Last updated: 23 September 2026
1. Who we are
This website (halluredrop.com) and the HallureDrop taxi and transfer service are operated by HallureDrop Oy, Business ID (Y-tunnus) 3354281-8, Kaikukatu 8 i79, 87700 Kajani, Finland. HallureDrop Oy is the data controller for the personal data described in this policy.
Contact for privacy matters: halluredrop@gmail.com.
2. What personal data we collect
- Booking details: name, phone number, email address, pickup and drop-off addresses, date and time of the ride, number of passengers and luggage, flight number or notes you give us, and extras such as child seats.
- Payment details: payments are handled by our payment provider (WooPayments, powered by Stripe). We do not see or store your full card number. We receive confirmation of payment, the amount and the last digits of the card.
- Account details: if you create an account, your login name, email and booking history.
- Communication: messages, emails and calls with us about your booking.
- Technical data: IP address, browser type, device information and cookies needed to run the website and the booking form.
3. Why we use your data and on what legal basis
- To take and carry out your booking (collect you, drive you, contact you about the ride): performance of a contract (GDPR Art. 6(1)(b)).
- To take payment, issue receipts and keep accounting records: legal obligation (Art. 6(1)(c)), including the Finnish Accounting Act.
- To handle complaints, lost property, safety matters and misuse of the service: our legitimate interest (Art. 6(1)(f)).
- To improve the website and service using basic statistics: our legitimate interest, or your consent where cookies require it.
We do not sell your personal data and we do not use it for automated decision-making.
4. Who we share data with
- The driver carrying out your ride (only what is needed for the ride).
- Payment provider: WooPayments / Stripe.
- Map and route services used by the booking form: Google Maps and OpenStreetMap-based routing.
- Our website hosting and technical service providers.
- Authorities, when the law requires it.
Some of these providers may process data outside the EU/EEA. When they do, the transfer is protected by the European Commission’s standard contractual clauses or another lawful transfer mechanism.
5. How long we keep data
- Booking and communication data: up to 24 months after the ride, unless needed longer for a complaint or claim.
- Accounting records such as receipts and payment data: for the period required by Finnish accounting law (currently up to 6 years after the end of the financial year).
- Account data: until you delete your account or ask us to delete it.
6. Cookies
The website uses cookies that are needed for the booking form, the shopping cart and checkout, and to keep you logged in. Map and payment services may also set cookies when you use them. You can block or delete cookies in your browser settings, but the booking form may then not work correctly.
7. Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive your data in a portable format. Where processing is based on consent, you can withdraw your consent at any time. To use your rights, email halluredrop@gmail.com. We will reply within one month.
If you think we handle your data unlawfully, you can lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).
8. Security
We protect personal data with appropriate technical and organisational measures, such as encrypted connections (HTTPS), limited access to booking data and secure payment processing.
9. Changes to this policy
We may update this policy. The latest version is always available on this page, with the date it was last updated.