Privacy Notice for Passengers (United Kingdom)
This Privacy Notice provides an overview of who FREE NOW is and how FREE NOW collects, shares and uses personal data about you when you use the FREE NOW ride-hailing app for passengers (the "App"). It also explains how you can exercise your rights under data protection law.
Click on the buttons below to learn more.
1. Who is the data controller and our contact details1. Who is the data controller and our contact details
The controller of the personal data we collect through the App is: Transopco UK Limited (referred to in this Notice as “FREE NOW“). FREE NOW's principal office is located at Harling House, Great Suffolk Street, London SE1 0BS. You can contact us by letter to this address.
FREE NOW has a data protection officer. You can reach our data protection officer most easily via the support page on our website available at: https://support.free-now.com/hc/requests/new. Alternatively, you can write to the address above, addressing your letter for the attention of “The Data Protection Officer.”
2. Important terms2. Important terms
“Personal data” means all information which relates to an identified or identifiable living person. This means that "personal data" includes information that identifies you directly (such as your name, postal address, e-mail address and telephone number) as well as information that allows you to be identified when it is combined with other information (such as an IP address).
“Processing“ means any operation performed on personal data, whether or not those operations are automated – e.g. collecting, organising, saving and deleting personal data are all types of processing (as well as a number of other types of activity).
“Journey” is a tour requested by a passenger through the App.
A "controller" of personal data is the organisation or person that decides how and why personal data will be processed – either alone or jointly with others.
A "processor" of personal data acts on behalf of, and on the instructions of, the data controller in relation to the personal data processing.
3. How we use your personal data.3. How we use your personal data.
The personal data that we collect, and how we use that data, will vary depending on how you interact with our App. In this section, we have set out the various purposes for which we use personal data collected through our App.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal data, including how we balance our legitimate interests against your rights and freedoms where applicable, please contact us using the contact details provided under section 1 above.
1. To register you as a user of the App.
Where you register as a user of the App, we will ask you to provide basic personal information to set up your account and verify your account details via SMS.
Categories of personal data used for this purpose:
- Identity data: Name
- Contact details: E-mail address; phone number
- Optional: Profile picture; home and work address
Our lawful basis for processing this personal data: It is necessary to perform a contract with you. If you do not provide this information, we will not be able to register you as an App user. Where you have chosen to provide the information listed above as 'optional', we process this on the basis of your consent – you can delete this information from the App at any time.
You can also choose to log in or register with the App via your account on a third party website (such as Facebook or Google). Where you choose to do this, you will be transferred to the third party website, where you can provide your account details and consent to relevant permissions. Where you do this, your third party account and your App account will be linked and we will receive some of your personal information from the third-party account.
Categories of personal data used for this purpose:
- Identity data: Name; profile picture
- Contact details: E-mail address
Our lawful basis for processing this personal data: We process this personal data on the basis of your consent. If you do not wish to link your App account with your Facebook or Google account, you can choose to instead create an account directly via the App. If you have logged into the App using a third party account in the past and wish to unlink your accounts, you can do so via the settings on the relevant third-party webpage.
2. To procure and manage journeysyou request through the App.
We will need to process information about you in order to arrange and manage the journeys that you order through the App (whether you travel by taxi, private hire vehicle, e-scooter, e-bike or another mode of transport).
This includes allowing you to interact with maps using Google Maps (which is integrated into the App) so that you can pin the pick-up and drop off locations for your journey on the map or (where you have chosen to activate GPS settings) to identify your location via GPS. We use Google Maps in order to calculate the anticipated cost of your journey and to interactively show you the distance to the vehicle which will be carrying out your journey.
Where you choose to hire an e-scooter, e-moped or rent a car (depending on legal requirements), we will need to verify your driver's licence. You will only be able to hire once the verification is complete. Verification is valid for 36 months, after which point we will ask you to re-verify before you carry out any more hires.
After you have procured a journey, your driver may phone you about your journey (for example, to inform you about delays or ask your to clarify the pick-up location) – however, we use a phone masking service that means the driver will not be able to see your phone number at any time.
Categories of personal data used for this purpose:
- Identity data: Name; photo of face; photo of driver's licence; driver's licence expiration data; address; e-mail address; date of birth; passenger/user ID; profile picture; Miles&More card number; blocked user accounts, gender
- Contact details: E-mail address; phone number
- Journey data:
- such as the time of the booking and the start/end location of your journey – Your start location may be collected by you placing a pin on a map or through your GPS coordinates, depending on the settings you have enabled. Enabling collection of GPS coordinates is optional. Where you have permitted access to GPS coordinates, we will only ever be able to see these where you are logged into and actively using the App on your device,
live location - if your turned on location sharing, we will also collect your live location from the moment you order a ride until it starts. You can change it at any time in the App settings,
- vehicle ID; trip information (like usage of minutes, distance, start and endpoint of tour); price paid and voucher amount; reservation and vehicle state; the areas in which journeys are available for booking; location of hire; date of last trip; energy level of vehicle; number of journeys and revenue in last 90 days
- Technical data: Information about your device (device ID); IP address; country code; trip ID; app version; error codes; app download date
- Financial data: Last four digits of credit card; payment transaction data; non-authorised transactions and payment rejection reasons
- Optional: Home and work address – If you provide your addresses, we will use these to save your favourite journey routes on the App.
Our lawful basis for processing this personal data: It is necessary to perform a contract with you (or to take steps at your request prior to entering into a contract). If you do not provide this information, we will not be able to procure the journey or hire that you request or allow you to interact with maps via the App.
Where you have chosen to provide the information listed as 'optional', we process this on the basis of your consent – you can delete this information from the App at any time.
Alternatively we process this personal data as it is necessary for our legitimate interest to ensure a high quality experience for you.
3. To respond to your enquiries and send you service-related communications.
You can contact FREE NOW in several ways, such as our online contact form (https://support.free-now.com/hc/requests/new), by letter or by phone (where possible). Whenever you get in touch with FREE NOW, we process your personal data so that we can manage and respond to your enquiry or comment. We will also contact you from time to time with service communications (e.g. to provide a receipt for a journey you have taken or to notify you of updates to our T&Cs).
Categories of personal data used for this purpose: Depending on how you choose to contact FREE NOW, we will process the following types of personal data:
- Identity data: Name
- Contact details: E-mail address; postal address; phone number
- Location and related data: Language; country and city
- Communications data: Recordings of phone conversations between you and FREE NOW (where applicable); content of your messages (including any attachments you provide)
- Journey data: Relevant information about your journey or booking
- Technical data: Usage data e.g. log-in time and log-out times
Our lawful basis for processing this personal data: Where you contact us to enter into or enforce a contract between you and FREE NOW, our lawful basis will be that the processing is necessary to perform a contract with you and/or to take steps at your request prior to entering into a contract.
In all other cases, we process this personal data as it is necessary for our legitimate interest in responding to passenger enquiries and in managing our relationship with customers and potential customers. Where you contact FREE NOW by phone call, you will be notified that your phone conversation with FREE NOW is being recorded – however, you will be given the option to refuse to the recording at the start of your call. Call recordings will be automatically deleted after 90 days.
4. To take payment for your journey.
Where you pay for your journey directly via the App, we will process payment-related information about you. Alternatively, you can also choose to connect your App account with a travel expense tool (such as Cytric or Concur). This will automatically transfer your journey invoices to an external service provider, who will process them to provide you/your employer with a detailed overview of travel expenses.
Categories of personal data used for this purpose:
- Identity data: Name
- Contact details: E-mail address; phone number
- Journey data: Start/end location of your journey; type of service; time and date of the booking/journey; distance; duration
- Location and related data: Language; country
- Financial data:
- Currency
- If you have provided a credit card as a means of payment: the first name and surname of the credit card owner, the issuer of the credit card; the first six and last four digits of the credit card number and the expiration date of the credit card
- If you pay via PayPal: the e-mail address of your PayPal account
- If you pay with Apple or Google Pay: the e-mail address of your account.
