Template notice: This text describes how this website operates technically. It is not legal advice. Have it reviewed by a qualified lawyer before relying on it.
Who we are
The website https://ditransfers.com (the “Site”) is operated in connection with Di Transfers (“we”, “us”). You can contact us at hello@ditransfers.com and by phone at +359 89 248 5587 · +359 89 366 4715.
What personal data we process
Depending on how you use the Site, we may process:
- Booking requests: name, email address, phone number, pickup and destination details, date and time, passenger count, selected vehicle category, optional flight number and special requests, and related pricing information you submit through the booking flow. This data is stored in our database (hosted with Supabase) and used to handle your request.
- Support chat: if you use the on-site chat, we create a session tied to your browser, and we may store your name, email, phone (if you provide them), and the messages you send. Chat data is stored in our database. We may email our team when new visitor messages arrive (via Resend), using the addresses configured for the service.
- Email: we send transactional emails about your booking (e.g. confirmation, updates) through Resend, using the email address you provide.
- Technical data: server and application logs may include IP address, timestamps, and request metadata for security and troubleshooting. Rate limiting may use your IP for the chat API.
- Optional integrations: if configured, WhatsApp or other channels may process identifiers and message content according to those providers’ terms.
- Analytics and advertising (when you consent): if you click Accept all on our cookie banner, we may load Google Analytics 4 (GA4) and related Google tags so we can measure traffic, improve the site, and (where applicable) support Google Ads measurement and remarketing. We use Google Consent Mode so that analytics and ads storage stay off until you accept non-essential processing. Google’s privacy policy: https://policies.google.com/privacy. Vercel may also process limited analytics/performance data as part of hosting (see Vercel’s privacy documentation).
- If you reject non-essential cookies: we do not enable GA4/advertising storage through Consent Mode as implemented on this Site; essential operation of the Site (booking, chat, security) may still use necessary cookies and storage as described elsewhere in this policy.
We do not load Meta Pixel or similar non-Google advertising pixels in our application code unless we add them later and update this policy.
Purposes and legal bases (EEA/UK overview)
Where GDPR applies, we rely on:
- Performance of a contract or steps prior to a contract — processing booking and chat data to respond to you and arrange transfers.
- Legitimate interests — securing the Site, preventing abuse, and improving reliability (e.g. rate limits, logs), balanced against your rights.
- Consent — for optional analytics and advertising via the cookie banner, and where we ask for it explicitly for other non-essential processing in the future.
How long we keep data
Retention depends on operational needs, legal obligations, and dispute resolution. Booking and chat records are kept as long as necessary to provide the service and meet accounting or legal requirements, then deleted or anonymised where appropriate.
Recipients and processors
We use service providers as processors, including:
- Supabase (database, authentication for our admin area, and file storage as configured).
- Resend (transactional email).
- When you use the map on the booking flow, your browser loads map tiles from OpenStreetMap contributors’ infrastructure and may call Nominatim (OpenStreetMap) for address lookup; those services receive technical data such as IP address and coordinates as part of the request.
We may disclose information if required by law or to protect our rights and users’ safety.
International transfers
If data is stored or processed outside your country (e.g. EU-hosted Supabase/Resend regions), we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses as applicable.
Your rights (EEA/UK)
Subject to conditions in applicable law, you may have the right to access, rectify, erase, restrict processing, object, and data portability, and to withdraw consent where processing is based on consent. You may lodge a complaint with your local supervisory authority.
To exercise your rights, contact us at hello@ditransfers.com.
Changes
We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision.
Last updated: 2018-10-20
