Version 1.2 · Effective: 6 August 2026
Elite Cabz Ltd (“we”, “us”, “our”) is a private hire operator licensed in Milton Keynes. This policy explains what personal data we collect when you use our apps (Elite Cabz and Elite Cabz Driver) or services, why we collect it, how we look after it, and the rights you have over it.
We are the data controller of the personal data described below for the purposes of the UK GDPR and the Data Protection Act 2018.
1. Who we are
Elite Cabz Ltd
Address: 12 Breedon Croft, Eaton Leys, Milton Keynes, England, MK17 9GQ
Company number: 16834001
Licensed private hire operator: PHO 032
Email for privacy questions: [email protected]
If you are not satisfied with our response to any concern, you can complain to the Information Commissioner’s Office (ico.org.uk · 0303 123 1113).
2. What we collect
When you sign up as a customer or driver
- Name, email, phone number, password (stored only as a one-way hash)
- Role (customer or driver)
- Date of birth, gender (drivers only, used for “female driver” preference matching)
- Profile photo
When drivers apply
- National Insurance number
- Home address
- Bank account name, sort code and account number (for weekly commission settlement only)
- Licensing and identity documents: proof of identity, proof of address, Driver Badge (MK Combined Licence), Vehicle Plate (PHV Licence), DVLA licence (front and back), DBS enhanced certificate, right-to-work proof (unless a UK or Irish passport is provided), vehicle V5C logbook, insurance certificate, and MOT certificate where applicable. Uploaded as a photo or PDF.
When you book a ride
- Pickup and drop-off addresses and coordinates
- Date and time of the booking
- Vehicle category, number of passengers, luggage details, flight or ferry number (airport bookings)
- Special requests (e.g. female driver)
- Fare quoted and paid
During and after a ride
- Driver’s live location while on duty, including in the background while the driver is online, so we can show the car en route to the customer and verify the trip
- Trip route, distance and duration
- A record of the driver’s actions on your booking — when they accepted it, opened navigation, arrived, messaged or called you, waited, set off and finished, each with the time it happened. We keep this so that if there is a dispute about whether a car turned up, we can check rather than guess.
- How long the driver waited at your pick-up point and at any additional stops, and whether any of that time was chargeable
- Ratings and feedback that customer and driver leave for each other
- Driver field reports relating to roadworks or hotspots in the area
Technical and device information
- Approximate and precise device location (when you give permission)
- Push notification token (so we can send you booking updates)
- Device model, operating system version, app version
- Basic crash and error logs to keep the app stable
We do not collect or store your full payment card details. When in-app payments are introduced in future, card details go directly to our payment processor and are never seen or stored by us.
3. How and why we use your data
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Provide the booking service (matching, fare quoting, dispatching, tracking) | Contract |
| Verify driver identity, right to work, vehicle eligibility, insurance | Legal obligation (private hire licensing rules) |
| Show your live driver’s position en route to you | Contract |
| Send transactional notifications (booking received, driver assigned, en route, completed) | Contract |
| Calculate weekly commission settlements with drivers | Contract |
| Calculate waiting time and any waiting charge that applies | Contract |
| Keep a record of what happened on a booking so complaints can be settled fairly | Legitimate interest |
| Investigate safety incidents, complaints, or fraud | Legitimate interest |
| Improve the service, anonymise data for analytics | Legitimate interest |
| Send service-related announcements (no marketing without your separate opt-in) | Legitimate interest |
| Comply with court orders, licensing authority requests, tax or accounting law | Legal obligation |
4. Who we share data with
We only share what is necessary for the service to work:
- Drivers and customers see each other’s relevant details during an active or upcoming booking: the customer sees the driver’s first name, vehicle, photo and rating; the driver sees the customer’s first name, pickup point and phone (where shared).
- Calls and text messages go directly between you and your driver, from their own phone. When a driver texts or rings you about your booking, it comes from the driver’s own mobile number rather than an Elite Cabz number, and your number is shown on their handset. That means your driver can see your number and you can see theirs, and neither the message content nor the call passes through our systems — we only record that a message was prepared or a call was placed, and when. Your mobile network handles the message itself under its own terms.
- Hosting and infrastructure: Supabase Inc. (servers in London, UK)
- Push notification relay: Expo and Google Firebase Cloud Messaging
- Crash and error reporting: Sentry
- Mapping and routing: OpenStreetMap (tiles), Nominatim (address search), OSRM (routing), which receive only the coordinates needed to draw your map and route
- Payment processor (when in-app card payments are introduced): planned to be Stripe Payments Europe Ltd.
- Licensing authority (Milton Keynes Council) where required for compliance audits or on lawful request
- Law enforcement where we are legally required to disclose
We do not sell your data to advertisers or data brokers, and we do not run in-app advertising.
International transfers
Some service providers (Expo, Firebase, Sentry) may process data outside the UK. Where they do, transfers are protected by EU Standard Contractual Clauses or the UK International Data Transfer Agreement.
5. How long we keep it
| Data | Retention |
|---|---|
| Active customer account | While your account is open |
| Booking records (route, fare, parties) | 7 years after completion (HMRC / accounting requirement) |
| Driver application and licensing documents | While you drive with us, then 7 years for audit |
| Ratings and complaints | 7 years (safety / regulatory record) |
| Live location coordinates broadcast during a ride | 30 days after the ride, then deleted |
| Record of driver actions on a booking (times of accepting, arriving, waiting, setting off, finishing) | Kept with the booking record |
| Crash logs | 90 days |
If you close your account we delete personal information immediately, except for the booking-record fields we are required to retain (above).
6. How we keep it safe
- All connections between the apps, our servers and our service providers use HTTPS (TLS).
- Your password is stored only as a one-way hash — even we cannot read it.
- Database access is locked down with row-level security: each user can only access their own bookings, profile and documents.
- Driver documents sit in a private storage bucket — only the owner driver and authorised admins can access them.
- We use industry-grade authentication with signed session tokens.
- We never store full payment card numbers.
7. Your rights
Under UK GDPR you have the right to access, rectify, erase (“right to be forgotten”), restrict, port, and object to our processing, and to withdraw consent at any time (for example, location permission).
Deleting your account and data
To request deletion of your account and associated personal data, email [email protected] from the address on your account, or write to the postal address below, and tell us you want your account deleted. We will delete your personal data within 30 days, except for the booking, settlement and licensing records we are legally required to retain (see section 5), which are deleted at the end of their retention period. You can also request deletion of specific data without closing your account.
You can also complain to the Information Commissioner’s Office (ico.org.uk · 0303 123 1113).
8. Children
Elite Cabz is not intended for use by children under 16. If you believe a child under 16 has created an account, please contact us and we will close it.
9. Cookies and similar technology
Our apps use a small number of local-storage tokens to keep you signed in. These do not track you across other apps or websites. Our website uses only essential cookies and a privacy-respecting analytics tool to count visits.
10. Changes to this policy
We may update this policy from time to time. We will tell you about significant changes by email and via an in-app notice. The version number and effective date at the top show when this policy was last changed.
11. Contacting us
For any privacy question, complaint or rights request:
- Email: [email protected]
- Post: Elite Cabz Ltd, 12 Breedon Croft, Eaton Leys, Milton Keynes, England, MK17 9GQ