私隱通知Privacy Notice

1. 我們是誰1. Who we are

Granvio Group Limited 是於英格蘭及威爾斯註冊的公司，公司編號13733575。就本 Privacy Notice 涵蓋的個人資料而言，Granvio Group Limited 為 data controller。公司註冊地址及法律資料可於我們的 法律及合規資料 頁面查閱。

Granvio Group Limited is registered in England and Wales under company number 13733575. For personal information covered by this Privacy Notice, Granvio Group Limited acts as the data controller. Our registered office and company legal details are available on our Legal & Compliance page.

2. 我們可能收集的資料2. Information we may collect

• 姓名、電話、電郵及公司資料。Name, telephone number, email address and company details.
• 行程日期、時間、上落車地點、乘客人數、行李及航班資料。Journey dates and times, pickup and destination details, passenger numbers, luggage and flight information.
• 兒童安全座椅、寵物、mobility aids 及其他服務需要。Child-seat, pet, mobility-aid and other service requirements.
• WhatsApp、電郵、網站查詢及其他 booking correspondence。WhatsApp, email, website-enquiry and other booking correspondence.
• 付款、發票、投訴、事故及與服務有關的記錄。Payment, invoice, complaint, incident and service-related records.

如乘客自願提供與殘疾、健康狀況或協助需要有關的資料，我們只會使用提供服務所合理需要的資料。

Where a passenger voluntarily provides information about a disability, health condition or assistance requirement, we will only use information reasonably necessary to arrange the requested assistance.

3. 我們為何使用資料3. Why we use personal information

• 回覆查詢、準備報價及採取客戶要求的 booking 前步驟。To respond to enquiries, prepare quotations and take steps requested before a booking contract is entered into.
• 安排、確認及履行預約，分配司機及車輛並與客戶／乘客聯絡。To arrange, confirm and perform bookings, allocate drivers and vehicles, and communicate with customers and passengers.
• 向有需要的持牌合作營運商分享完成行程所需資料。To provide necessary journey information to licensed partner operators where required to fulfil a booking.
• 開發票、記錄付款及符合 licensing、accounting 及其他法律義務。To issue invoices, record payments and comply with licensing, accounting and other legal obligations.
• 處理投訴、安全事故、保險或法律申索，以及保障我們的合法權益。To handle complaints, safety incidents, insurance or legal claims, and protect our legal rights.

我們的主要 lawful bases 通常包括：為簽訂／履行合約採取必要步驟、履行法律義務，以及安全管理業務和處理法律申索的 legitimate interests。若為安排服務而需要處理健康等 special category data，我們只會在具適當額外法律條件的情況下處理，例如在適當情況下取得明確同意。

Our main lawful bases normally include taking necessary steps to enter into or perform a contract, compliance with legal obligations, and our legitimate interests in safely administering the business and handling legal claims. If special category information such as health data is needed to arrange a service, we will process it only where an appropriate additional legal condition applies, which may include explicit consent where suitable.

4. 我們可能與誰分享資料4. Who we may share information with

• 具適當牌照的司機及 partner private hire operators，在完成 booking 所需要的範圍內。Appropriately licensed drivers and partner private hire operators where necessary to fulfil a booking.
• Wokingham Borough Council 或其他 competent licensing authority、警方或其他依法有權要求資料的公共機構。Wokingham Borough Council or another competent licensing authority, police or other public authorities where legally required.
• 保險公司、會計師、律師或其他專業顧問，在合理需要的範圍內。Insurers, accountants, lawyers or other professional advisers where reasonably necessary.
• 用於網站及通訊的 technology providers，包括 Netlify、FormSubmit、Google/Gmail 或 Google Workspace，以及客戶選擇使用的 WhatsApp。Technology providers used for our website and communications, including Netlify, FormSubmit, Google/Gmail, and WhatsApp where the customer chooses to use it.

向 partner operator 或 driver 分享時，我們會盡量只提供該 booking 所需資料，例如姓名、電話、上落車地點、時間、乘客／行李資料及相關服務需要。

When sharing information with a partner operator or driver, we aim to provide only information necessary for that booking, such as name, telephone number, pickup, destination, time, passenger/luggage information and relevant service requirements.

5. 國際資料處理5. International processing

部分 technology providers 可能在英國以外處理資料。如英國 data protection law 要求額外保障，我們會依賴相關 provider 提供的適當 safeguards 或 transfer mechanisms。

Some technology providers may process information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we rely on appropriate safeguards or transfer mechanisms made available by the relevant provider.

6. 資料保存時間6. How long we keep information

Private hire booking 及 dispatch records 會按適用 Wokingham operator licensing conditions 保存最少六個曆月。Complaint records 亦會按相關 licensing requirements 保存最少六個月。財務、發票及 accounting records 可因稅務、公司記錄、保險或法律需要保存更長時間。WhatsApp、email 及 Excel records 會定期檢視，不會在沒有合理業務或法律需要下無限期保存。

Private hire booking and dispatch records are retained for at least six calendar months where required by applicable Wokingham operator licensing conditions. Complaint records are also retained for at least six months where required. Financial, invoice and accounting records may be retained for longer for tax, company-record, insurance or legal purposes. WhatsApp, email and Excel records are reviewed and are not intended to be kept indefinitely without a reasonable business or legal need.

7. 你的權利7. Your rights

視乎情況，個人可能有權要求查閱、更正、刪除或限制其個人資料，反對某些處理，或要求 data portability。若處理依賴 consent，可撤回 consent。如對我們使用資料有疑慮，亦可向 UK Information Commissioner’s Office（ICO）投訴。

Depending on the circumstances, individuals may have rights to request access to, correction or deletion of personal information, restriction of processing, objection to certain processing or data portability. Where processing relies on consent, consent may be withdrawn. Individuals may also complain to the UK Information Commissioner’s Office (ICO) if they have concerns about how their information is used.

8. 資料安全8. Security

Granvio 會採取合理措施保障個人資料，並限制只有具正當業務需要的人員才可存取。電子 booking records 及使用的帳戶／裝置應採用適當密碼及安全控制。

Granvio takes reasonable steps to protect personal information and restrict access to people who need it for legitimate business purposes. Electronic booking records, accounts and devices should use appropriate passwords and security controls.

9. 聯絡我們9. Contact us