Privacy policy
<p>Version 2026-10-04, updated on 2026-10-04.</p>
<p>This policy explains which personal data we process when you use terrenastaxi.com, why, who we share it with, how long we keep it and how to exercise your rights.</p>
<h2>The essentials</h2>
<ul>
<li>Only your WhatsApp number is required; everything else is optional.</li>
<li>Your request is received by our team, not by a carrier.</li>
<li>We only share your request with a carrier with your agreement, and only what the ride requires.</li>
<li>We only send you commercial offers if you agree to them separately.</li>
<li>We do not sell your data.</li>
<li>By default, the site uses no advertising or measurement cookies.</li>
</ul>
<h2>1. Data controller</h2>
<ul>
<li><strong>Controller:</strong> THERD SRL (RNC 133-63250-2)</li>
<li><strong>Address:</strong> address provided on request</li>
<li><strong>Write to us:</strong> <a href="/en/contact/" rel="noopener">contact form</a></li>
<li><strong>Your rights:</strong> <a href="/en/privacy/data-rights/" rel="noopener">data rights form</a></li>
</ul>
<h2>2. The data we process</h2>
<h3>Transport request</h3>
<ul>
<li><strong>Required:</strong> your WhatsApp number, with the country code.</li>
<li><strong>Optional:</strong> type of transport, one way or return, departure, destination, date and time, return date and time, flight number, adults, children, luggage, boards, bikes, child seat, accessibility need, preferred vehicle, budget, preferred language, first name, last name, email address and message.</li>
<li><strong>Recorded automatically:</strong> site language, page of origin, domain of the referring site, <code>utm_*</code> parameters and <code>gclid</code> if they were in the link you followed, date and time, a copy of the fares and conditions displayed, the version of this policy and your choices on the two optional boxes (sharing with carriers and commercial offers), with their exact text, version, language and date.</li>
</ul>
<p>If you mention an accessibility need, we only use it to look for a suitable vehicle. Please do not include health details or bank details in your message. We never ask for identity documents, bank card details or your home address: a place is enough for a pick-up (hotel, airport, area).</p>
<h3>Contact and reports</h3>
<p>With the <a href="/en/contact/" rel="noopener">contact form</a> or the form to report a carrier, we record the subject, the message, the carrier concerned if you name it, your name if you give it, your WhatsApp number or email (optional for a report), the language, the page of origin, the date and your choice about commercial offers.</p>
<h3>Carrier registration</h3>
<p>Details of the service (name to publish, type, services, routes, vehicles, languages, night service, hours, fares, payment methods), contact person, WhatsApp number, email, website or social media (not published), message, optional photos, acceptance of the registration terms and choice about commercial offers.</p>
<h3>Data rights requests</h3>
<p>The type of request, the WhatsApp number or email used to identify you, and your message.</p>
<h3>Security and statistics</h3>
<p>To limit abusive submissions, we use a fingerprint of your IP address (a salted hash that changes every day), deleted after about 24 hours. The application does not store your full IP address and uses no third-party captcha.</p>
<p>We measure use of the site with aggregated statistics, without cookies. During your visit, your browser's session storage keeps the <code>utm_*</code> parameters and the referring site so they can be attached to your request; it is cleared when you close the tab.</p>
<h2>3. Purposes and legal bases</h2>
<p>THERD SRL is established in the Dominican Republic. Processing is governed by Dominican law, in particular Law No. 172-13 on the protection of personal data: it is based on the consent you give by sending a form after being informed, or on the cases where the law allows data to be processed without consent. For visitors located in the European Union, the General Data Protection Regulation (GDPR) is added to this framework where it applies; the articles cited below are those of the GDPR.</p>
<ol>
<li><strong>Answering your request</strong> and arranging your ride: your consent and, under the GDPR, steps taken at your request before a contract (Art. 6(1)(b)).</li>
<li><strong>Sharing your request with a carrier</strong>: only with your consent (Art. 6(1)(a)), given through the optional box, unticked by default, or on WhatsApp, in which case our team records it. We only pass on what the ride requires: route, date and time, passengers, luggage and needs, flight number. Your phone number, email and full name are not passed on without your agreement.</li>
<li><strong>Sending you commercial offers</strong>: only with separate consent, through another optional box unticked by default (Art. 6(1)(a)).</li>
<li><strong>Answering your messages and reports, and handling carrier registrations</strong>: your consent when you send them; for a registration, the terms you accept (Art. 6(1)(b)); for a report, also our legitimate interest in keeping a reliable directory (Art. 6(1)(f)).</li>
