Privacy Policy

Cyprus Taxi OS is a technology platform designed for taxi companies, airport-transfer operators, chauffeur businesses, minibus operators and other professional transport companies.

The platform is designed, developed, supplied, licensed, sold and/or rented by:

For privacy enquiries: hello@bricatmedia.com

Cyprus Taxi OS is a technology provider. Unless expressly stated otherwise, we are not the taxi, transfer or transport operator performing passenger journeys booked through an independently operated Taxi OS installation.

This Privacy Policy applies to personal data processed through:

• taxicyprus.online;
• demonstration and enquiry forms;
• telephone and email enquiries relating to Taxi OS;
• commercial communications with prospective or existing clients;
• Taxi OS accounts operated directly by the Platform Provider;
• technical support;
• hosting and maintenance services where provided by us;
• administrative access required to maintain a client's Taxi OS installation;
• other interactions directly between you and Cyprus Taxi OS.

A taxi or transportation company operating its own deployment of Taxi OS may maintain its own separate privacy notice for its customers, passengers, employees and drivers.

Where that company determines why and how passenger, driver or employee information is processed, that company is normally the Data Controller for that information.

Where Cyprus Taxi OS processes that information solely for hosting, maintenance, technical support, backup or other services supplied to the transport company, Cyprus Taxi OS may act as a Data Processor on behalf of that transport company.

It is important to distinguish between the Platform Provider and a Transport Operator using the software.

A. Cyprus Taxi OS as Data Controller

We act as Data Controller when we collect personal data for our own business purposes, including:

• website enquiries;
• demonstration requests;
• client onboarding;
• billing;
• contractual administration;
• support requests submitted directly to us;
• website analytics where applicable;
• security;
• marketing undertaken by us where legally permitted.

B. Transport Operator as Data Controller

A taxi, chauffeur, transfer or transport company using its own Taxi OS installation will generally act as Data Controller for information concerning:

• its passengers;
• its customers;
• its drivers;
• its employees;
• journeys;
• bookings;
• vehicle assignments;
• payment records;
• customer communications;
• customer preferences;
• account users.

The Transport Operator is responsible for determining the appropriate lawful basis for that processing and for providing any privacy information legally required to its passengers, customers, staff and drivers.

C. Cyprus Taxi OS as Data Processor

Where we host, maintain, support or technically administer a client's Taxi OS installation and may access personal information on that client's behalf, we will normally process that information as a Data Processor acting on instructions from the relevant Transport Operator.

Where required, this relationship should be covered by an appropriate Data Processing Agreement.

Depending on how you interact with us, we may collect the following categories of information.

A. Demo and Enquiry Information

When you request a demonstration or contact us, we may collect:

• full name;
• company name;
• email address;
• telephone number;
• business location;
• type of transport business;
• number of drivers;
• information you include in your message;
• preferred method of contact.

B. Client and Commercial Information

When you become a client, we may collect:

• business contact details;
• authorised contact persons;
• billing details;
• invoices;
• contracts;
• service selections;
• technical requirements;
• domain information;
• branding information;
• support history.

C. Account Information

Where accounts are created, we may process:

• name;
• email address;
• username;
• role;
• access permissions;
• login-related information;
• account activity.

Passwords must be stored using secure one-way password hashing and must never be stored in readable plain text.

D. Technical Data

We may automatically process:

• IP address;
• browser type;
• device type;
• operating system;
• timestamps;
• requested pages;
• security logs;
• session information;
• error logs;
• application diagnostics.

E. Support Data

Where a client requests technical support, we may process information necessary to diagnose or resolve the issue, which may include limited access to relevant records contained within that client's installation.

Access should be restricted to what is reasonably necessary for support or maintenance.

Depending on the modules used by a Transport Operator, Taxi OS may technically be capable of storing:

Passenger/customer data

• name;
• telephone number;
• email address;
• pickup location;
• destination;
• journey details;
• booking history;
• passenger requirements;
• preferred language;
• account notes.

Driver information

• name;
• telephone number;
• email;
• profile information;
• professional licence information;
• assigned vehicle;
• driver availability;
• trip assignments;
• operational location data where enabled;
• documents uploaded by the Transport Operator.

