Privacy policy
Whatweholdaboutyou,andwhy
Discretion is one of our values, so it is worth writing down what it means in practice rather than asserting it. This describes what the booking system actually does.
What we collect
Only what a trip needs
Everything below comes from a form you filled in. There is no hidden collection behind it.
- Name, phone number and email address
- So a chauffeur can reach you at the kerb and we can contact you about the trip. The phone number is also the second factor when you look a booking up — a reference alone will not open it.
- Pickup and drop-off addresses
- Including any stops, and the airport and flight details on an airport transfer. These reach the chauffeur driving you and the staff arranging the trip.
- Trip details
- Date, time, passengers, bags, child seats, vehicle class, what the trip is for, and anything you write in the notes.
- Company name, on a corporate enquiry
- Only when you provide it. It is optional on every form.
- A review, if you choose to leave one
- Your rating, what you write, and the name you want shown (or your first name and last initial if you leave it blank). It is tied to your booking so only a real customer can review, and it is published only after a member of our team approves it.
- Payment details
- Whether you chose to pay by card or cash on delivery, and whether the trip has been paid. Card details are entered on Stripe's page and never reach our systems. We keep only Stripe's reference for the payment, so we can find it if you ask.
What we do not do
The absences matter as much as the list
- We do not sell your details, and we do not share them with anyone for their own marketing.
- We do not add you to a mailing list because you booked a car. Marketing email, if we ever send it, is opt-in and separate.
- We do not build a profile of you across other websites, and we run no advertising trackers.
- We do not ask for anything we have no use for. There is no date of birth field and no identity document upload.
How we protect it
Encrypted in transit, restricted at rest
Security is a practice, not a promise, so this describes what actually runs rather than a general assurance.
Every connection is encrypted
The site, the booking form and the reservations dashboard are only ever served over HTTPS. A browser that tries plain HTTP is redirected before any data leaves it.
Passwords are never stored in the clear
A staff member's password is one-way hashed before it touches the database. Nobody on our team, including us, can read it back.
The database is not reachable from the internet
It sits behind the reservations API on a private connection, with no public address of its own, and only that API can query it.
Access is by named staff account
Every login is tied to one person, expires automatically, and every change to a booking is recorded against whoever made it.
Who else sees it
Three services, and what each one gets
This is the complete list. If it ever grows, this page changes on the same day.
Google Places
Address autocomplete in the booking form.
What you type into an address box is sent to Google to return suggestions. It is proxied through our own server, so Google does not receive your IP address or a cookie from this site. Nothing else on the form is sent.
Google, if you choose to review us there
An optional review on Google.
After you send a review to us we may offer a link to Google's own review form. Following it takes you to Google, where its terms and privacy policy apply. We send Google nothing about you or your booking.
Stripe
Taking card payment, if you choose to pay by card.
You pay on Stripe's own page, so card details go directly to Stripe and never touch our servers. We send Stripe your email address, the amount, the vehicle and your booking reference — not your addresses. Stripe's privacy policy applies to what you enter there.
Our hosting provider
Running the website and the database.
The site, the database and the backups sit on servers we rent. Nobody else has access to them.
How long we keep it
Until the record stops being needed
| What | How long | Why |
|---|---|---|
| Bookings and quote requests | Seven years | They are financial records, and tax rules require them to be kept. |
| Notes you write on a booking | With the booking | They are part of the record of what was arranged. |
| Reviews | With the booking | A review belongs to the trip it describes. A published review can be removed if you ask us to. |
| Staff sign-in sessions | Cleared on expiry | Expired sessions are deleted automatically every hour. |
Cookies
None that follow you
The public site sets no tracking or advertising cookies. The only cookie in the system is the one that keeps a member of staff signed in to the reservations dashboard, which is a different site you will never see. If we ever add analytics here, it will only run once you have said yes on the cookie banner — your choice is remembered in your browser, not sent to us, and you can change it any time from Cookie Preferences in the footer.
Your rights
What you can ask us to do
- Ask what we hold about you, and get a copy.
- Have anything inaccurate corrected.
- Have your details deleted, except where a financial record must be kept.
- Object to how we use your details, or ask us to restrict it.
Ask by phone or by email and we will action it. We do not require a form.
Any question about your details, put to a person.
Write to support@rsskylerlimo.com. If you would rather read what you are agreeing to when you book, that is in the terms and conditions.
Last updated 24 September 2026. This policy describes the system as it is built today.