- Technical data: Information about your device (such as device ID)
- Employment data: If your journey is linked to a FREE NOW for Business account or a mobility budget that is provided by your employer, we will process information about who your employer is
- Communications data: Content of any optional comments you provide (where relevant)
Our lawful basis for processing this personal data: Where you choose to connect your account with a travel expense tool, we process this personal data based on your consent. Your use of a travel expense tool is entirely voluntary and you can withdraw your consent at any time in the App menu.
In all other cases, we process this personal information on the basis that it is necessary to perform a contract with you.
5. To manage ratings of our drivers and passengers.
On the App, you can provide ratings of drivers and vehicles used to provide your journey: your rating will be aggregated with ratings from other passengers and used to display the driver's average rating on the App. FREE NOW will be able to view your rating (from one to five stars) as well as the specific journey to which the rating is associated. However, your specific rating will not be shown to the driver you have rated and your associated journey details and individual rating will not be shown publicly via the App.
In addition, your driver can provide a rating for you as a passenger (for instance, to provide positive feedback or to inform us of problems). FREE NOW will use these ratings to create an average passenger rating score for you. Only you will be able to view this in your FREE NOW passenger profile. Your rating will not be displayed to drivers during the procurement of any journeys and your rating will not be used as the basis for any journey procurement or other decision about you. We urge our drivers to choose the passenger rating on the basis of the politeness and behaviour of the passenger.
Categories of personal data used for this purpose:
- Rating data: Ratings you have given; ratings you have received
- Journey data: Information about the journey to which the rating relates (such as start/end location and duration)
Our lawful basis for processing this personal data: We process this data on the basis of our legitimate interest in further developing and improving the quality of our services.
6. To manage fraud prevention and non-payment risks.
When you create an account with the App, FREE NOW will evaluate the risk of non-payment and/or fraud for each new means of payment linked with your account and for each booked journey. We do this using either of the following two methods in order to make a decision about whether or not you will be able to access the "Pay By App" functionality:
- our specially-trained employees review your information for irregularities and determine, based on their experience and discretion, whether or not you will be offered the Pay By App functionality. If one of our employees decides that you should not be offered the Pay By App functionality because, for example, they have identified a risk of fraudulent activity, they may contact your driver during your journey to let the driver know that your Pay By App functionality should not be accepted; and
- using an automated decision-making process carried out by our European fraud prevention service provider. The provider will calculate a statistical likelihood of non-payment based on information connected with your account and the relevant payment method (and they will not use your personal data for any other purpose). On the basis of this, we will generate a fully automated decision as to whether you will be offered the "Pay By App" function in the App.
If the outcome of our review is that you cannot use the Pay By App functionality then you will be notified of this by e-mail. You will still be able to use the App to procure journeys and pay by other means (such as cash). If you wish to contest a decision that you will not be offered Pay By App, please contact us via https://support.free-now.com/hc/requests/new. You will also be able to contest a decision that has been made by fully-automated means. One of our trained employees will then review and reconsider the decision, taking your viewpoint into account when doing so.
We also carry out fraud prevention checks for your journey by using your profile picture (where you have uploaded one) to identify you. The driver who carries out your journey will temporarily be shown your profile picture to check that it matches the passenger taking the journey.
In addition, we carry out checks of the activity on users of our App to prevent ad-related fraud activity.
Categories of personal data used for this purpose:
- Identity data: Name; profile picture (where provided); address details (if provided); advertising and related IDs connected with your device
- Contact details: The address you provide when registering your account; e-mail address; phone number
- Journey data: Start/end location of your journey
- Location and related data: Language; country
- Finance data: Invoice address (if provided)
- If you have provided a credit card as a means of payment: Credit card issuer and the last four digits of your credit card number, the expiration date of your credit card, the name of the credit card owner
- If you pay via PayPal: the e-mail address of your PayPal account
- Technical information: Information regarding your end user device (device ID, operating system, version); IP address; the version of the App you are using
- Usage data: Information about how you have interacted with the App, including features you have installed and links you have clicked
Our lawful basis for processing this personal data: We process this data on the basis of our legitimate interest in fraud prevention and reducing the risks of non-payment by our customers.
