include circumstances where we use service providers who are based outside the EEA or who use “cloud” infrastructure which means that their servers are based all over the world. Where we transfer your information to companies outside the EEA, we will make sure it is protected in a manner that is consistent with how your information will be protected by us. This can be done in a number of different ways for instance:
-
The country that we send the information to might be approved by the European Commission.
-
The recipient company might have signed a contract obliging them to protect your information.
-
The recipient is located in the US and is a certified member of the EU-US Privacy Shield scheme.
In other circumstances, the law may permit us to otherwise transfer your information outside the EEA. In all cases, however, we will ensure that any transfer of your information is compliant with the Data Protection Legislation.
YOUR RIGHTS
You have a number of legal rights in relation to the information that we hold about you, including:
-
Right to access: You have the right to request access to your personal data held by us. Requests are to be made in writing, electronically and information will be provided in a commonly used electronic format. Requests will be handled within one month of receipt of the request, and free of charge with the exception of where requests are manifestly unfounded or excessive we hold the right to charge a reasonable fee taking into account the administrative costs of providing the information. More information can be found at https://ico.org.uk/for-the-public/personal-information/.
-
Right to rectification: You have the right to have personal data rectified if inaccurate or incomplete. Where the personal data in question has been disclosed to a third party, they will be made aware of the rectification where possible. Requests are to be made in writing, and electronically and will be handled within one month of receipt of the request.
-
Right to erasure: You have the right to request the deletion or removal of personal data in the following circumstances:
o Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed.
o When you withdraw consent.
o When you object to the processing and there is no overriding legitimate interest for continuing the processing.
o The personal data was unlawfully processed (i.e. otherwise in breach of the Data Protection Legislation).
o The personal data has to be erased in order to comply with a legal obligation.
This does not provide an absolute “Right to be forgotten”. Where the personal data in question has been disclosed to a third party, we will inform them about the erasure of the personal data, unless it is impossible or involves disproportionate effort to do so. Personal data will be erased by removal from our internal and cloud servers.
-
Right to restrict processing: You have a right to ‘block’ or suppress processing of personal data if you contest its accuracy; have objected to the processing; processing is unlawful and you oppose erasure; we no longer need the personal data but you require the data to establish, exercise or defend a legal claim. Where the personal data in question has been disclosed to a third party, we will inform them about the restriction on processing of the data, unless it is impossible or involves disproportionate effort to do so.
-
Right to data portability: You have the right to obtain and reuse your personal data for your own purposes. Requests are to be made in writing, and electronically and will be handled within one month of receipt of the request.
-
Right to object: You have the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling); direct marketing (including profiling); and processing for purposes of scientific/historical research and statistics. Requests will be dealt with by immediate effect with no right for refusal.
You also have the right to make a complaint with the Information Commissioner at www.ico.org.uk if you think that any of your rights have been infringed by us.
Should a data breach occur, we have compliant procedures in place to investigate and report the matter to the Individual. In the event of a breach, it will be reported to you within 72 hours of discovery. A record of any breaches will be kept by the company.
You can exercise your rights by contacting us using the details set out in the “Contact Address" section below.
CHANGES TO THE PRIVACY POLICY
We reserve the right to modify or amend this privacy policy at any time and for any reason. Details of any changes will be posted at the top of the privacy policy page.
CONTACT US
If you have any enquiries, feedback, or suggestions regarding our privacy practices or this Privacy Policy, or if you want to make a request to exercise your rights as outlined in this Privacy Policy, please reach out to FTF via email at Legal@FTFtaxi.com or write to us at the address below. We are committed to addressing your concerns and working to resolve any privacy-related matters promptly.