REQUEST TRIP
// LEGAL — REF. LEG-01

Privacy Policy

Last updated: 1 June 2025. This policy applies to all personal data collected through wybicie.com.

1. Who we are

Wybicie Comfort Transport ("Wybicie", "we", "us") is a passenger transport operator providing specialised travel services for seniors and elderly individuals across Canada and select international routes. We are the data controller for personal information collected through this website.

For all privacy-related matters, contact us at: [email protected]

2. What data we collect

We collect personal data in the following circumstances:

  • Trip request forms: name, departure/destination locations, travel date, number of passengers, special requirements (mobility aids, medical equipment, dietary needs).
  • Contact forms: name, email address, telephone number (optional), message content.
  • Technical data: IP address, browser type, pages visited, time of visit — collected automatically by our hosting infrastructure for security and performance purposes.
  • Cookie data: a single consent cookie stored in your browser to record your preference regarding analytics.

We do not collect payment card details through this website. Payment arrangements are made separately through secure channels upon booking confirmation.

3. Legal basis for processing

We process your personal data on the following legal bases:

  • Contract performance (Art. 6(1)(b) GDPR): when you request a quote or book a service, processing your contact and journey details is necessary to fulfil the contract.
  • Legitimate interests (Art. 6(1)(f) GDPR): for fraud prevention, website security, and improving our service quality.
  • Consent (Art. 6(1)(a) GDPR): for analytics cookies, where you have given explicit consent via our cookie banner. You may withdraw consent at any time.

4. How we use your data

  • To prepare and send personalised transport quotes.
  • To arrange and coordinate booked journeys, including communication with escort staff.
  • To send trip confirmations and status updates to designated family contacts (with passenger consent).
  • To respond to enquiries submitted via contact forms.
  • To maintain records as required by Canadian transport regulations.
  • To improve website functionality and user experience.

We do not use your personal data for automated decision-making or profiling.

5. Data sharing

We do not sell, rent, or trade personal data. Data may be shared only in these circumstances:

  • Escort and driver staff: name, destination, and special requirements shared with the assigned escort for journey execution.
  • IT infrastructure providers: our VPS hosting provider may process server logs containing IP addresses; they operate under appropriate data processing agreements.
  • Legal compliance: if required by applicable Canadian law, a court order, or regulatory authority.

6. Data retention

  • Trip and booking records: retained for 7 years to satisfy Canadian transport and financial record-keeping requirements.
  • Contact form messages: retained for 2 years, then securely deleted.
  • Technical logs: retained for 90 days for security monitoring.
  • Cookie consent records: retained for 12 months.

7. Your rights

Under GDPR and applicable Canadian privacy law (PIPEDA), you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal retention obligations).
  • Object to processing based on legitimate interests.
  • Withdraw consent for analytics cookies at any time.
  • Lodge a complaint with your national supervisory authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

We use the following cookies on this website:

COOKIE NAME PURPOSE TYPE DURATION
cookieConsent Records whether the user has accepted or rejected analytics cookies Necessary / Consent 12 months
_ga (if accepted) Google Analytics — anonymous visitor counting and traffic analysis Analytics 2 years
_ga_* (if accepted) Google Analytics — session identifier Analytics 2 years

9. Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, and disclosure. Our website is served over HTTPS. Access to personal data is restricted to staff with a direct operational need.

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

10. Third-party links

This website may contain links to external sites. We are not responsible for the privacy practices of any third-party website. We recommend reading the privacy policy of any external site you visit.

11. Changes to this policy

We may update this privacy policy periodically. The current version is always available at this URL, with the "Last updated" date shown at the top. Significant changes will be communicated to users who have provided contact details.

12. Contact

For any questions regarding this policy or our data practices, please contact us: