Privacy Policy

Platinumride is a brand of Crystal Ventures AG, Landsgemeindeplatz 6, 9043 Trogen, Switzerland ("Platinumride", "we", "us"). Crystal Ventures AG is the controller responsible for the personal data described in this policy. Our privacy contact handles all privacy questions and requests: info@platinumride.com or WhatsApp +971 55 413 2881.

• Booking and inquiry details: name, phone or WhatsApp number, email address, route, dates and times, pick-up and drop-off addresses, number of passengers, luggage, children's ages, flight numbers and any notes.
• Identity documents: a copy of the lead passenger's passport or ID, only where we ask for it to confirm a booking or where border rules require it.
• Payment information: the amount, date and status of your payment. Card payments are processed by Stripe. We never see or store your full card number.
• Contact form and partner programme details: name, email, phone number, location and your message.
• Website usage data: pages visited, device and browser type, approximate location (country or city), referring website and clicks on contact buttons, collected through Google Analytics and our hosting provider's logs.

We collect this data from you, from the person booking on your behalf, or automatically on our website. Without the details a journey needs, we may not be able to accept your booking.

• To answer your inquiry and send you a quote.
• To arrange and carry out your journey, including sharing the necessary details with the drivers and partner operators involved.
• To take payment, issue invoices and handle refunds.
• To contact you about your booking, before and during the trip.
• To run our partner programme.
• To understand how the website is used and improve it.
• To meet legal, tax and accounting obligations.

We only use your data for these purposes. We do not sell your personal data, and we do not use it for decisions made solely by automated means that have legal or similarly significant effects on you.

We rely on: performing a contract with you or taking steps at your request before one (quotes, bookings, payments, trip contact, sharing details with drivers); compliance with legal obligations (tax, accounting, border rules); our legitimate interest in running, securing and improving our service, where the law allows; and your consent where the law requires it (for example analytics cookies, certain transfers abroad, children's details). You can withdraw consent at any time, without affecting earlier processing.

• Drivers and licensed partner operators who carry out your journey, only the details they need.
• Stripe, for card payments.
• WhatsApp (Meta), when you contact us through WhatsApp.
• Our email, hosting and database providers (Resend, Supabase and Lovable), which run the website, forms and email notifications on our behalf.
• Google, for website analytics.
• Our accountants and professional advisers, where needed.
• Authorities, including border and immigration authorities, where the law requires it.

Service providers act on our instructions and must keep your data confidential and secure.

Your data may be transferred to or accessed from these countries:

• Switzerland, where we are based.
• The United Arab Emirates, Saudi Arabia, Oman, Qatar, Bahrain and Kuwait, where our drivers and partner operators work, depending on your route.
• The European Union and European Economic Area, and the United States, where our technology providers (Stripe, Meta, Google, Resend, Supabase and Lovable) process data.

Safeguards:

• Transfers to drivers and partner operators in the Gulf are necessary to perform your booking contract.
• Transfers to the EU and EEA go to countries recognised as offering adequate protection under Swiss law.
• Transfers to the United States rely on the Swiss-U.S. Data Privacy Framework where the provider is certified, or on standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner.
• Where a local law requires your consent for a transfer abroad (for example in Oman), we ask for it when you book.

You can ask us for details of these safeguards.

• Booking records and invoices: as long as needed for the booking and then for the period required by accounting and tax law (in Switzerland, up to 10 years).
• Inquiries that do not lead to a booking: up to 24 months, then deleted.
• Passport or ID copies: deleted once the journey is completed, unless we need them to resolve a dispute.
• Analytics data: according to our Google Analytics retention settings.

When data is no longer needed, we delete or anonymise it.

We treat passport and ID copies and children's details with extra care: we only ask for them when a booking needs them, limit who can see them and keep them only as set out above. Bookings must be made by an adult. We only process children's details (such as age, for child seats) when a parent or guardian gives them to us for a booking and agrees to it.

We use Google Analytics to measure visits and contact button clicks. It sets cookies in your browser. Where the law requires, we only set these cookies with your consent. You can block or delete cookies in your browser settings, or use Google's opt-out browser add-on. The website works without analytics cookies.

Depending on where you live, you can ask to be told how we use your data, access a copy of it, correct it, delete it, restrict or object to its use, receive it in a common electronic format or have it sent to another provider, and withdraw consent at any time.

To do so, write to info@platinumride.com or message us on WhatsApp +971 55 413 2881. We may ask you to confirm your identity. Requests are free. We will reply within 10 working days. If a request is complex, we will tell you within that time why we need longer, where the law allows.

Please contact us first if you are unhappy. You can also complain to the data protection authority where you live:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC).
• Saudi Arabia: Saudi Data and AI Authority (SDAIA).
• United Arab Emirates: UAE Data Office.
• Qatar: National Cyber Security Agency (NCSA), Personal Data Privacy Protection Department.
• Bahrain: Personal Data Protection Authority (PDPA).
• Oman: Ministry of Transport, Communications and Information Technology (MTCIT).
• Kuwait: Communications and Information Technology Regulatory Authority (CITRA).

We use reputable providers, encrypted connections (HTTPS), access controls and limited access to protect your data. No system is completely secure, so please do not send us more information than a booking needs.

If a data breach is likely to put your rights at risk, we will notify the relevant data protection authority within the time the law requires (in several countries within 72 hours) and inform you without undue delay where required.

We may update this policy. The current version is always published on this page with its date. Important changes will be clearly marked.