In order to protect you against overpaying for journeys, your driver's mobile phone will transmit GPS coordinates to us at intervals throughout your journey. This helps us to ensure that the driver does not intentionally prolong your journey in order to obtain a higher fee. This means that, if you think you may have paid too much for a journey, you can request that we share information about the route of your journey.
Categories of personal data used for this purpose:
- Location data: GPS coordinates from your journey
- Journey data: such as the time of the booking and the start/end location of your journey
Our lawful basis for processing this personal data: We process this data on the basis of your and our legitimate interests in protection against overpayment and fraud prevention.
7. To fix bugs and improve the functionality of the App.
In order to fix issues, improve App functionality, and adjust the App to suit the needs of our passengers, we carry out technical analysis of how users interact with our App. Where possible, we will anonymise the personal data we use in order to carry out this activity.
Categories of personal data used for this purpose:
- Identity data: Name; profile photo (where provided)
- Contact details: E-mail address; phone number; workplace and home address (where provided)
- Location and related data: Country; language; time zone; GPS coordinates at the time of booking (where provided)
- Journey data: Start/end location
- Technical information: Information about your device (Device ID; advertising ID)
- Usage data: Information about your usage of our App
Our lawful basis for processing this personal data: It is necessary for our legitimate interests in improving the functionality and features of our App.
8. To send you news and personalised offers (marketing).
Where we are permitted to do so, we will send you news and personalised offers relating to products and services offered by FREE NOW and/or our third-party partners that we think may be of interest to you. Depending on the settings you have enabled in your App, we will send these to you by e-mail, text or through in-app or push notifications. You can withdraw your consent to receiving these marketing messages at any time (see section 7 (Your privacy rights) to find out how you can object to marketing messages). You can also withdraw your consent to marketing communications via the “Data Protection Settings" of the FREE NOW passenger App (under your “Profile”), by turning off the toggle relating to “News and personalised offers”Categories of personal data used for this purpose:
- Identity data: Name; passenger ID; profile picture (where provided); App profile type (business or privacy customer); registration status
- Contact details: E-mail address; phone number; home address or business address (where provided)
- Financial data: Method of payment; incentives
- Journey data: Type of journey; journey status; GPS location data at the time of the booking and at the time of the end of the journey (where you have provided access) or pickup and destination locations
- Technical information: Information about your device including the version of the App you are using; device ID, GAID (Google Advertising Identifier), IP address; usage data (usage frequency, information relating to the download of the App); login information
- Location and related data: Language; time zone; city
Our lawful basis for processing this personal data: Where we are permitted to do so by law, we process this information on the basis that it is necessary for our legitimate interest in marketing our services and providing relevant information to our customers and potential customers that we think will be of interest to them.In all other cases, we process this information on the basis of your consent.
9. To analyse the success of our marketing campaigns and advertise our services online.
We place adverts for our services on third-party websites. We also evaluate and analyse the performance of our marketing campaigns and channels to understand how users become aware of our App, how they respond to specific ad campaigns and how they use the App. To do this, we collect and process certain information about the devices used by our users, their online behaviour and the content of websites they visit. The personal data we collect for this purpose are aggregated by our advertising partner and anonymised shortly after collection. Our service providers therefore cannot identify an individual from the personal data they receive.
Categories of personal data used for this purpose:
- Technical data: IP address; user agent; advertising IDs; operating system of the device; device model; information about your journey; device information and settings; applications; downloads; website hits; information about how you use your device and your in-App behaviour; network carrier; as well as original device and attributed media sources
- Location and related data: City; language
- Preference data: Opt outs for advertising measures
Our lawful basis for processing this personal data: It is necessary for the purpose of our legitimate interests in advertising our services and understanding the effectiveness of, and improving, our marketing campaigns.
10. To provide personalised ads.
We use ‘custom audience’ and ‘lookalike’ targeting provided by third parties so that we can display targeted advertisements about our services on third party websites and apps to a specific audience (e.g., depending on the characteristics of the audience). We do this so that ads can be tailored to the likely interests of the relevant individual.
