Last updated: February 6, 2026
At ShiftCab (hereinafter “we”, “us”, “our”), protecting your personal data is an absolute priority. We are committed to respecting your privacy and processing your data in a transparent, secure, and compliant manner with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act (Loi Informatique et Libertés) as amended.
This Privacy Policy explains:
- What personal data we collect
- Why we collect it
- How we use it
- Who we may share it with
- How long we keep it
- What your rights are
- How to contact us
1. Who is the data controller?
The data controller is:
ShiftCab
SARL with capital of 1000€
Registered office: 2 rue Kellermann – 59100 Roubaix – France
SIRET:
Email: contact@shiftcab.fr
Phone: +33 (0) 1 89 70 19 70
2. What personal data do we collect?
We only collect data that is strictly necessary to provide our chauffeur-driven transportation services.
Data you provide directly:
- Title, first name, last name
- Email address
- Phone number
- Pickup and drop-off addresses
- Date and time of the trip
- Number of passengers
- Flight information (flight number, airport, terminal) when booking an airport transfer
- Payment information (partial card number, expiry date, CVV – processed securely by our payment provider Stripe or equivalent – we never have access to full card details)
- Special requests or comments (e.g. baby seat, pet, large luggage, wedding decoration, etc.)
Data collected automatically:
- IP address
- Browser type and version
- Connection and navigation data on our website (cookies, trackers)
- Approximate location (if geolocation is enabled)
Data we do not collect:
We do not collect or process sensitive data (ethnic origin, political opinions, health data, sexual orientation, etc.).
3. Why do we collect this data? (purposes)
| Purpose | Legal basis |
|---|---|
| Processing and managing your booking (quote, confirmation, trip execution) | Performance of the contract (Art. 6.1.b GDPR) |
| Customer relationship management (support, booking changes, complaints) | Performance of the contract + legitimate interest |
| Invoicing and accounting | Legal obligation (Art. 6.1.c GDPR) |
| Sending information about our services (newsletter, promotional offers) | Consent (opt-in) or legitimate interest (existing customers) |
| Improving our website and services (anonymized statistics) | Legitimate interest |
| Fraud prevention and payment security | Legitimate interest + legal obligation |
4. Who has access to your data?
Your data is processed confidentially. We never sell your data to third parties.
Possible recipients:
- Our professional drivers (only the information strictly necessary for the trip: name, time, location, phone number, special requests)
- Our technical service providers (website hosting, booking system, payment processor Stripe/Mangopay, email marketing tool Brevo or equivalent)
- Competent authorities in case of legal obligation or official request
All our subcontractors are bound by strict confidentiality and security obligations.
5. How long do we keep your data?
- Booking and invoicing data: 10 years (accounting legal obligation)
- Inactive customer data: deleted after 3 years of inactivity (unless legal obligation)
- Connection / cookies data: maximum 13 months
- Newsletter subscribers: kept until you unsubscribe
6. Where is your data stored?
Your data is hosted within the European Union (servers located in France – OVH, Scaleway or equivalent). No transfer outside the EU takes place without appropriate safeguards (standard contractual clauses or adequacy decision).
Developer : Kimarotec
7. Your GDPR rights
In accordance with the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object (in particular to direct marketing)
- Right to withdraw consent at any time
- Right to lodge a complaint with the CNIL (www.cnil.fr)
To exercise your rights, simply contact us at:
contact@shiftcab.fr
or by post: ShiftCab – 2 rue Kellermann – 59100 Roubaix – France
We will respond within a maximum of one month (extendable by two months in case of complexity).
8. Data security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- HTTPS encryption across the entire website
- Encryption of sensitive data
- Restricted access to data (least privilege principle)
- Regular backups
- Periodic security audits
9. Cookies and trackers
Our website uses necessary cookies (cart, session) and analytical cookies (Google Analytics, Matomo or equivalent). You can manage your preferences via the cookie banner displayed on the site.
For more information: see our Cookie Policy.
10. Changes to the privacy policy
We may update this policy from time to time. Significant changes will be notified to you by email or via a notice on the website. We recommend that you check this page regularly.
11. Contact
For any questions regarding this policy or your personal data:
Email: contact@shiftcab.fr
Postal address: ShiftCab – 2 rue Kellermann – 59100 Roubaix – France
Thank you for your trust.
ShiftCab – Your luxury private chauffeur in Paris