Courtesy translation. The French version is authoritative.
This policy explains what data we collect when you use limoyes.com and book.limoyes.com, book a private chauffeur or contact us, why we use it, and what your rights are.
1. Data controller
TOPCHAUFFEUR, SAS, 4 rue du Bois Charlet, 91320 Wissous, France, RCS Évry 902 836 501, operator of the Limoyes brand.
For any question about your data: info@limoyes.com.
We have not appointed a data protection officer. Your requests are handled directly by our team.
2. Data we collect, purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Booking and performing your ride | First and last name, email, mobile number; pickup and drop‑off addresses, date and time; flight number; number of passengers, luggage, child seats; vehicle, price; notes for the driver | Performance of a contract | Operational data (flight, notes, detailed addresses): 12 months after the ride. Contract data: see “Accounting” and “Evidence” |
| Sending service emails (confirmation, changes, receipt) | Email, booking details | Performance of a contract | Duration of the booking, then archived as above |
| Managing your customer account | Email, name, phone, language, password (stored with irreversible encryption: we cannot see it), booking history, last login date; temporary login and verification codes | Performance of a contract | Until you delete the account, or after 3 years of inactivity (with a prior warning email). Codes: until they expire |
| Answering your messages (email, WhatsApp) | Contact details, profile name, message content | Pre‑contractual steps or contract; otherwise our legitimate interest in replying | 3 years after the last exchange |
| Accounting and legal obligations | Invoices, receipts, payments, billing details | Legal obligation | 10 years (Article L123-22 of the French Commercial Code) |
| Evidence and dispute handling | Contract, confirmation, relevant correspondence | Legitimate interest (defending our rights) | 5 years after the ride |
| Website security and abuse prevention | IP address, browser, pages requested, date and time, login attempts | Legitimate interest (security) | 12 months maximum |
| Offers and news (only if you agree) | Email, language | Consent; for our customers, legitimate interest for similar services, with an opt‑out in every message | 3 years after the last contact or until you unsubscribe |
| Address suggestions and map | Text typed in the address field, IP address; pickup and drop‑off points | Legitimate interest (providing the service you requested) | Not kept by us beyond the booking |
Mandatory fields are marked in our forms. Without them, we cannot complete the booking.
We make no automated decisions about you and do no profiling. Prices are calculated automatically from the route, duration and vehicle, never from your profile.
3. Recipients
Your data is only available to those who need it:
- our authorised staff;
- the partner driver and company performing your ride, limited to the data they need (name, phone, places and times, flight, passengers, luggage, notes);
- Hostinger International Ltd (Cyprus), which hosts the website, the database and our email, as our processor;
- Stripe Payments Europe, Limited (Ireland), our payment provider for online payments: card details are entered in Stripe’s secure form and never reach us;
- komoot GmbH (Germany), for the Photon address suggestion service: the text you type and your IP address are sent to it directly by your browser while you type;
- OpenFreeMap, when the interactive map is displayed: your browser downloads the map tiles, which transmits your IP address;
- the OSRM route calculation service, which only receives geographic coordinates, never your name or contact details;
- WhatsApp Ireland Limited (Meta group), if you choose to message us on WhatsApp;
- our accountant and advisers;
- the authorities, where the law requires it, for example at a roadside check where the driver must show service documents.
We never sell or rent your data.
4. Transfers outside the European Union
Our providers process your data in the European Union. If you contact us via WhatsApp, the Meta group may transfer data to the United States under the European Commission’s adequacy decision on the EU‑US Data Privacy Framework or under standard contractual clauses.
External links, such as a link opening the meeting point in Google Maps, take you away from our website: the privacy policy of that service then applies.
5. Security
Encrypted connections (HTTPS), irreversibly encrypted passwords, secure session cookies, limits on login attempts, access restricted to authorised staff and regular backups.
6. Your rights
You can ask at any time to access, rectify or erase your data, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interest or to marketing. Where processing is based on your consent, you can withdraw it at any time. You can also leave instructions on what should happen to your data after your death.
Email us at info@limoyes.com. We reply within one month. If we have reasonable doubts, we may ask you to prove your identity.
You can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 · www.cnil.fr), or with the data protection authority of your country of residence, for example the Garante per la protezione dei dati personali in Italy.
7. Children
Our services are intended for adults. For child passengers, we only collect the number of children and the seats they need.
8. Cookies
We only use strictly necessary cookies and local storage, with no advertising or analytics cookies. Details in our cookie policy.
Audience measurement. To know how many people visit the site, which pages they read and how many bookings succeed, we use our own tool, hosted on our servers, with no cookies and no third‑party services. We do not store your IP address: we use it only for a moment, shortened, to derive your country. To count visits we compute an anonymous code that changes every day and cannot be linked back to you. Detailed data is deleted after 35 days; only daily totals are kept for 13 months. Legal basis: our legitimate interest in measuring and improving the service (a consent‑exempt tool under the CNIL guidelines). If your browser sends the Global Privacy Control signal, we record nothing.
9. Changes
We may update this policy. The date of the last update is shown at the top. We will let you know about any significant change.