<li><strong>Security, spam prevention, proof of the information displayed and of your choices, and cookie-free statistics</strong>: our legitimate interest (Art. 6(1)(f)).</li>
<li><strong>Handling your data rights requests</strong>: our legal obligations (Art. 6(1)(c)).</li>
</ol>
<p>You can withdraw consent at any time, without affecting what was done before. We make no decision based solely on automated processing that produces legal effects concerning you.</p>
<h2>4. Recipients</h2>
<ul>
<li><strong>Our authorised team</strong>, through an admin area protected by two-factor authentication.</li>
<li><strong>The carriers you agreed to</strong>, under the conditions in section 3. Each one processes that data under its own responsibility; we ask them to use it only for your ride.</li>
<li><strong>JARVIS, the operator's internal follow-up assistant</strong>, with read-only access to transport requests, contact messages and carrier registrations. It never receives data rights requests, submissions classified as spam or anonymised requests.</li>
<li><strong>Our hosting provider</strong> (Hostinger International Ltd.).</li>
<li><strong>WhatsApp (Meta)</strong>, when we write to you; these messages are also subject to WhatsApp's terms and privacy policy.</li>
<li><strong>Our email or internal messaging provider</strong>, if new-request notifications are enabled: it receives a summary with your number masked.</li>
<li><strong>Public authorities</strong>, only when the law requires it.</li>
</ul>
<p>We do not sell your data or pass it on to third parties for commercial purposes.</p>
<h2>5. Cookies and tags</h2>
<p>By default, the site only uses strictly necessary storage: a security cookie that protects the forms and, for authorised staff, the session cookies of the admin area. This storage does not require your consent.</p>
<p>Measurement and advertising tags (Google Ads, Google Analytics 4 and the Meta pixel) are disabled by default. If the operator activates them, they only load after you consent in the cookie banner, using Google Consent Mode v2. You can accept, refuse or choose by purpose, and they never receive your phone number or email. Without consent, the site works the same.</p>
<h2>6. Retention</h2>
<ul>
<li><strong>Requests:</strong> automatically anonymised after 12 months without activity (a configurable period, stated here).</li>
<li><strong>Contact messages and reports:</strong> deleted after 12 months.</li>
<li><strong>Proof of your consents and withdrawals:</strong> as long as needed to demonstrate them.</li>
<li><strong>Carrier registrations:</strong> as long as needed to manage the listing; you can ask for deletion.</li>
<li><strong>IP address fingerprint:</strong> about 24 hours.</li>
<li><strong>Backups:</strong> rotated; deleted or anonymised data disappears from them at the end of the cycle.</li>
</ul>
<h2>7. International transfers</h2>
<p>Your data is stored on the servers of our hosting provider (Hostinger International Ltd.), whose location depends on that provider, and WhatsApp messages pass through Meta's infrastructure, which may process them in several countries. Your data may therefore be processed outside your country, in countries whose laws do not necessarily offer the same level of protection; we always apply the measures described in this policy.</p>
<h2>8. Your rights</h2>
<p>At any time, you can <strong>access</strong> your data, <strong>correct</strong> it, ask for its <strong>deletion</strong> (unless the law requires us to keep it), <strong>object</strong> to processing and <strong>withdraw your consent</strong>, in particular to sharing your request with carriers or receiving commercial offers. Where the applicable law provides for it, you can also receive the data you gave us in a structured format (<strong>portability</strong>).</p>
<p>Use the <a href="/en/privacy/data-rights/" rel="noopener">data rights form</a> or the <a href="/en/contact/" rel="noopener">contact form</a>. To protect your data, we check your identity by asking you to confirm the request from the WhatsApp number or email you used. It is free of charge.</p>
<p>You can also turn to the competent authority: in the Dominican Republic, through a habeas data action before the courts; where the GDPR applies, by lodging a complaint with the data protection authority of your country of residence.</p>
<h2>9. Security</h2>
<p>We use an encrypted connection (HTTPS) across the site, an admin area restricted to authorised staff and protected by two-factor authentication, logs of access and sensitive actions, technical logs in which phone numbers and emails are masked, and backups with restricted access. No system is infallible, but these measures reduce the risk of unauthorised access, loss or alteration.</p>
<h2>10. Minors</h2>
<p>The service is not intended for children or teenagers to send requests without their parents or guardians. If you are travelling with children, an adult should send the request. If you think a minor has sent us data, write to us and we will delete it.</p>
<h2>11. Changes</h2>
<p>We may change this policy. The version and date appear at the top of this page, and we record the version shown to you when you sent your request. If a change significantly affects how your data is used, we will say so clearly on the site.</p>