Vehicle information

• registration number;
• make and model;
• licence information;
• insurance documentation;
• inspection information;
• operational status.

Booking information

• booking reference;
• pickup address;
• destination;
• date;
• time;
• route;
• passengers;
• luggage requirements;
• flight details;
• assigned driver;
• assigned vehicle;
• fare;
• payment status.

The Transport Operator remains responsible for ensuring that its collection and use of this information complies with applicable law.

Certain Taxi OS functionality may use location information, including:

• pickup locations;
• destinations;
• driver locations;
• live driver availability;
• trip tracking;
• route calculations;
• dispatch information.

Where live driver location is enabled, the Transport Operator is responsible for informing drivers appropriately and establishing a lawful basis for the processing.

Location information should only be processed to the extent necessary for legitimate transport, dispatch, safety or operational purposes.

Taxi OS may integrate with third-party payment providers.

Where payments are processed through providers such as JCC, PayPal, Stripe or another payment provider, payment-card information may be processed directly by the relevant payment provider.

Taxi Cyprus OS should not store complete payment-card numbers, CVV codes or other sensitive card-authentication information unless an appropriately certified payment-processing solution specifically requires and securely supports such processing.

Third-party payment providers maintain their own privacy notices and security obligations.

We may process personal information to:

• respond to enquiries;
• arrange product demonstrations;
• communicate with prospective customers;
• supply Taxi OS services;
• create and manage client accounts;
• fulfil contracts;
• provide hosting;
• perform maintenance;
• provide technical support;
• issue invoices;
• maintain business records;
• improve platform reliability;
• prevent misuse and fraud;
• maintain platform security;
• investigate technical problems;
• protect our legal interests;
• comply with legal obligations;
• communicate important service information.

Where permitted, we may also use business contact information to communicate relevant information about our products and services.

Recipients may opt out of direct marketing communications at any time.

Where the GDPR applies, processing may rely on one or more of the following lawful bases:

Contract

Where processing is necessary to enter into or perform a contract.

Legal Obligation

Where information must be processed to comply with legal or regulatory obligations.

Legitimate Interests

Where processing is reasonably necessary for legitimate business interests, such as:

• platform security;
• fraud prevention;
• service administration;
• business communications;
• product improvement;
• protecting legal rights.

Such interests will be considered against the rights and interests of affected individuals.

Consent

Where consent is required, including for certain optional marketing or cookie technologies.

Consent may be withdrawn where legally applicable.

When you submit the Request a Demo form, the information supplied will be used to:

• assess your enquiry;
• understand your transport business;
• contact you;
• arrange a demonstration;
• prepare relevant commercial information;
• follow up regarding Taxi OS.

Submitting the form does not create a contract or obligation to purchase the platform.

taxicyprus.online may use cookies or similar technologies.

Essential cookies may be required for:

• security;
• forms;
• session management;
• website functionality.

Where analytics, advertising or other non-essential technologies are used and consent is legally required, they must not be activated until the visitor has provided the appropriate consent.

The website must maintain a compliant cookie-consent mechanism if non-essential cookies are enabled.

Users should be able to withdraw or update cookie preferences.

We may use third-party suppliers for services such as:

• web hosting;
• cloud infrastructure;
• email;
• backups;
• mapping;
• geolocation;
• payment processing;
• flight-information services;
• SMS;
• WhatsApp communications;
• analytics;
• error monitoring;
• technical support tools.

Those providers may process information only to the extent necessary to provide their relevant services.

Where required under data-protection law, appropriate processor agreements and safeguards should be maintained.

Taxi OS may use Google Maps or other mapping and geolocation providers for functionality such as:

• address search;
• route calculation;
• maps;
• distance calculation;
• driver locations;
• pickup and destination identification.

Use of such services may involve the processing of IP addresses, location information, addresses and technical information by the relevant provider.

The applicable terms and privacy policies of those third-party providers also apply.

Some technology providers may process or store data outside Cyprus or outside the European Economic Area.

