Privacy policy

Introduction



When you use our app, you're entrusting us with your information, and we understand this is a big responsibility and work hard to protect your information and put you in control.

This Privacy Policy aims to provide you information on how Zip collects, uses, and protects your personal data throughout all your engagements with us, on our app, and when using our services, including any data you may provide when you sign up or request to use other third-party services we use.



Important information



The data we collect about you

  • Identifiable data including your first name, last name, username, or similar identifier, and profile photo.
  • Contact data including your email address, billing address, and telephone number.
  • Financial data including your credit card details.
  • Transaction data including details about payments and transactions to and from you and our third-party payment providers. Includes card details and other electronic payment details, and other payment-related data as permitted by the payment networks and our third-party payment providers.
  • Technical data including your internet protocol (IP) address, your login data, device type, language and version, time zone setting and location, location, operating system, and other technology on the device you use to access this app and our services. We use technologies like unique device identifiers to identify your device so we can deliver a better experience. 
  • Usage data including information about how you navigate and use our app and services. Our systems may associate this personal information with your activities in the course of providing service to you (such as pages you view or things you click on or search for).


We do not collect any Special Categories of Personal Data about you. This includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.



We do not knowingly contact or collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can remove the information.



How we get the personal Information and why we have it.



Most of the personal information we have process is provided to us directly by you for one of the following reasons:




  • To register you as a passenger and user of our app

  • To be able to identify you so that we associate a device(s) with a particular passenger and identify the operating system of the device(s) through which you use the app

  • To deliver our services to you including determining the price of a journey, matching available drivers to passengers, the tracking and sharing of rides and enabling communication between you and your drivers

  • To send communications to you through this app in relation to journeys and the services provided to passengers and end users

  • To customize our service for you, we may collect and store your precise geographic location as part of your user profile. This helps us provide Specific address results based on your current location. This data generally is not shared with others.

  • To process or arrange payment for services, including sharing the information necessary for the payment transaction with Stripe and/or CabCard, as applicable.


  • To comply with our legal obligations.



We may share this information with:




  • Third party service providers who provide services to us which require the processing of personal data, including Stripe and CabCard where you make, receive or attempt a payment using their services;


  • Payment networks, acquirers, banks and payment-method providers where necessary to authorise, authenticate, process, settle, refund or investigate a payment;


  • Where there is a legal obligation to share data



We will only process information relating to you if there is a lawful basis, and it is necessary to do so. We may use one of the following lawful bases:




  • Where we rely on your consent to process your personal data, this will be obtained via clear and unambiguous affirmative action. You have the right to withdraw your consent at any time

  • In order to perform a contract, we are about to enter into or have entered into with you

  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

  • Where it is necessary to protect someone’s life, we may base processing on vital interests

  • Where we need to comply with the law, we may process data based on our legal obligations



Your data protection rights



Your right of access - You have the right to ask us for copies of your personal information.



Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.



Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. Please note, the right to erasure is not an absolute right and we may be required to retain some information under our legal obligations.



Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.



Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.



Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.



You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.



Email: support@wearezip.co.uk

Telephone: 01274 689999



Our phone number can also be found on the main page of the application.



Address: Zip HQ, 383a Tong Street, Bradford, BD4 9RU

Website: www.wearezip.co.uk




This privacy notice is not exhaustive. We are happy to provide any additional information or explanation needed. If you have any questions or concerns about our privacy policies, please contact us.



How we store your personal information



Information we collect may be stored or processed on computers located in any country where we do business.



We take reasonable steps to protect and secure your personally identifiable information against unauthorized access or disclosure. We encrypt the transmission of data on pages where you provide payment information. However, no security or encryption method can be guaranteed to protect information from hackers or human error.



if data is transferred to a third country, we will ensure that any transfer is in accordance with Data Protection legislation.



We keep personal data until you delete it. We remove personally identifiable information (such as your name, address, email or phone number) and other preferences associated with your account after you delete your account. We may retain other data indefinitely.



Third-party services



Where we offer the facility to pay for services through the application we utilise the following providers as a gateway:



Stripe



Stripe provides payment-processing and related services. When you make, attempt or receive a payment using a Stripe service, Stripe may process transaction information and identifying information necessary to provide the payment service. Depending on the payment flow, this can include your name, email address, telephone number, billing address, payment method information, merchant and location details, transaction amount and date, payment status, and device or technical information.

 

Stripe processes this information to facilitate payments, authenticate transactions, prevent fraud and financial loss, provide support, and comply with legal and regulatory obligations. Stripe may act as a processor for Zip when processing payment data on our instructions and may also process personal data as an independent controller for its own fraud-prevention, security and compliance purposes. Stripe may share relevant data with payment-method providers, card issuers, banks, card networks and other parties where necessary to authenticate or complete a payment, prevent fraud, or comply with the law.

 

Stripe is a PCI DSS Level 1 service provider. You can review Stripe’s Privacy Policy and Privacy Centre at:

https://stripe.com/gb/privacy

https://stripe.com/gb/legal/privacy-center



CabCard



CabCard Services (UK) Limited provides payment-processing and settlement services for taxi journeys. Where CabCard is used for a payment, it may securely route card authorisations and payment transactions to the relevant acquirer and process the payment information needed to authorise, process, settle, refund or investigate the transaction.

 

CabCard’s published payment-service terms state that its systems retain a masked PAN (card number) and do not retain cardholder personal information. CabCard Services (UK) Limited is authorised by the Financial Conduct Authority as a Small Payment Institution (FRN 600388). CabCard Services Ltd, a company within the CabCard Services group, is certified as a PCI DSS Level 1 service provider.

 

You can review CabCard’s Privacy Policy and Regulatory Notice at:

https://www.cabcard.services/policies/privacy-policy-website

https://www.cabcard.services/regulatory-notice

 

 

 

Special situations may require disclosure of your data.

 

 

To operate the service, we may make identifiable and anonymous information available to third parties in these limited circumstances: (1) with your express consent, (2) when we have a good faith belief it is required by law, (3) when we have a good faith belief it is necessary to protect our rights or property, or (4) to any successor or purchaser in a merger, acquisition, liquidation, dissolution or sale of assets. Your consent will not be required for disclosure in these cases, but we will attempt to notify you, to the extent permitted by law to do so.

 

We may also disclose information to Stripe, CabCard, payment networks, acquirers, banks and payment-method providers where necessary to complete, authenticate, refund, settle, dispute or investigate a payment, prevent fraud, or comply with applicable law or payment-network rules.


Changes to the Privacy Policy



We reserve the right to update this Privacy Policy at any time, and, where appropriate, we will notify you when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information. If the change materially affects registered users, we will send a notice to you by email, push notification or text. Please keep us informed if your personal data changes during your relationship with us.



How to complain



At Zip we would, however, appreciate the chance to understand and address your concerns before you approach the competent supervisory authority so please contact our Data Privacy Manager in the first instance.



However, you can also complain to the ICO if you are unhappy with how we have used your data.



The ICO’s address:



Information Commissioner’s Office:
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF



Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk