Privacy Policy

Who we are

Ritz Limo ("we", "us"), [LEGAL ENTITY NAME], provides limousine and chauffeur services in Toronto, the GTA and Southern Ontario. We are the organization responsible (the "data controller") for the personal information described in this policy.

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector (Law 25) and, for travellers in the European Union, the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR and UK GDPR).

Information we collect

Booking and enquiry details: your name, email address, phone number, pick-up and drop-off addresses, travel dates and times, flight number and airline, number of passengers and bags, child seat requests and any notes you give us.

Account details: if you create a client account, your login email, a securely hashed password and your booking history.

Payment details: online payments are handled by our payment processor (Stripe). We never see or store your full card number.

Technical details: your IP address and basic browser and device information, which our servers log for security. Analytics and advertising data are collected only if you accept those cookies (see "Cookies" below).

Why we use it and our legal basis

To provide your ride: confirming your booking, tracking your flight, dispatching your chauffeur, sending your booking voucher and contacting you about your trip. This is necessary to perform our contract with you.

To meet legal obligations, such as keeping accounting and tax records (HST).

For our legitimate interests: keeping the site and payments secure, preventing fraud, answering your questions and improving our service. We always weigh these interests against your rights.

With your consent: analytics and advertising cookies, loading embedded maps, marketing emails and inviting you to leave a review. You can withdraw consent at any time, without affecting anything done before.

We do not sell or rent your personal information, and we do not make decisions about you based solely on automated processing.

Service providers and international transfers

We share information only with providers that help us run the service, under contracts that require them to protect it: our website host, our email delivery provider, Stripe (payments), Google Maps Platform (address search and route times), OpenStreetMap (route map tiles) and, only if you consent, Google Analytics and Google Tag Manager. [CLIENT TO CONFIRM: hosting provider, email provider and any dispatch software.]

Some of these providers store data outside Canada, including in the United States. Where data leaves Canada, the EU or the UK, we rely on recognized safeguards such as adequacy decisions and the European Commission's Standard Contractual Clauses.

How long we keep it

Booking and payment records: [RETENTION PERIOD], to meet accounting and tax requirements. Contact and quote requests that do not lead to a booking: [ENQUIRY RETENTION PERIOD]. Client accounts: until you close your account. Analytics data: no longer than 14 months. When the period ends, we delete or anonymize the information.

How we protect it

We protect your information with reasonable physical, technical and administrative safeguards, including encrypted connections (HTTPS), hashed passwords and access limited to staff who need it. If a breach could seriously harm you, we will notify you and the relevant authorities as the law requires.

Your rights

You can ask us to: access the personal information we hold about you; correct it; delete it; restrict or object to how we use it (including for direct marketing, at any time); receive it in a portable, machine-readable format; and withdraw any consent you have given.

We will answer within 30 days (one month under the GDPR) and may ask you to confirm your identity first. Exercising your rights is free.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, to Quebec's Commission d'accès à l'information, or, if you live in the EU, EEA or UK, to the data protection authority in your country.

Children

Our website is not aimed at children under 16, and we do not knowingly collect their information. Child seat requests contain only the seat type and number, provided by the adult making the booking.

Contact our privacy officer

Questions or requests about your personal information can be sent to our privacy officer, [PRIVACY OFFICER NAME], at contact@ritzlimo.ca or +1 416-454-2360. We may update this policy from time to time; the date at the top shows the latest version, and we will tell you about important changes.