Where personal information is transferred internationally, appropriate safeguards should be used where legally required.

These may include:

• an adequacy decision;
• Standard Contractual Clauses;
• another legally recognised transfer mechanism.

We retain information only for as long as reasonably necessary for the purposes for which it was collected, including:

• provision of services;
• contractual requirements;
• accounting;
• taxation;
• dispute resolution;
• legal obligations;
• security;
• fraud prevention.

Different categories of information may have different retention periods.

Client-controlled information stored inside an independently deployed Taxi OS installation is primarily subject to the Transport Operator's retention policies.

Following termination of hosting or support services, information may be deleted, returned or retained for a limited backup period in accordance with the applicable contract, legal requirements and technical backup schedule.

We use reasonable technical and organisational measures designed to protect personal information.

Depending on the service, these may include:

• encrypted HTTPS connections;
• password hashing;
• access controls;
• role-based permissions;
• firewall protections;
• secure server configuration;
• logging;
• backups;
• security updates;
• restricted administrative access;
• monitoring;
• secure software-development practices.

No online service can guarantee absolute security.

Clients are also responsible for:

• protecting administrator credentials;
• using strong passwords;
• restricting staff access;
• disabling former employees' accounts;
• using secure devices;
• maintaining appropriate internal security procedures.

Where we become aware of a personal-data breach affecting information for which we act as Data Controller, we will assess and respond to the incident in accordance with applicable law.

Where we act as Data Processor for a Transport Operator, we will notify the relevant controller without undue delay after becoming aware of a personal-data breach affecting information processed on that controller's behalf, in accordance with the applicable contractual and legal obligations.

The Transport Operator remains responsible for making notifications to supervisory authorities and affected individuals where required when it is the Data Controller.

Subject to the conditions and exceptions provided by applicable law, individuals may have rights including:

• access to personal data;
• correction of inaccurate information;
• deletion;
• restriction of processing;
• objection to certain processing;
• data portability;
• withdrawal of consent;
• the right to complain to a supervisory authority.

Where your information was collected by a Taxi OS client in connection with a taxi or transport booking, you should normally contact that Transport Operator first because it is generally the Data Controller.

Where your request relates directly to information controlled by Cyprus Taxi OS, contact: hello@bricatmedia.com

Individuals have the right to lodge a complaint with the competent data-protection authority.

In Cyprus, the competent supervisory authority is:

Office of the Commissioner for Personal Data Protection

Republic of Cyprus

Website: https://www.dataprotection.gov.cy

Individuals may contact the Commissioner where they believe that processing of their personal information infringes applicable data-protection law.

Taxi OS is designed for professional transport-business operations and is not intentionally marketed as an online service directly to children.

A Transport Operator may legitimately transport children or record information such as child-seat requirements as part of providing a transport service.

The relevant Transport Operator is responsible for ensuring that any processing involving children is lawful and appropriate.

Taxi OS may in future provide artificial-intelligence or automated features, such as:

• extracting booking information from messages;
• recommending vehicle types;
• suggesting drivers;
• generating customer responses;
• assisting dispatch decisions.

Unless explicitly stated otherwise, such tools are intended to assist human operators and should not be treated as a substitute for professional operational judgment.

Transport Operators remain responsible for reviewing important booking, safety and transport decisions.

Each company operating a Taxi OS installation is independently responsible for:

• its lawful collection of passenger information;
• its privacy notices;
• identifying an appropriate lawful basis;
• staff and driver privacy;
• responding to data-subject requests;
• retention periods;
• marketing consent;
• regulatory compliance;
• authorised account access;
• accuracy of customer and driver data.

Taxi Cyprus OS does not become the Data Controller for a Transport Operator's passenger database merely because the Transport Operator uses our software.

Related commercial terms are set out in our Terms & Conditions.

We may update this Privacy Policy where necessary to reflect:

• changes to the platform;
• new features;
• changes to suppliers;
• changes to legal requirements;
• operational changes.

The current version will be published on this page with an updated revision date.

For enquiries concerning this Privacy Policy or personal information processed directly by Cyprus Taxi OS, contact: