Privacy Policy

FairFare Ireland Ltd ("FairFare", "we", "us") is the data controller of the personal data described in this notice. We are committed to protecting your privacy in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Irish Data Protection Act 2018.

1. Who we are

FairFare Ireland Ltd, registered in Ireland. Contact for privacy matters: privacy@fairfare.ie. You may also contact our Data Protection Officer at the same address.

2. What personal data we collect

• Rider data: name, phone number, email, pickup and drop-off locations, ride history, device and browser information.
• Driver data: name, contact details, SPSV licence number, vehicle details, insurance and PSV documents, payout information, ratings and ride history.
• Technical data: IP address, cookies, log data, and approximate location where you consent to it.

3. Legal bases for processing

• Contract (Art. 6(1)(b) GDPR): to create your account, match riders with drivers, and provide the service.
• Legal obligation (Art. 6(1)(c)): to comply with NTA / SPSV rules, tax law and safety obligations.
• Legitimate interests (Art. 6(1)(f)): fraud prevention, platform security, and improving the service.
• Consent (Art. 6(1)(a)): optional cookies, marketing emails, and approximate location. You may withdraw consent at any time.

4. Who we share data with

We share personal data only where necessary with: the driver or rider matched to your trip, the National Transport Authority for licence verification, payment processors, hosting and communications providers acting as processors under contract, and law-enforcement authorities where legally required.

5. International transfers

Personal data is processed within the European Economic Area (EEA) where possible. Where a processor operates outside the EEA, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep data

Ride records are retained for up to 7 years to meet Irish tax and Revenue Commissioners requirements. Account data is deleted within 30 days of account closure, unless a longer retention period is required by law.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify inaccurate data;
• erasure ("right to be forgotten") where applicable;
• restrict or object to processing;
• data portability;
• withdraw consent at any time; and
• lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

To exercise any right, email privacy@fairfare.ie. We respond within one month.

8. Security

We apply appropriate technical and organisational measures including encryption in transit, access controls and regular security reviews.

9. Changes

Material changes to this notice will be communicated by email or via the app before they take effect.