Driveller · Legal
Privacy Policy
Effective date: 16 November 2026
This Privacy Policy explains how J&O Business Cars SRL, trading as Driveller, processes personal data when a person visits driveller.com, requests or manages a booking, travels as a passenger, contacts Driveller or represents a business customer.
1. Data controller
J&O Business Cars SRL is the controller for the processing described in this Policy.
Registered office: Emiel Vanderveldestraat 99, 2830 Willebroek, Belgium
Company and VAT number: BE 0700.684.448
Email for privacy requests: info@driveller.com
Telephone: +32 470 18 39 65 and +32 483 04 35 46
Driveller has not identified a mandatory requirement to appoint a data protection officer for the activities described here. Privacy questions and requests may be sent to the email address above.
2. Personal data we process
Identity and contact data: name, email address, telephone number, company, billing details and contact preferences.
Booking and journey data: pickup and drop-off addresses, date and time, passenger and luggage numbers, vehicle category, price, booking reference, status, requested stops, flight number and operational notes.
Passenger and assistance data: names or contact details when needed for pickup, child-seat information, accessibility or mobility requirements, and pet requests.
Payment and invoice data: payment method, payment status, transaction reference and invoice information. Complete card data is processed by the payment provider and is not intended to be stored by Driveller.
Communications: emails, contact-form messages, complaints, change requests, call notes and customer-service correspondence.
My Booking security data: booking email, one-time code issue and verification logs, login time, IP address and security events.
Website and device data: IP address, browser and device information, pages viewed, referring URL, timestamps, error logs and cookie choices.
Business relationship data: employer or organisation, role, billing contact, contract and account information for corporate customers and prospects.
Please do not provide medical diagnoses or other sensitive information unless it is necessary to arrange the journey. Where an accessibility request reveals health data, Driveller will process only the minimum information needed and will rely on explicit consent where required, or another applicable condition under Article 9 of the GDPR. Consent may be withdrawn, but this may affect Driveller’s ability to provide the requested arrangement if the information is necessary.
3. Sources of data
Driveller receives data directly from the customer or passenger, from a person booking on someone else’s behalf, from the customer’s employer or travel organiser, from a partner chauffeur or performing carrier, from payment and communications providers, and from public or commercial sources used to verify addresses, flight status or business information.
4. Purposes and legal bases
| Purpose | Data and legal basis |
|---|---|
| Quote, booking and journey | Booking, contact, journey and payment-status data. Necessary to take steps at the customer’s request and perform the transport contract. |
| Dispatch and subcontractors | Relevant passenger, contact and journey data. Contract performance; legitimate interests in safe and efficient dispatch. |
| Payment and accounting | Payment, invoice and contract data. Contract performance and legal obligations relating to tax and accounting. |
| My Booking and security | Reference, email, OTP, IP and logs. Contract performance and legitimate interests in authentication, fraud prevention and service security. |
| Customer service and disputes | Communications, booking and evidence. Contract performance and legitimate interests in resolving issues and establishing, exercising or defending legal claims. |
| Website operation | Technical logs and strictly necessary cookies. Legitimate interests in providing and securing the website; communications law exception for strictly necessary storage/access. |
| Analytics or marketing | Cookie identifiers, usage or campaign data. Consent, where these tools are activated. |
| Business development | Professional contact data. Legitimate interests in relevant B2B communications, subject to e-privacy and objection rights; consent where required. |
| Legal compliance and safety | Information reasonably required by law, regulators, courts, police or insurers. Legal obligation, legitimate interests, or protection of vital interests as applicable. |
Driveller does not use personal data to make a decision based solely on automated processing that produces legal or similarly significant effects. The booking interface may calculate a price automatically, but a contract is formed only after Driveller confirms the booking.
