Privacy Policy

1. Who We Are

Gosabil is a private hire transport service operating in London. We are the data controller responsible for your personal data.

2. Information We Collect

Personal data you provide

• Full name
• Email address
• Phone number
• Pickup and drop-off addresses
• Flight details (for airport transfers)
• Special requirements or preferences

Automatically collected data

When you visit our website, the following may be collected (only with your consent where required):

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on our website
• Referring website

Cookies and local storage

We use browser local storage to remember your cookie consent preferences, newsletter signup status, and booking form progress. No personal data such as your email address is stored in local storage. See Section 8 below for full details.

3. How and Why We Use Your Data

Under UK GDPR, we must have a lawful basis for processing your personal data. The table below sets out each purpose and the corresponding legal basis.

Where we rely on consent, you can withdraw it at any time by contacting us or, for marketing emails, by clicking the unsubscribe link in any email. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

4. Who We Share Your Data With

We share your personal data only with the following third-party processors, each of whom processes data on our behalf under a data processing agreement:

• Stripe, Inc. (US) — payment processing
• Resend, Inc. (US) — email delivery (booking confirmations, marketing)
• Google LLC (US) — maps, address autocomplete, and route calculation
• Chatwoot — live chat support
• Vercel, Inc. (US) — website hosting and analytics

We may also share data with legal authorities when required by law or to protect our rights. We do not sell your personal data to any third party.

5. International Data Transfers

Some of our processors are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office and/or reliance on UK adequacy decisions. You can request a copy of the relevant safeguards by contacting us.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment data is processed by Stripe and is never stored on our servers. Our website uses HTTPS encryption for all data in transit. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Cookies and Local Storage

We use browser local storage and cookies to operate our website. You can manage your preferences using our cookie consent banner, which appears on your first visit.

9. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights:

• Right of access (Art 15) — request a copy of your personal data
• Right to rectification (Art 16) — request correction of inaccurate data
• Right to erasure (Art 17) — request deletion of your data ("right to be forgotten")
• Right to restrict processing (Art 18) — request that we limit how we use your data
• Right to data portability (Art 20) — receive your data in a structured, machine-readable format
• Right to object (Art 21) — object to processing based on legitimate interests
• Rights related to automated decision-making (Art 22) — see Section 11 below

To exercise any of these rights, please contact us at bookings@gosabil.co.uk. We will respond within one month of receiving your request. In complex cases, we may extend this by a further two months, and we will inform you if this is necessary.

10. Right to Complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. Our fare calculations are based solely on distance, vehicle type, time of day, and applicable surcharges — no personal profiling is involved.

12. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. For significant changes, we will notify you by email where possible. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, please contact us: