Legal/For Partners/

Privacy Policy

Introduction

This privacy policy describes how Wheely Technologies Ltd (“Wheely”, “we”, “us” or “our”) collects and processes your personal data when you visit our website and use our mobile app. It also explains how we use and protect your data, along with your rights.

Personal data is information, or a combination of pieces of information that could reasonably allow you to be identified.

1. PERSONAL INFORMATION WE USE

You may provide us with personal information through our website, mobile app or by corresponding with us via phone, email or otherwise. This includes personal information you provide when you:

We may process different categories of chauffeurs’ personal data. The data categories are as follows:

• General data such as name, email, phone number, address (this is collected directly from you).
• Geolocation data such as geolocation of drivers and driving routes (this is collected through the Wheely driver app when you are using it).
• Information about vehicles such as the registration number and compliance status (this is collected directly from you).
• App usage data such as your engagement and interactions on the Wheely platform, as well as your rating and feedback from passengers. This is collected via the app.
• Identification/verification data such as your licence, photo, and identity documents.
• Criminal record data such as criminal convictions and offences.
• Communication and correspondence records such as conversations you have using Wheely’s in-app chat function or when you speak with our customer service agents, the date and time of the communication, and its content.
• Information required for taxation purposes: such as your taxpayer identification number, VAT ID, place of birth, financial account identifier.
• User generated content: such as audio recordings generated during the trip or any other content submitted like pictures, videos or files in connection with a customer support request.
• Driving Data — whilst you are using the app, we may collect data related to your driving, such as the speed, acceleration and braking.

We may also need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

INFORMATION WE COLLECT FROM THIRD PARTIES

In addition to above mentioned sources, we may collect and receive your data from third parties such as:

• Fleet partners;
• Service providers who conduct vehicle and driver compliance checks, and criminal background checks;
• Passengers and third parties who provide information and content in connection with the service or in regard to possible claims and disputes; and

Information we collect using automated technologies

As you interact with our website or app, we may automatically collect the data described above, as well as information about your device, browsing activity and patterns. We may collect this personal information by using cookies, server logs and other similar technologies. We may also receive technical data about you if you visit other websites deploying our cookies as further described in our cookie statement.

2. HOW WE USE YOUR INFORMATION

We process chauffeurs’ personal data for different reasons. The main reasons are as follows:

• For our service provision, we collect and process personal data for the purpose of connecting passengers with chauffeurs to provide their services.
• Whilst you are using the Wheely app, geolocation and driving styles are processed to analyse the geographical area, give suggestions to chauffeurs and improve our service.
• Driver’s licence, profession, identity documents and background checks are processed to ensure compliance with applicable laws and passenger safety.
• For our service provision, the Wheely app displays your photo, name and vehicle details so that passengers can identify the chauffeur and vehicle.
• Feedback and ratings about you as a chauffeur are necessary to provide reliable services for passengers and to improve their experience.
• Personal data related to instant messages directly in the Bolt app is processed in order to provide service and customer support (including resolving disputes between driver and rider), for security purposes as well as to improve our products and services, and for analysis.
• We use information about a chauffeur’s engagement and interaction on the Wheely platform to encourage user safety and ensure compliance with our terms and conditions.
• We may process all personal data about you for the issuance or defence of legal claims.

3. THE LEGAL BASIS ON WHICH WE USE INFORMATION

We must have a legal basis to process your personal data. In most cases the legal basis will be one of the following:

• Contractual obligations: Personal data is processed to facilitate the fulfilment of the contract between the chauffeur and the user or Wheely.
• Legitimate interest: Personal data may be processed on the ground of legitimate interest in doing so, for example:
  • to investigate and detect fraudulent payments, fraud and other malicious or unlawful activities and/or safety or security incidents;
  • to make recordings and logs: depending on your location, we may record messages and orders given both on our premises and/or using means of communication as well as information and other activities we have performed. If necessary, we use these recordings for investigations, proof and protection against claims, and/or for quality assurance.
  • for technical and cyber security reasons: such as combating piracy and ensuring the security of the service, website, Wheely platform and app as well as for making and storing back-up copies and preventing/repairing technical issues (depending on the issue, all data may be processed); and
  • to issue or defend legal claims.
• We may also in certain circumstances rely on alternative legal basis when it is more appropriate to do so, such as:
  • when it is necessary to comply with a legal obligation such as for processing data when the law requires it, including, for example, if there is a valid legal request to disclose personal information to a third party such as a court or regulatory authority;
  • when it is necessary to protect your vital interests, or those of others, for example in the event of an emergency or a threat to life; and/or
  • when you have given us clear consent to do so for another specific purpose of which you have been fully informed.

In countries where legitimate interest is not an available lawful basis for Wheely’s processing activities, we will instead rely on an alternative valid legal basis available as set out above.

Where personal data is processed for a new purpose which is different to the purpose for which the personal data was originally collected and the processing is not based on the data subject’s consent, we carefully consider such new processing to determine whether it is compatible with the purpose for which the personal data are initially collected. We will consider any link between the original purpose and the new purpose, the context in which the data are processed, the nature of the data, the possible consequences of the processing, and any safeguards that can be taken to ensure the data are adequately protected.

To the extent we process any special category data or criminal record data, we shall in addition to relying on one of the lawful bases set out above, rely on the fact that such processing is necessary to comply with our legal obligations and/or it is in the substantial public interest to do so.

We may obtain your consent to collect and use certain types of personal information when we are required to do so by law. If we ask for your consent to process your personal information, you may withdraw your consent at any time by contacting us using the details at the end of this privacy policy.

4. OUR USE OF COOKIES

We strive to provide you with choices regarding certain personal information uses, particularly around marketing and advertising. Where you have given your consent (where lawfully required), we use cookies, log files and other technologies to collect personal information from the device you use to access our website, app and services.

We may use “cookies”, “web beacons” or “pixel tags” (“Tags”) and mobile identifiers. Tags allow us to track receipt of an e-mail to you, to count users that have visited a webpage or opened an e-mail and collect other types of aggregated information. Once you click on an e-mail that contains a Tag, your contact information may subsequently be cross-referenced to the source e-mail and the relevant Tag. In some of our e-mail messages, we use a “click-through URL” linked to a certain website administered by us or on our behalf.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. See our cookie statement for more details.

5. HOW WE SHARE YOUR INFORMATION

• Once you accept a booking request, we will share your name, photo, rating, vehicle details and geolocation data with the user.
• Depending on the location of the chauffeur, personal data may be disclosed to one of Wheely’s local subsidiaries or other representatives, affiliates, agents, fleet owners etc. Processing of personal data by will occur under the same conditions as established in this privacy notice.
• We may disclose information under a court order or where we cooperate with a data protection supervisory authority in handling complaints or investigations. We may also share your personal data with law enforcement or other public authorities (such as tax authorities), including responding to requests when the information is required by law or furthers a public interest task. In any scenario, we’ll always satisfy ourselves that we have a lawful basis on which to share the information, and we’ll make sure that we document our decision.

Because we operate as part of a global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the services). See the section on “International Data Transfer” below for more information.

6. INFORMATION SECURITY AND STORAGE

We implement technical and organisational measures to ensure a level of security appropriate to the risk to the personal information we process. These measures are aimed at ensuring the on-going integrity and confidentiality of personal information. We evaluate these measures on a regular basis to ensure the security of the processing.

We will keep your personal information for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal information for a period of time that enables us to:

• Maintain business records for analysis and/or audit purposes.
• Comply with record retention requirements under the law.
• Defend or bring any existing or potential legal claims.
• Deal with any complaints regarding the services.

We will delete your personal information when it is no longer required for these purposes. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.

7. INTERNATIONAL DATA TRANSFERS

Wheely services are offered from our United Kingdom headquarters and we have subsidiaries with offices in France, the United Arab Emirates and Cyprus. In addition, some of our service providers are located in these and other jurisdictions. Please therefore note that your personal information may be transferred to, stored, and processed in countries outside the European Union or United Kingdom that do not have similar data protection laws to the European Union or United Kingdom.

We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us at the details below.

8. YOUR RIGHTS OVER YOUR PERSONAL INFORMATION

You have certain rights regarding your personal information, subject to local law. These include the following rights to:

• access your personal information.
• rectify the information we hold about you.
• erase your personal information.
• restrict our use of your personal information.
• object to our use of your personal information.
• receive your personal information in a usable electronic format and transmit it to a third party (right to data portability).
• lodge a complaint with your local data protection authority.

You may also object only to the processing of your personal information for advertising and data analysis purposes at any time.

We encourage you to contact us to update or correct your information if it changes or if the personal information we hold about you is inaccurate.

We will contact you if we need additional information from you in order to honour your requests.

If you would like to discuss or exercise such rights, please contact us at the details below.

9. CONTACT US

Wheely Technologies Ltd is the controller responsible for the personal information we collect and process.

If you have questions or concerns regarding the way in which your personal information has been used, please contact us using the details provided below.

Email address: support@wheely.com

Postal address: The Monastery Barn, Syon Park, London Road, Brentford, United Kingdom, TW8 8JF

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority of the United Kingdom, the Information Commissioner’s Office using their website https://ico.org.uk/ or the data protection authority applicable to you.

10. CHANGES TO THE POLICY

You may request a copy of this privacy policy from us using the contact details set out above. We may modify or update this privacy policy from time to time.

If we change this privacy policy, we will notify you of the changes. Where changes to this privacy policy will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise your rights (e.g. to object to the processing).