Book

Privacy policy

This policy explains what personal data Black Premium (Mykonos, Greece) collects when you request a ride, buy a card or use the Black Premium app, and why.

What we collect

  • Name and phone number, so the chauffeur and dispatcher can contact you.
  • Pickup and destination (map points and addresses), an optional note and the number of passengers.
  • Technical data: a one-way hash of your IP address and your browser type, used only to stop abuse and spam.
  • If you allow it, your browser shares your position once to set the pickup point. We don't track you.
  • When you buy a card: name, email and phone number of the card holder, the card you chose and its dates. Payment is handled by Stripe; we never see or store your card number.
  • If you rate a ride: the stars, the tags you pick and your optional comment.

How we use it

  • To organise your ride: we share your name, phone, pickup and destination with the assigned chauffeur.
  • To send you WhatsApp messages about this ride (ride number, PIN, chauffeur details, status link).
  • To notify our dispatch team about new rides.
  • To deliver your card code by email and WhatsApp and to let you log in with it.

Shared trip links

You can share a link to your ride so someone can follow the car. The link works only while the ride is running; as soon as the ride is done or cancelled it shows "This trip has ended" and no map, places, chauffeur or car.

The Black Premium app

One app, Black Premium for iPhone and Android, serves two kinds of users: Black Card holders, who book rides with their card, and Black Premium chauffeurs, who receive and run them. There is no public sign-up: only an active Black Card holder or a chauffeur set up by our office can sign in. No advertising, no tracking or analytics tools, no data sold.

Card holders

  • Sign-in: your card code and the holder's phone number. The phone then keeps a sign-in token (in the phone's secure storage) so you stay signed in; signing out, or the office changing the card's holder phone, ends it.
  • Push token: if you allow notifications, the app registers a push token so we can tell you when your chauffeur is on the way, has arrived, or your ride is done.
  • Location: only while you use the app ("when in use"), to set your pickup point and show it on the map. The app never tracks card holders in the background and never stores your position on the phone.
  • Your rides, card and reviews are the same data described above.

Chauffeurs

  • The office enters the chauffeur's name, phone number, car and plate. The phone keeps a sign-in token and, for ride offers, a push token.
  • Location in the background only while the chauffeur is online (or running a ride assigned to him). It is sent to our server about every 10 seconds, also while he navigates in another app such as Google Maps or Waze, so the office can offer the nearest rides and the passenger can see the car approaching. It stops as soon as he goes offline or signs out. On Android a permanent notification shows that sharing is on.
  • Only the latest position is kept for dispatch; the route driven during a ride is kept for 30 days, then deleted.

Services we use

  • WhatsApp messages are sent through a WhatsApp messaging gateway. Card emails are sent through our email provider.
  • Online card payments are processed by Stripe.
  • Push notifications to the app are delivered through Expo, Apple (iPhone) and Google (Android).
  • Address search, road routes and addresses for map points go through our own server. Our server asks Photon (komoot) for addresses, OSRM for routes and OpenStreetMap Nominatim for the address of a map point. It sends them only the search text or the map points, never your name, phone, card, IP address or any other identifier.
  • Map images. The map in the app is drawn from OpenFreeMap vector tiles; the maps on this website use tiles from OpenStreetMap (tile.openstreetmap.org). Like any website, the tile server sees your IP address and which part of the map is shown, but not who you are.

How long we keep it

  • Card and order records are kept as long as accounting law requires.
  • Ride details are kept for 12 months; then the name, phone, note, exact addresses and review comment are removed automatically and the map points are rounded to about 1 km.
  • Chauffeur routes driven during rides: 30 days.

Your rights

You can ask to see, correct or delete your data by contacting the email address on the Contact page or the phone number on the Contact page.

Cookies and storage

We set a cookie to remember your language. Your browser may remember your name and phone on this device to fill the form faster next time; you can clear it in your browser settings. No advertising or tracking cookies.

Delete your data (Black Premium app and rides)

  1. Send an email to the email address on the Contact page (or call the number on the Contact page) from the phone number or email linked to your card or account, with the subject “Delete my data”.
  2. Say whether you are a card holder or a chauffeur.
  3. We confirm and delete your data within 30 days.

What is deleted: card holders — name, phone, notes, exact addresses and review comments of your rides, and every signed-in phone and push token of your card; chauffeurs — the account (name, phone, car, plate, password), signed-in devices, push tokens and location history. What is kept: an anonymous record of completed rides (date, distance, price) and of card sales, without any personal data, for accounting.