Privacy Policy

Last updated: 24 October 2026

This Privacy Policy explains how Brisk Transfers, S.L. ("Brisk Transfers", "we", "us") collects, uses and protects personal data when you book a transfer on our website, when you use the Brisk Transfers driver app, and when you visit https://brisktransfers.com. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).

Want to delete your driver account? Open the app and go to Account → Delete account, or use our account deletion form. See section 9 for details.

Who we are
Data we collect
Why we use it and our legal basis
Who we share it with
Transfers outside the EU
How long we keep it
Location data in the driver app
Your rights
Deleting your account
Security
Children
Cookies
Changes to this policy
Contact us

1. Who we are

The data controller responsible for your personal data is:

Brisk Transfers, S.L., CIF B22625545
Registered address: Carrer dels Pescadors, 49, 08003 Barcelona, Spain
Registered in the Registro Mercantil de Barcelona, Hoja B-638167, Folio 1, Inscripción 1 (EUID ES08005.000729732)
Email: contact@brisktransfers.com · Phone: +34 643 17 63 65

We have not appointed a Data Protection Officer. For any privacy question or request, write to contact@brisktransfers.com.

2. Data we collect

2.1 Customers who book a transfer

Contact details: name, email address and phone number.
Trip details: pickup and drop-off addresses, date and time, return trip, number of passengers, child seats, vehicle type, and any comments you add.
Flight details for airport pickups: flight number, arrival time and whether you need help at arrivals.
Payment details: payments are processed by Stripe. We receive the payment status, amount, the card type and the billing name, email and address you give Stripe. We never see or store your full card number.
Reviews you choose to leave about your driver after a ride.

2.2 Drivers who use the Brisk Transfers driver app

Account details: name, email address, phone number, password (stored only in encrypted form), ID document number and profile photo if provided.
Vehicle details: vehicle type, model and registration plate.
Ride data: rides assigned to you, status updates (for example "arrived at pickup" or "ride completed"), cancellations, earnings and customer ratings.
Location data during an active ride (see section 7).
Device data: a push-notification token so we can notify you about new rides. We do not collect your device's advertising identifier.

2.3 Website visitors

Technical data: IP address, browser type and the pages requested, kept in our server logs for security.
Cookies: see section 12.
Address searches: the text you type into the pickup and drop-off fields is sent to Google to suggest addresses and calculate the route.

3. Why we use your data and our legal basis

Purpose	Legal basis (GDPR art. 6)
Taking, confirming and carrying out your booking; assigning a driver; sending booking, status and receipt emails	Performance of a contract
Taking payments and issuing refunds	Performance of a contract
Creating and managing driver accounts, assigning rides and showing drivers their earnings	Performance of a contract
Recording the route of a ride (location) for safety, customer support and resolving disputes	Performance of a contract and our legitimate interest
Keeping accounting, tax and invoice records	Legal obligation
Preventing fraud, keeping our systems secure and improving our service	Legitimate interest
Asking you to review your driver after a ride	Legitimate interest (you can simply ignore the email)
Non-essential cookies	Consent

We do not sell your personal data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing.

Between customers and drivers: to carry out a ride, the assigned driver receives the customer's name, phone number, trip and flight details. The customer receives the driver's name, phone number and vehicle details.
Licensed drivers and transport partners who carry out the rides we arrange.
Booking partners: if your booking was made through a partner travel platform, we share the details needed to fulfil it (for example the driver's name, phone, vehicle and the ride status) with that partner.
Service providers who process data on our behalf under a data processing agreement:
- Stripe (payment processing)
- Google (address search, maps and route calculation; email delivery)
- Expo (push notifications to the driver app, delivered through Apple and Google)
- Hostinger (website and database hosting)
Authorities, when the law requires it (for example tax authorities, or the police with a valid request).

5. Transfers outside the EU

Some of our service providers (such as Stripe, Google and Expo) may process data in the United States or other countries outside the European Economic Area. When this happens, the transfer is protected by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

6. How long we keep your data

Data	How long
Bookings, payments, refunds and invoices	6 years, as required by Spanish commercial and tax law (Código de Comercio, art. 30)
Driver GPS location recorded during rides	12 months
Driver account (name, contact details, photo, vehicle)	While the account is open; removed within 30 days after you ask us to delete it
Customer reviews of a driver	Until the driver's account is deleted
Emails and support messages	1 year after the matter is closed
Server security logs	Up to 12 months

7. Location data in the driver app

The driver app collects your precise location only while you are on an active ride and the app is open. It is used to show the ride's progress, to record the route for safety, support and dispute resolution, and, for bookings made through a partner platform, to share the ride's progress with that partner. Location collection stops when the ride is completed or cancelled. The app does not collect your location when it is closed. You can change location permission at any time in your phone's settings, but the ride-tracking features will not work without it.

8. Your rights

You have the right to:

access the personal data we hold about you;
correct data that is wrong or incomplete;
delete your data ("right to be forgotten");
restrict or object to certain processing;
receive your data in a portable format (portability);
withdraw consent at any time, where we rely on consent.

To exercise any right, email contact@brisktransfers.com. We may ask you to confirm your identity. We reply within one month. If you are not satisfied, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

9. Deleting your account

Drivers can ask us to delete their Brisk Transfers account and personal data at any time:

In the app: go to Account → Delete account and confirm.
On the web, without the app: use our account deletion form and confirm the request from the email we send you.
By email: write to contact@brisktransfers.com from the email address of your account.

What happens next: your account is closed straight away and you are signed out of the app. We delete your account and personal data within 30 days and email you when it is done.

What we delete: your name, email address, phone number, password, ID number, profile photo, vehicle details, push-notification tokens, notifications, customer reviews about you and the location data recorded during your rides.

What we keep: records of the rides you carried out and the related payments are kept for 6 years because Spanish law requires it. These records no longer show your name or contact details.

Customers who booked on our website do not have an account. To have your booking data deleted, email contact@brisktransfers.com with your booking reference. Payment and invoice records are kept for the period the law requires.

10. Security

We protect your data with encrypted connections (HTTPS), encrypted passwords, restricted access for staff, and regular security updates. No system is completely secure, so if we ever have a data breach that puts your rights at risk, we will tell you and the authorities as the law requires.

11. Children

Our booking service and the driver app are not intended for children. Bookings must be made by an adult, and drivers must be at least 18 years old. Children may travel as passengers when an adult has booked the trip for them.

12. Cookies

Our website uses only the cookies it needs to work:

Cookie	Purpose	Duration
PHPSESSID	Keeps your booking session and protects the booking form against misuse	Until you close your browser
cookieConsent	Remembers your cookie choice	1 year
Stripe cookies (__stripe_mid, __stripe_sid)	Set by Stripe on the payment page to prevent fraud	Up to 1 year

We do not use advertising or analytics cookies. Google Maps, used for address search and route maps, may receive your IP address when the map loads. You can delete cookies at any time in your browser settings.

13. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. If we make important changes, we will tell drivers in the app or by email.

14. Contact us

Brisk Transfers, S.L. · Carrer dels Pescadors, 49, 08003 Barcelona, Spain
Email: contact@brisktransfers.com · Phone: +34 643 17 63 65

See also our Terms & Conditions and Contact & Support page.