Privacy Policy

Company name: 2Transfer Solutions S.L.
Tax ID: ESB22676118
Registered address: Camino de Bahía Grande, 7, 11130 Chiclana de la Frontera, Cádiz, Spain
Email: [email protected]
Phone: +34 645 49 81 79
Website: www.2transfer.travel

We collect the following personal data depending on your relationship with us:

• Booking data: full name, email address, phone number, transfer date and time, pick-up and drop-off locations, number of passengers.
• Payment data: processed by Stripe (we do not store card data on our servers).
• Communications: content of messages sent through contact forms or email.

We process your data for the following purposes:

• Management and performance of the transfer contract (legal basis: performance of a contract, Art. 6.1.b GDPR).
• Invoicing and fiscal obligations (legal basis: legal obligation, Art. 6.1.c GDPR).
• Transactional communications — booking confirmations, changes, cancellations — (legal basis: performance of contract).
• Commercial communications about our services, with your prior consent (legal basis: consent, Art. 6.1.a GDPR). You may withdraw consent at any time.
• Request for feedback on the service (legal basis: legitimate interest in measuring and improving the quality of our service, Art. 6(1)(f) GDPR, and Art. 21.2 LSSI). After your transfer we send you a thank-you email and an invitation to rate it. Replying is voluntary and carries no incentive. You can unsubscribe from any of those emails with one click, or by writing to us, and we will not contact you for this purpose again.

We retain your data for as long as strictly necessary for the provision of the service and compliance with legal obligations:

• Booking and contract data: 5 years from the transfer date.
• Fiscal data: 5 years (tax regulations).
• Commercial communications data: until you withdraw consent.
• Feedback requests: until you object. If you unsubscribe, we keep only your email address on a suppression list to respect your choice.

Your data may be shared with the following third parties to provide the service correctly:

• Drivers and transport providers: only data necessary to execute the transfer.
• Stripe Inc.: payment processor, under their own privacy policies.
• Email provider (IONOS): sending confirmations and communications.
• Trustpilot A/S: reviews platform. It receives your name and email address to send you its invitation to rate the service and processes that data under its own privacy policy.

We do not sell, rent or disclose your personal data to third parties for their own commercial purposes.

Some of our providers (Stripe) may transfer data outside the European Economic Area. These transfers are carried out with appropriate safeguards: standard contractual clauses approved by the European Commission or equivalent certifications.

Trustpilot may also transfer data outside the EEA with the same safeguards (standard contractual clauses).

Under the GDPR, you have the following rights:

• Access: obtain confirmation of whether we process your data and receive a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure (right to be forgotten): request deletion of your data.
• Objection: object to processing based on legitimate interest or for direct marketing.
• Restriction: request restriction of processing.
• Portability: receive your data in a structured, machine-readable format.
• Withdrawal of consent: without affecting the lawfulness of prior processing.

To exercise any of these rights, send an email to [email protected] with the subject "GDPR Rights Request". We will respond within one month.

You may also lodge a complaint with the competent supervisory authority in your country of residence.

We apply appropriate technical and organisational measures to ensure the security of your personal data, including HTTPS/TLS encryption, restricted staff access and delegation of payment processing to Stripe (PCI-DSS certified).

We use first-party and third-party cookies. For more information, please see our Cookie Policy.

If you write to us on WhatsApp, an automated assistant helps you book, check or cancel a transfer. You can ask to speak to a person at any time.

• Data processed: your phone number, the messages you send and the booking details you give us. Voice notes are transcribed to text on our own servers and the audio is not stored.
• Purpose and legal basis: handling your request and managing the booking (pre-contractual measures and performance of the contract) and improving the service (legitimate interest).
• Retention: conversations are deleted after 90 days. To improve the assistant we keep a copy from which your phone number, name, email address, booking references and the addresses you gave us are removed automatically. That copy is not linked to your number, although it may retain other details you wrote in your messages. You can object to this use by exercising your rights as described in section 7.
• Providers: Meta Platforms Ireland Ltd. (WhatsApp Business) transmits the messages, and artificial intelligence providers (OpenAI and Anthropic) process them to generate the replies. They may process data outside the European Economic Area under the safeguards described in section 6.

We may update this Privacy Policy as necessary. We will notify you of significant changes by email or via a prominent notice on the website. The date of the last update appears at the top of this document.