1. Who is responsible for your information
ViaHopTrip is operated by Hopline Transfers Inc., a New York corporation. Hopline Transfers Inc. is the business responsible for the personal information processed through the ViaHopTrip website, applications and related services (the “Services”), and acts as the “controller” or “business” for that information where those terms apply under applicable law.
ViaHopTrip / Hopline Transfers Inc.
6411 19th Avenue, 2nd Floor
Brooklyn, New York 11204
United States
This Privacy Policy is administered by Hopline Transfers Inc. in the United States. Depending on where you live and on how we interact with you, other privacy laws may also apply to our processing of your information, and where they do, we comply with them.
2. Scope
This Privacy Policy applies to customers and travellers, to Suppliers and the people who work for them (such as company contacts, drivers and guides), and to anyone who visits or contacts us through the Services.
Suppliers are independent businesses. When a Supplier receives your information to provide a booked service, it handles that information under its own responsibility and privacy practices, in addition to any obligations it has to Hopline Transfers Inc.
3. Information we collect
Information you give us:
- Account information: name, email address, telephone number, password (stored only in encrypted form by our authentication provider), language and currency preferences, and communication preferences.
- Booking information: the services you request or book, dates, times, prices, booking references, special requests and notes for the Supplier.
- Traveller information: the names of the travellers in a booking, the number of adults, children and infants, and where needed ages (for example, for child seats or age requirements).
- Transfer and travel details: pickup and drop-off addresses, flight, train or ferry numbers and times, luggage details, and accommodation or itinerary details you provide.
- Communications: messages you exchange with Suppliers or with us through the Services, and emails or support requests you send us.
- Reviews and ratings you submit.
- Supplier and company information: business name, registration and tax numbers, licence and permit details, insurance details, business address, contact people, service areas, listings, prices and uploaded documents.
- Driver and vehicle details provided by Suppliers: driver names, contact numbers and assignments, and vehicle make, model, class, capacity and registration.
Information collected automatically:
- Device and connection data: IP address, browser type and version, device type, operating system, language settings and approximate location derived from the IP address.
- Usage data: pages viewed, searches, the features you use, dates and times of access, and error and performance logs.
- Cookies and similar technologies, described in section 10.
Information from others:
- Suppliers, for example when they confirm or update a booking, assign a driver or vehicle, or report a no-show.
- Payment processors, which tell us whether a payment succeeded, failed, was refunded or was disputed.
- People who book for you, when they include you as a traveller.
4. Payment information
Payments through the Services are handled by third-party payment processors, such as Stripe. Where payment details are entered into the payment processor’s own checkout or form, which is how ViaHopTrip is built, full card numbers and security codes are collected and processed by the payment processor and are not stored by ViaHopTrip.
We receive and keep limited payment-related information, such as the payment status, amount, currency, date, the processor’s customer, payment and subscription references, and where provided by the processor the card brand and last four digits.
5. How we use your information
We use personal information to:
- create and manage accounts and verify sign-ins;
- process requests, offers and bookings, and help Suppliers fulfil them;
- match transfer and other requests with suitable Suppliers based on location, dates, capacity and service type;
- process payments, refunds and Supplier subscriptions;
- prevent, detect and investigate fraud, abuse, payment disputes and security incidents;
- keep the Services secure and working, including troubleshooting and monitoring;
- provide customer support and handle complaints;
- send service notifications, such as booking confirmations, updates, reminders and account messages;
- analyse how the Services are used, in aggregated or de-identified form where possible, and improve them;
- comply with legal, tax, accounting and regulatory obligations and enforce our Terms;
- send marketing communications where the law permits and, where required, only with your consent.
If the laws of the European Economic Area (EEA) or the United Kingdom apply to our processing, we rely on these legal bases:
- performance of a contract, to provide your account and your bookings;
- legitimate interests, for security, fraud prevention, supplier matching, service improvement and communications that relate to the Services, balanced against your rights;
- compliance with legal obligations, such as tax and accounting rules;
- consent, for marketing communications and any optional cookies, which you can withdraw at any time.
7. Service providers
We use service providers that process personal information on our behalf and under our instructions, including:
- payment processing: Stripe and other payment providers;
- hosting and cloud infrastructure: Vercel;
- database, file storage and authentication: Supabase;
- email delivery for account and booking messages;
- map display: map tiles are loaded from OpenStreetMap servers, which receive your IP address when a map is shown;
- image delivery: some photographs are loaded from the Unsplash image service, which receives your IP address when an image is shown;
- analytics, customer support, communications and security or fraud-prevention tools, where we use them.
Service providers may use personal information only to provide their services to us, and are required to protect it. Some may process information in countries other than your own; see section 13.
8. Other disclosures
We may also disclose personal information:
- where required by law, regulation, legal process or an enforceable request from a public authority;
- to protect the rights, property or safety of our users, Suppliers, the public or us, including to prevent fraud and to enforce our Terms;
- to professional advisers, such as lawyers, accountants and auditors, under duties of confidentiality;
- in connection with a merger, acquisition, financing, reorganisation or sale of all or part of our business, subject to appropriate confidentiality protections;
- with your consent or at your direction.
