Privacy Policy

1. About XactTransfer

XactTransfer (“we”, “us”, or “our”) provides private transportation services in and around Barcelona. Your privacy is important to us, and we are committed to protecting your personal information in accordance with applicable data protection laws, including the GDPR.

2. Information We Collect

We collect the following information when you use our service:

• Personal details: Full name, email address, phone number.
• Booking information: Pickup & dropoff locations, date, time, luggage, passenger count.
• Payment information: Managed securely by Stripe. We do not store your card details.
• Technical data: IP address, device type, browser, cookies.

3. How We Use Your Data

Your information is used to:

• Process and manage your booking.
• Send confirmations, updates, and receipts.
• Improve our service quality and user experience.
• Ensure secure payments via Stripe.
• Comply with legal obligations.

4. Legal Basis

We process your data under the following legal bases:

• Performance of a contract (your booking).
• Your explicit consent (forms, cookies).
• Legitimate interest (improving service).
• Compliance with legal requirements.

5. Data Security

We use encryption, secure servers, and SSL protocols to protect your personal data. All payments are handled by Stripe, a PCI-certified payment processor. No card details are stored on our servers.

6. Data Retention

Booking and invoice data is retained for accounting obligations (typically 5–7 years). Marketing and communication data is stored only for as long as you allow.

7. Sharing Your Information

We only share your information with:

• Stripe (for secure payment processing).
• Drivers responsible for fulfilling your booking.
• Legal authorities when required.

8. Cookies

We use cookies to improve your experience, track performance, and secure login sessions. You can disable cookies in your browser settings at any time.

9. Your Rights (GDPR)

You have the right to:

• Access your personal data.
• Request correction or deletion.
• Restrict processing.
• Request data portability.
• Withdraw your consent at any time.

10. Contact Us

If you have any questions about this Privacy Policy, you can contact us at: