Privacy Policy and Cookie Policy
1. Scope
At Chauffeur d'Excellence, we take the protection of your personal data seriously and process it in accordance with applicable data protection rules to preserve your privacy. This privacy policy, whether you are a customer or simply a visitor to the website, gives you more information about the data processed by Chauffeur d'Excellence and the purposes for which it is used.
2. Name and contact details of the data controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Best Trip Ever - Chauffeur d'Excellence
Registered office: 3 Avenue Emile Zola, 92100 Boulogne Billancourt, France.
Email: [email protected]
3. Contact details of the Data Protection Officer (DPO)
Our Data Protection Officer is: Mankai Wajdi, 3 Avenue Emile Zola, 92100 Boulogne Billancourt, France. You can contact our DPO confidentially by post at the address above, or by email: [email protected]
4. Data security
The transfer of personal data between your device and our servers is encrypted (TLS). Our passwords, authentication tokens and two-factor authentication secrets are encrypted and never exposed in our technical responses.
5. Data we collect
We collect the following data, depending on how you use the service:
- Account: first name, last name, gender, email, phone number, password (encrypted), preferred language; if you sign in with Google or Apple: the identifier provided by that service, your name, email, and profile picture.
- Booking: pickup and destination addresses and GPS coordinates, flight or train number, trip notes, passenger details if the booking is made on behalf of someone else (name, phone, email).
- Billing (business customers): company name, address, postal code, city, country.
- Payment: card brand, last 4 digits, expiry date (the full card number is never received or stored by our servers, see section 8).
- Technical: IP address, user agent (browser/device type and version), connection timestamps — used for security, fraud prevention, and session functioning.
6. Cookies and similar storage technologies
We use cookies, as well as your browser's local storage (localStorage/sessionStorage), that are strictly necessary for the service to work, and one optional cookie related to the anti-bot protection on our forms (see table below). We do not use any audience-measurement, advertising, or social media cookies. We measure traffic and loading speed with Cloudflare Web Analytics, a tool that uses no cookies and does not identify you (see section 7).
| Cookie | Purpose | Duration | Consent |
|---|---|---|---|
| Session cookie | Keeps you signed in to your account | 120 minutes of inactivity | Not required (strictly necessary) |
| XSRF-TOKEN | Protection against request-forgery attacks | Duration of the session | Not required (strictly necessary) |
| cookie-consent | Remembers your cookie preference choice | 365 days | Not required (necessary to honor your choice) |
| Display language | Remembers your chosen language | ~1 year | Not required (functional) |
| Google reCAPTCHA cookie | Detects bots on our sign-in/sign-up forms | Up to 6 months | Required — can be switched on/off in our preferences |
| Stripe anti-fraud cookies | Prevents payment fraud when you pay for your ride | Up to 1 year | Not required (necessary to carry out the payment you requested) |
We also store, in your browser's local storage, a draft of your current booking (addresses, dates) so it isn't lost if the page is refreshed — this data stays on your device and is never sent to a third party.
You can change your choice at any time via the "Cookie preferences" link in the footer, or delete cookies directly in your browser settings.
7. Our processors and partners
We use the following providers to deliver our service:
- Cloudflare (content delivery network, website security and cookieless traffic statistics) — Cloudflare Inc., United States. All traffic to our website passes through Cloudflare, which receives your IP address, the pages you request and technical information about your browser, in order to deliver the site, protect it against attacks and produce aggregated statistics on traffic and loading speed (Cloudflare Web Analytics). Cloudflare Web Analytics uses no cookies and no fingerprinting, and does not track you across websites. Legal basis: our legitimate interest in securing our website and measuring its traffic and performance (Article 6(1)(f) GDPR). More information: https://www.cloudflare.com/privacypolicy/
- Stripe (payment and payment-fraud prevention) — Stripe Inc., United States. Receives: card details (processed directly by Stripe, never by our servers), amounts, email, name, booking identifier. More information: https://stripe.com/privacy
- Google reCAPTCHA (anti-bot protection) — Google LLC, United States. Receives: a behavioral score and your IP address, if you have enabled this option in your cookie preferences.
- Google Maps Platform (address search, route calculation, map) — Google LLC. Receives: the address you searched for and your trip's GPS coordinates, via our servers (your browser never contacts Google directly for this feature).
- Google and Apple (sign-in with your Google/Apple account, if you choose this option) — receive your email and name so we can create/authenticate your account.
- Twilio / WhatsApp (sending the trip assignment document to the driver) — Twilio Inc., United States. Receives: your phone number and a secure, temporary link to your trip document.
- AeroDataBox (via RapidAPI) (flight status tracking for airport pickups) — receives the flight number entered in your booking.
8. Payment and fraud prevention
Payment for your rides is processed by Stripe, a PCI DSS certified provider. Your card details are entered directly into a secure form provided by Stripe and never pass through our servers — we only keep the card brand and its last 4 digits, for display in your history. Stripe may use fraud-detection mechanisms (e.g. anti-fraud cookies) necessary to secure the transaction you request. Legal basis: performance of the contract (Article 6(1)(b) GDPR) and legitimate interest in fraud prevention (Article 6(1)(f) GDPR).
9. Communicating with Chauffeur d'Excellence
If you contact us (email, phone), the data you provide is processed in order to handle your request. Legal basis: performance of the contract or pre-contractual measures (Article 6(1)(b) GDPR) and, where applicable, your consent (Article 6(1)(a) GDPR).
10. International data transfers
Four of our processors are based in the United States: Cloudflare (content delivery, security and statistics), Stripe (payment), Google (reCAPTCHA, Maps, sign-in) and Twilio (WhatsApp delivery). All four providers offer, by default to all their customers, safeguards for these transfers through the European Commission's Standard Contractual Clauses — the transfer mechanism recognized under Article 46 GDPR. These commitments are publicly published in their respective data processing terms ("Data Processing Addendum"/"Privacy" pages on cloudflare.com, stripe.com, google.com and twilio.com).
Our flight-tracking provider, AeroDataBox (via RapidAPI), does not receive any personal data — only the technical flight number — and is therefore not concerned by a transfer of personal data.
11. Retention period
Your account is kept for as long as it remains active. We do not currently carry out automatic deletion in the event of prolonged inactivity; you may request deletion of your account at any time (see your rights, section 12). Since every booking is systematically linked to an invoice, your booking history and invoices are kept for 10 years, in line with our legal obligation to retain accounting records (Article L123-22 of the French Commercial Code). Your login session expires after 120 minutes of inactivity, and our technical logs (connections, actions, pricing) are kept for 30 days and then automatically deleted.
12. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data, as well as the right to withdraw your consent at any time (in particular for reCAPTCHA, via our cookie preferences) without affecting the lawfulness of processing carried out before such withdrawal. You can exercise these rights by contacting us at [email protected]. You also have the right to lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
13. Automated decision-making
Chauffeur d'Excellence does not make any decision producing legal effects concerning you based solely on automated processing.
14. Changes to this policy
We may amend this policy from time to time, in particular to reflect changes to our services or to applicable regulations. The date of the last update appears at the bottom of this page.