9. No sale of personal information
We do not sell personal information, and we do not share personal information for cross-context behavioural advertising. We do not allow third-party advertising trackers on the Services.
11. How long we keep information
We keep personal information only for as long as it is needed for the purposes described in this policy, including to meet legal, tax, accounting and dispute-resolution requirements. As a general guide:
- account information is kept while your account is open and for a limited period after it is closed;
- booking, payment and invoicing records are generally kept for up to seven years after the booking, to meet tax and accounting obligations and to handle disputes;
- messages and support records are kept for as long as needed to resolve the matter and for a reasonable period afterwards;
- security and technical logs are kept for a limited period, generally no longer than twelve months, unless needed to investigate an incident.
When information is no longer needed, we delete it or de-identify it so that it can no longer be linked to you.
12. Security
We use technical and organisational measures designed to protect personal information, including encryption in transit, access controls that limit Suppliers and staff to the information they need, authentication safeguards and monitoring. No online service can be completely secure. Please keep your password confidential, and contact us straight away if you believe your account has been compromised.
13. International transfers
Hopline Transfers Inc. is based in the United States, and our service providers may process information in the United States and other countries. Suppliers that provide your booked services are located in the destinations you travel to. These countries may have data protection laws that differ from those where you live.
Where the law requires safeguards for international transfers, for example from the EEA, the United Kingdom or Switzerland, we rely on appropriate mechanisms such as standard contractual clauses approved by the relevant authorities, or on exceptions permitted by law, such as where a transfer is necessary to perform a booking you requested.
14. Children’s privacy
The Services are not directed to children, and you must be at least 18 years old to create an account. We do not knowingly collect personal information directly from children. When an adult includes a child as a traveller in a booking, we process the limited information the adult provides, such as name and age, only to arrange and provide the booked service.
If you believe a child has given us personal information directly, please contact us at hello@viahoptrip.com and we will delete it where appropriate.
15. Deleting your account
You can ask us to delete your account at any time by emailing hello@viahoptrip.com from the address linked to your account. We will delete or de-identify your personal information, except where we need to keep certain records, for example to complete an active booking, to meet legal, tax or accounting obligations, to resolve disputes or to prevent fraud. Information a Supplier already received to provide a booked service is held by that Supplier under its own responsibility.
16. Marketing and communications
Marketing emails are optional and separate from accepting our Terms. We send them only where the law permits and, where required, with your consent. You can opt out at any time using the unsubscribe link in any marketing email or the preference in your account settings.
Even if you opt out of marketing, we will still send messages that are necessary for your account and bookings, such as confirmations, changes, cancellations, security notices and replies to your requests.
17. Your privacy rights
Depending on where you reside and subject to applicable law, you may have certain rights regarding your personal information. We will not discriminate against you for exercising them.
If you are in the European Economic Area or the United Kingdom, and those laws apply to our processing, you have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted in certain circumstances;
- restrict our processing in certain circumstances;
- object to processing based on our legitimate interests, and to direct marketing at any time;
- receive information you provided to us in a portable format;
- withdraw consent at any time, without affecting processing carried out before the withdrawal;
- lodge a complaint with your local data protection authority.
If you are a resident of a US state with a consumer privacy law that applies to our processing of your personal information, you may, depending on that law, have the right to:
- know about and access the personal information we collect, use and disclose;
- correct inaccurate personal information;
- delete personal information, subject to legal exceptions;
- obtain a portable copy of your personal information;
- opt out of the sale or sharing of personal information, targeted advertising and certain profiling (we do not sell personal information or use it for targeted advertising);
- limit certain uses of sensitive personal information, where applicable;
- appeal our decision on your request.
Whether a particular state or national law applies to us depends on that law’s scope, thresholds and exemptions. Where a right is not required by the law that applies to you, we will still consider your request in good faith.
18. How to make a privacy request
To exercise your rights, email hello@viahoptrip.com with the subject “Privacy request”, and tell us what you are asking for. For your protection, we will verify your identity before acting, usually by confirming control of the email address linked to your account. You may use an authorised agent where the law allows; we may ask for proof of the agent’s authority and verify your identity directly.
We will respond within the time required by the applicable law. If we decline a request, we will explain why and, where the law provides a right of appeal, how to appeal.
19. Sensitive information
We do not ask for sensitive information such as health data. Some details you choose to share, such as accessibility needs, mobility needs or dietary requirements, may reveal information about your health. We use such details only to arrange and provide the service you requested and share them only with the Suppliers considering or providing that service. Please include only what is necessary.
20. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a new “Last updated” date and, where a change is material or where the law requires, we will give you notice, for example by email or through the Services.
21. Contact us
For questions about this Privacy Policy or our handling of your personal information, contact:
ViaHopTrip / Hopline Transfers Inc.
6411 19th Avenue, 2nd Floor
Brooklyn, New York 11204
United States