Categories of personal data used for this purpose:
- Contact details: E-mail address (more specifically, we provide your email address to third party platforms, such as social media, to show you ads about FREE NOW on these platforms. This will only be possible if you registered on these platforms ('custom audience' ads). We also provide the email addresses of some of our users to third party platforms where we want to display FREE NOW ads to the registered users of these platforms who share similar characteristics as our own users (e.g. usage patterns, demographics, etc.) but are not yet FREE NOW users.)
- Technical information: Information about your device, such as device ID; Android ID; device type; operating system; IMEI or IP address; advertising identifiers; browser information; information on how you have interacted with the App (such as app downloads, in-app purchases, app calls); measurement data such as interactions with advertisements
- Journey data: use of promotions; journeys taken; cost of journeys
- Location data: City; country; language
- Information about users of third party platforms (in order to identify users that are likely to be interested in FREE NOW's services to show them appropriate ads, and/or to provide FREE NOW with information on the success of its advertising campaigns)
Our lawful basis for processing this personal data: The legal basis we rely on for this processing activity is that you have provided your consent.
You can also withdraw your consent to this via the “Data Protection Settings" of the FREE NOW passenger App (under your “Profile”), by turning off the toggle relating to “Personalized Advertising”. Alternatively, you can send us a message via https://support.free-now.com/hc/requests/new or to by letter to the address set out in section 1 of this Privacy Notice.
Where you withdraw your consent, this will not affect the lawfulness of any processing that we carried out prior to your withdrawal. We will implement your changes as soon as possible (due to technical reasons, this will be no later than 48 hours from the withdrawal).
You can turn off this use of your advertising identifier:
- on an iOS device: under “Settings” – “Data Protection” – “Advertising”, by selecting the option “no ad tracking” or
- on an Android device: under “Settings” – “Google” – “Advertising”, by selecting the option “deactivate personalized advertising”.
You can also reset your advertising identifier at any time in the device settings (iOS: “Reset Ad-ID”; Android: “Reset Advertising-ID”). Where you do this, a new identification number will be generated for your device, which will not be linked with the data collected for your previous advertising identifier.
You can also withdraw your consent to this via the “Data Protection Settings" of the FREE NOW passenger App (under your “Profile”), by turning off the toggle relating to “Personalized Advertising”. Alternatively, you can send us a message via https://support.free-now.com/hc/requests/new or to by letter to the address set out in section 1 of this Privacy Notice.
Where you withdraw your consent, this will not affect the lawfulness of any processing that we carried out prior to your withdrawal. We will implement your changes as soon as possible (due to technical reasons, this will be no later than 48 hours from the withdrawal).
11. Marketing to potential business customers.
FREE NOW collects information about potential business customer contacts from public sources (such as LinkedIn) so that we can send them marketing materials about our services where we think these may be relevant to their business.
Categories of personal data used for this purpose:
- Identity data: Name
- Employment data: Job role; employer
- Contact details: Business contact details
Our lawful basis for processing this personal data: It is necessary for the purpose of our legitimate interest in identifying potential B2B customers and advertising our services.
12. To conduct market research and surveys.
If you have agreed to receive market research and surveys from us (e.g. during registration of your account on the App or by activating the relevant toggle in the App's privacy settings), we will send these to you from time to time. The surveys we send you will be personalised to you. Depending on the settings you have enabled, we will send these to you by e-mail, text or through in-app or push notifications. We do this so we can understand how you use our App and how we can improve our services.
Categories of personal data used for this purpose:
- Identity data: Name; passenger ID; profile picture (if provided); app profile (business or privacy customer); login details (user name)
- Contact details: E-mail address; residential and/or business address (if provided); phone number
- Finance data: Payment method; invoice address on record (yes/no); tip value preference
- Journey data: Registration date; type of journey (booking, try-out ride); registration/journey status; information about vouchers redeemed; information about favourite drivers and number of journeys taken/cancelled; journey rates and values; ratings.
- Location and related data: Language; GPS coordinates at the start/end of journey (if provided) or start/end location of journey
- Technical data: App version; usage data (usage frequency; information about the download of the App; date of the last login; push tokens)
Our lawful basis for processing this data: We process this personal data on the basis of your consent.If you have provided your consent to this activity and you subsequently do not wish to receive these messages you can easily withdraw your consent by de-activating the relevant toggle in your “Data Protection Settings" of the FREE NOW passenger App (under your “Profile”). See also section 7 (Your privacy rights) on other ways you can withdraw consent and how we will implement your withdrawal.
13. To run our loyalty, referral and partnership programs.
If you take part in one of FREE NOW's loyalty or referral programs or partnership schemes we will use your personal data as necessary to provide you with the relevant loyalty or partnership rewards and to confirm your participation in the program. The terms and conditions of the relevant program will be provided to you at the time you sign up to it. In particular, we run a referral scheme for business accounts, by offering rewards when the new referred customer signs up and takes a certain number of journeys. If you are a B2B passenger that is referred through this scheme, we will contact you to ask if you would like to sign up to our services, and we will collect and share information with the person who referred you about your sign-up activity and the number of journeys you take.
Categories of personal data used for this purpose:
- Identity data: Name
- Journey data: App usage information such as the number of journeys taken; the cost of journeys; distance travelled
- If you wish to collect miles from our frequent flyer program partners by using the Pay By App function (insofar as this is available), your respective program number (e.g. Miles&More number)
Our lawful basis for processing this data: Where participation in the program involves users signing up to a contract, we process this personal data on the basis that it is necessary for the performance of a contract with you (or to take steps at your request prior to entering into such a contract).
Otherwise, we process this personal data on the basis that it is necessary for our legitimate interest in conducting the loyalty or partnership program. However, your participation in any loyalty or partnership program is voluntary and you can choose not to participate and/or end your participation in accordance with the terms of the relevant program.
Lastly, the legal basis we rely on for the B2B referral scheme is the consent of the referred passenger. You have a right to withdraw it at any time and please see section 7 (Your privacy rights) on how you can withdraw consent and how we will implement your withdrawal.
14. To handle accident reporting.
Unfortunately, accidents sometimes happen. If you or your driver is involved in an accident during a journey, we will use some of your personal information in order to carry out internal reporting, provide information to our insurers and other relevant third parties, and comply with our legal obligations.
Categories of personal data used for this purpose:
- Identity data: Name
- Contact details: E-mail address; phone number
- Journey data: Details of the accident, including information your journey location, vehicle type, and journey time
- Health data: if anyone has been injured during the accident
Our lawful basis for processing this data: It is necessary for the purpose of our legitimate interests in maintaining internal records about accidents that take place, notifying our mobility service providers of incidents in accordance with our contractual obligations, and processing insurance claims.
We will also process your personal information on the basis that it is necessary for compliance with a legal obligation to which we are subject, where this is the case.
In limited instances, we will process this information to protect the vital interests of you or someone else.
15. To comply with our legal obligations.
We may use your personal data to provide information to competent authorities where we are required to do so by applicable laws or regulations (e.g. to our transport licensing authority or insurers).
The types of personal data we share for this purpose will vary depending on the nature of the legal obligation. However, common categories of personal data used for this purpose are:
- Identity data: Name, details about your FREE NOW account.
- Contact details: E-mail address; phone number.
- Journey data: Information about your journeys, such as the start/end point.
- Usage data: Information about your usage of our App.
16. Links to third-party websites.
Where you access a third party's website – for example, by following a link to our Facebook page via our website – the provider of that website will be the controller of the personal data you provide on that site. For information about how they will handle your personal data, you should refer to the privacy notice on that website.
4. Third parties that we share your personal data with4. Third parties that we share your personal data with
We share your data with the following categories of recipients.
- With our group companies who process personal information for purposes that are described in this Privacy Notice. We act as a joint controller with our group companies for these purposes. You may exercise your data subject rights under the GDPR in respect of and against each of the parties. However, to speed up the response, we would kindly ask you to exercise your rights at https://support.free-now.com/hc/requests/new. Our group companies, to which we transfer each of the personal data types described in this Privacy Notice, operate in the same sector as us and are based inside the UK/EEA.
