Privacy Policy

Who we are

Nabbes Taxi (NABBES TAXI I HÄSSLEHOLM), based at Trebackalånggatan 166, 281 41 Hässleholm, is responsible for the personal data we process about you. You can reach us using the contact details at the end of this page.

Information we collect

We collect the data we need to provide our services and run your account:

• Account details: your name, email address, phone number and login credentials.
• Booking details: pickup and drop-off addresses and locations, date and time, number of passengers, booking type, chosen payment method and any notes you add.
• Live location: during a trip we share the driver's location with you so you can follow your ride.
• Communications: messages you send us, for example through the contact form or support.
• Technical data: device information, IP address and cookies needed to keep you logged in and to keep the service secure.
• Usage and analytics data: events about how you use our website and apps — such as screens viewed, features used and bookings started or completed — together with crash and error diagnostics. These are linked to a randomly generated analytics identifier and, once you are signed in, to your account, but they never include your phone number, your exact location or pickup and drop-off addresses.
• Push tokens: if you choose to allow push notifications in the Nabbes Taxi app.

How we use your data

We process your personal data for the following purposes, and we never use your phone number or other contact details for marketing:

• To provide rides, deliveries and event transport, and to manage your bookings (to perform our contract with you).
• To run your account and verify logins, including one-time codes sent by SMS (to perform our contract).
• To send booking notifications, receipts and live updates about your trip (to perform our contract).
• To keep the service secure and prevent misuse, including reCAPTCHA on our forms (our legitimate interest).
• To understand how our website and apps are used and to fix problems, using product analytics and error monitoring (with your consent where required, otherwise our legitimate interest — see Cookies, analytics and error tracking below).
• To meet legal obligations, such as accounting (legal obligation).

Notifications: SMS, email and push

We use trusted providers to keep you informed about your bookings:

• SMS: one-time login codes and important booking notifications. Your phone number is never used for marketing.
• Email: booking notifications and receipts.
• Push notifications: live updates about your booking, such as when your driver is on the way or has arrived. You choose whether to allow push when you install the app, and you can turn it off at any time in your device settings.

Maps and addresses

When you enter an address or we calculate a route, we use Google Maps services to provide suggestions and directions. The address information needed for this is shared with Google for that purpose. Google's use of this information is governed by the Google Privacy Policy and Terms of Service.

Cookies, analytics and error tracking

We use a small number of cookies and similar technologies, together with a product-analytics tool, to understand how our website and apps are used and to keep them reliable.

• Essential cookies keep you logged in and keep the service secure. This includes Google reCAPTCHA, which sets its own cookies and collects device and usage information (including your IP address) to tell humans apart from automated abuse. reCAPTCHA loads regardless of your cookie choice because it is required to protect sign-in and our forms, and Google's use of this data is governed by the Google Privacy Policy and Terms of Service.
• For product analytics and error tracking we use a trusted third-party provider whose data is processed on servers in the EU. It records usage events and crash diagnostics linked to a randomly generated identifier stored on your device, and never receives your phone number, your exact location or pickup and drop-off addresses.
• On our website, analytics runs only after you accept analytics in our cookie-consent banner, and you can change your choice at any time.
• In the Nabbes Taxi app (for customers), analytics is switched off until you allow it on the first launch, and you can turn it on or off at any time under Account settings.
• In the Nabbes Driver app (for drivers), analytics is on by default as part of our legitimate interest in operating and improving the driver tool, and drivers can switch it off at any time in the app's profile settings.

Who we share your data with

We share data only where it is needed to provide our services, and we never sell your personal data. A full list of the specific service providers we use is available on request — just contact us using the details at the end of this page.

• The assigned driver receives the booking details needed to complete your trip.
• Trusted service providers that process data on our behalf, such as communication, hosting, maps and analytics providers. This includes Google for maps and reCAPTCHA, and a product-analytics and error-tracking provider hosted in the EU.
• Authorities, where we are required to share data by law.

Where your data is stored and international transfers

Our systems are hosted in the EU (Sweden). Some of the service providers above are international, and where personal data is transferred outside the EU or EEA we rely on appropriate safeguards, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep your data

We keep your personal data only as long as we need it.

• Account and booking data is kept while your account is active.
• When you close your account we delete or anonymise your data, unless we must keep certain records by law, for example accounting records, which we keep for about seven years under the Swedish Bookkeeping Act (Bokföringslagen).

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted, where applicable.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where we rely on consent.
• Contact us to exercise any of these rights. You can also lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Security

We take appropriate technical and organisational measures to protect your personal data, including encryption in transit and limited, role-based access to data.

Children

Our services and accounts are intended for adults. We do not knowingly collect personal data from children without the involvement of a parent or guardian.

Changes to this policy

We may update this policy from time to time. The latest version always applies, and the date at the top of this page shows when it was last changed.