Privacy Policy

1. Introduction

This Privacy Policy explains how Harborline Limited collects, uses, shares and protects the personal data of people who use the website lolaresa.com (the "Website") and the Lolaresa services. It also explains the rights users have over their data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data controller

The data controller is Harborline Limited, a company registered in England and Wales under number 13943058, whose registered office is at Unit 8a County House, Robert Way, Wickford, England, SS11 8DD. For any question about personal data, users are invited to use the chat on the Website as a priority, or to write to contact@lolaresa.com.

3. Data collected

When a user creates an account, makes a purchase or contacts Lolaresa, Harborline Limited collects identification and contact data: first name, last name, email address and phone number.

For each taxi booking request, Harborline Limited collects the details needed to handle it: pick-up and drop-off addresses, date and time, number of passengers, number of luggage items, and any information the user chooses to add to the request.

Harborline Limited also collects payment and billing data (amounts, dates, the last four digits and expiry date of the card), the history of bookings, requests and chat conversations, the user's plan and Magazine status, and technical data such as IP address, browser type, pages viewed and connection dates. Full card details are handled by a specialised payment provider and are never stored by Harborline Limited.

4. Purposes and legal bases

Data are used to create and manage the user account, handle booking requests, provide the Personal Assistance Plan and the Magazine, take payments, make receipts available in the user space, send renewal reminders, and answer support requests. This processing is necessary to perform the contract with the user.

Data are also used to keep invoicing and accounting records, and to answer requests from competent authorities. This processing is necessary to meet Harborline Limited's legal obligations.

Technical and usage data are used to secure the Website, prevent fraud and abuse, and improve the services. This processing is based on Harborline Limited's legitimate interest in running a secure and reliable service.

Marketing emails about Lolaresa offers are only sent with the user's consent, or where the law allows it for existing customers. Every marketing email contains an unsubscribe link, and consent can be withdrawn at any time without affecting processing carried out before.

No decision producing legal effects is made about users by automated means only.

5. Who receives the data

Data are only shared where necessary, with the following recipients. Authorised Lolaresa staff handle requests and support. The third-party transport providers who perform a ride receive the details needed to carry it out, such as the passenger's name, phone number and pick-up and drop-off details. A specialised payment provider processes card payments. Technical providers support hosting (Amazon Web Services EMEA SARL), email delivery, chat and website maintenance, and act only on Harborline Limited's instructions. Competent authorities receive data only where the law requires it.

Harborline Limited never sells users' personal data.

6. Where data are stored and transfers

Data are hosted by Amazon Web Services EMEA SARL on servers located in Ireland (European Union). If data need to be transferred outside the country or region whose law applies, Harborline Limited makes sure the transfer is protected by a safeguard recognised by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, such as an adequacy decision or standard contractual clauses.

7. How long data are kept

Account data are kept while the account is active and for 3 years after the last activity afterwards. Invoicing and accounting data are kept for 6 years, as required by law. Technical logs are kept for 12 months. Data used for marketing are kept for 3 years after the last contact, unless the user unsubscribes earlier. At the end of these periods, data are deleted or anonymised.

8. Security

Harborline Limited uses technical and organisational measures to protect personal data, including encrypted connections, restricted and controlled access, and monitoring against unauthorised access. No system is completely secure, but Harborline Limited works to protect data in line with industry standards.

9. Users' rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, users can access their data, correct it, ask for it to be deleted, restrict or object to its use, receive it in a portable format, and withdraw their consent at any time. Requests can be made by chat or by email to contact@lolaresa.com, and are answered within one (1) month. Users can also complain to the Information Commissioner's Office (ICO).

10. Cookies

Cookies are small files stored on the user's device when visiting the Website.

The Website only uses cookies and similar technologies (such as local storage) that are strictly necessary for it to work: remembering the language chosen and running the chat. No analytics or advertising cookies are used. These cookies do not require consent and cannot be switched off without affecting the Website. The cookies used are: NEXT_LOCALE (remembers the language you chose).

11. Minors

The Lolaresa services are reserved to adults aged 18 or over. Harborline Limited does not knowingly collect data about minors. If such data is identified, it is deleted.

12. Changes to this Privacy Policy

Harborline Limited may update this Privacy Policy to reflect legal, technical or service changes. The version in force is the one published on the Website, with the date shown at the top of this page. Users are informed by email of any significant change.

13. Contact

For any question about this Privacy Policy or to exercise a right, users are invited to use the chat as a priority, or to write to contact@lolaresa.com.