5. Sharing personal data
Driveller shares only the data reasonably necessary for the relevant purpose with:
selected partner chauffeurs and transport companies performing or supporting the journey;
Stripe Payments Europe, Limited (Dublin, Ireland) for secure payment processing;
Hostinger International Limited (website hosting) and other IT, website, security and support providers;
Hostinger International Limited (email hosting and sending) and communications providers used to send confirmations, one-time codes and service messages;
Google Maps or Google Places for address suggestions and mapping, and flight-information providers where used;
accountants, auditors, legal advisers, insurers and debt-recovery professionals where necessary;
business customers, travel organisers or the person who made the booking, to the extent needed to manage the booking; and
courts, regulators, police, tax authorities or other public bodies where disclosure is legally required or necessary to protect rights and safety.
Partner chauffeurs and transport companies may act as processors for dispatch information or as separate controllers for legal obligations arising from their own transport activity. Driveller requires appropriate data-protection and confidentiality commitments in its partner arrangements.
6. International transfers
A journey, customer or service provider may be located outside the European Economic Area. Where personal data are transferred to a country without an adequacy decision, Driveller will use an appropriate safeguard such as the European Commission’s Standard Contractual Clauses and, where necessary, supplementary measures. Information may also be transferred where this is necessary for the performance of the customer’s contract or requested journey, subject to the conditions of the GDPR.
Some technology providers, including Google, may process data outside the EEA. Their transfer mechanism and privacy information are available from the relevant provider and in the cookie preference centre.
7. Retention periods
| Data | Normal retention period |
|---|---|
| Confirmed bookings, contracts and invoices | Core contract and accounting records: 10 years after the relevant taxable or accounting period, or longer where required for a legal claim or audit. |
| Operational dispatch details | Normally 12 months after completion, unless needed for a complaint, safety incident or legal claim. |
| Unconfirmed quote or booking request | 12 months after the last interaction. |
| Customer-service enquiries | 24 months after closure, unless linked to a booking or dispute requiring longer retention. |
| Complaints and legal claims | Until final resolution and expiry of the applicable limitation period. |
| My Booking one-time-code and security logs | Normally 90 days, unless needed to investigate suspected misuse or a security incident. |
| Website security logs | Normally 12 months. |
| Cookie consent record | Up to 5 years, or a shorter period if consent is renewed or withdrawn earlier. |
| Marketing data | Until consent is withdrawn or, for inactive contacts, normally no more than 24 months after the last meaningful interaction. |
| B2B prospect data | Normally 3 years after the last relevant business interaction, subject to an earlier objection. |
Driveller may retain limited information for longer where necessary to comply with law, demonstrate compliance, establish or defend a legal claim, or enforce a contract. Data that is no longer needed will be deleted or irreversibly anonymised.
8. Rights
Subject to the conditions and exceptions in the GDPR, a person may request access to personal data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Consent may be withdrawn at any time without affecting prior lawful processing. A person also has the right not to be subject to certain solely automated decisions, although Driveller does not use such decision-making as described above.
A request may be sent to info@driveller.com. Driveller may ask for information necessary to verify identity and will respond within the period required by law. Rights are not absolute; for example, data may need to be retained for tax obligations or legal claims.
A person may lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, Belgium, through https://www.dataprotectionauthority.be, or with another competent EEA supervisory authority. Driveller encourages the person to contact it first so the concern can be addressed directly.
9. Security
Driveller uses reasonable technical and organisational measures appropriate to the risk, including access controls, authentication for My Booking, secure payment links, provider management, backups and incident handling. No internet service is completely risk-free. Customers should protect booking references and one-time codes and should not forward them to unauthorised persons.
10. Children
The website and booking service are intended for adults. A responsible adult should make a booking involving a child. Driveller processes a child’s information only to the extent reasonably necessary to provide the booked journey and required safety equipment.
11. Changes to this Policy
Driveller may update this Policy to reflect changes in its services, providers or legal obligations. The updated version will be published with a new effective date. Material changes will be communicated by an appropriate method where required.
Questions? Contact us at info@driveller.com.