This privacy notice explains how Easy MiniCab Ltd (“we”, “us”) collects, uses and protects the personal data of our passengers, account customers, drivers and applicants. It is published in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Easy MiniCab Ltd, [registered office address], company number [PLACEHOLDER]. ICO registration number: [ZB-PLACEHOLDER].
What we collect
- Account data: name, mobile number, email address, password (hashed).
- Booking data: pickup and dropoff addresses, date/time of trips, fare, payment method, vehicle assigned, driver assigned.
- Location data: live GPS while a trip is active (passenger app and driver app).
- Payment data: handled by our payment processor (Stripe / Cordic-integrated). We do not store card numbers.
- Communications: in-app chat, recorded phone calls (with notice on every call), email correspondence.
- Driver/applicant data: PHV badge details, DBS reference number, vehicle details, insurance, MOT, training records.
Why we use it (lawful bases)
- Performance of contract: to fulfil bookings, dispatch a driver, accept payment, provide receipts.
- Legal obligation: HMRC retention, council audit, anti-fraud, safeguarding investigations.
- Legitimate interest: customer service, fraud prevention, service improvement, account-customer billing reconciliation.
- Consent: marketing emails, optional features. You can withdraw consent at any time.
Who we share it with
- Drivers: name, pickup/dropoff and contact (anonymised) for the duration of the trip.
- Cordic: our dispatch software provider (data hosted in the UK/EU).
- Stripe: payment processor.
- Xero: invoicing and accounts (account customers and driver settlements).
- Twilio: SMS notifications.
- Local Authority Licensing Officer: on request, when required by the operator licence.
- Police, Council, HMRC: when required by law.
We never sell your data and we never share it with marketing third parties.
How long we keep it
- Booking records: 6 years (HMRC and licensing requirement).
- Account data: while your account is active, plus 1 year after last activity, then deleted.
- CCTV (if fitted): 30 days unless evidence of an incident.
- Payment data: per Stripe’s retention rules (we do not hold card numbers).
- Phone call recordings: 90 days unless tagged for complaint or training.
Your rights
You have the right to:
- Access the personal data we hold about you (Subject Access Request).
- Have inaccurate data corrected.
- Have your data erased (subject to legal retention requirements above).
- Object to processing or restrict it.
- Receive your data in a portable format.
- Withdraw consent for marketing or optional features at any time.
To exercise these rights, email hello@easyminicab.co.uk. We respond within 30 days.
Complaints
If you’re unhappy with how we’ve handled your data, please tell us first. If we can’t resolve it, you can complain to the Information Commissioner’s Office at ico.org.uk.
International transfers
All data is processed in the UK or EU. If any vendor processes data outside the UK/EU, we use the UK International Data Transfer Agreement or a transfer mechanism approved by the ICO.
Questions about this page? Contact us at hello@easyminicab.co.uk or 0800 EASYCAB.