- Third party services providers and partners who provide data processing services to us or who otherwise process personal information for purposes that are described in this Privacy Notice. We work with the following categories of third party service providers:
- Transportation companies and drivers to provide journeys that you request through the App. To be able to provide these services, these providers receive your:
- Identity data: name; profile picture (if you have chosen to upload this to the App). Drivers will only be shown your profile picture temporarily around the time of your booking;
- Journey data: Journey booking information including the start/end location; live location;
- Whilst your driver will be able to phone you about your journey (e.g. to warn you of traffic jams), we use a phone number masking service that means the driver will not be able to see your phone number;
- Aggregated driver rating.
- Third parties that help enhance the security and functionality of our App so that we can better tailor it to our customers' needs.To be able to provide these services, these providers receive the personal data set out under section 3.7 above. We also use a provider of multi-factor authentication when you register on the App.
- Payment service providers and travel expense tool providers (where you choose to connect your account with a travel expense tool).To be able to provide these services, these providers receive the personal data set out under section3.4 above.
- Mapping software providers (such as Google Maps) so that we can allow you to interact with maps on the App. To be able to provide these services, these providers receive your:
- GPS location data (in an anonymised form so they cannot identify you)
- Anti-fraud and non-payment service providers. To be able to provide these services, these providers receive the personal data set out under section 3.6.
- Our advertising services and analysis partners.To be able to provide these services, these providers receive the personal data set out under section 3.9 and 3.10.
- Customer communications services providers. To be able to provide these services, these providers receive the personal data set out under section 3.3.
- Our loyalty programme partners. To be able to provide these services, these providers receive the personal data set out under section 3.13.
- E-scooter, e-moped, e-bike and car rental companies , where you choose to hire these vehicles, or public transport ticketing companies. These third parties receive the personal data that is listed under section 3.2. Where you rent a vehicle provided by these companies, FREE NOW will act as a joint controller of your personal data alongside the vehicle provider. This means that FREE NOW and these providers will each process personal data. You can find out more about how these parties handle your personal data under their privacy notices available at:
You may exercise your rights under the GDPR in respect of and against each of the parties (either FREE NOW or our third-party service mobility provider). However, to speed up the response, we would kindly ask you to exercise your rights via https://support.free-now.com/hc/requests/new.
- Public transport companies, where you decide to purchase tickets for public transport. In order for the tickets to be properly issued and the data encoded into the QR code displayed as part of the ticket, these providers might receive your name and e-mail.
- FREENOW also partners with third party providers (e.g. car rental companies) to offer their services within our App. For certain services you may be redirected to the provider’s website to order the service there. However, in order to process the reservation and payment, these third parties may receive the personal data that is listed under section 3.2. Your data will not be shared unless you decide to use that service and you will be always informed which company receives your personal data.
- Identity verification provider, where you are asked to verify your driver's licence information to hire an e-scooter, e-moped or rent a car. To be able to provide these services, these providers receive the photo of your face and your driving licence.
- If your FREE NOW account is connected to your employer (e.g. you pay for your tour via a business account and/or mobility budget provided by your employer), we will share personal data with your employer or other owner of the business account. To process this payment we will share your invoicing data, including your name, email address, fleet type, tour price and start/end location of your journey, but only to the extent that the relevant journey is paid by the business account or in scope of the mobility budget granted by your employer.
- Any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary:
- as a matter of applicable law or regulation,
- to exercise, establish or defend our legal rights (or where it is necessary for our legitimate interests in enabling our drivers or partners to exercise their legal rights), or
- to protect your vital interests or those of any other person.
- An actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice.
- Any other person with your consent to the disclosure.
5. Cookies and similar tracking technology5. Cookies and similar tracking technology
6. How we transfer your data internationally6. How we transfer your data internationally
In some cases, your personal information is transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.
Specifically, our group companies are located inside the UK/EEA and we store all our data with a cloud service provider within the EU or in IT infrastructures and systems (employee computers) at our sites within the EEA/UK. Our third-party service providers and partners operate around the world. We have selected our service providers carefully to check that they will protect the personal data we share with them and we have engaged them in writing.
Where we transfer your personal data outside the UK or EU/EEA, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. This includes:
- relying on the adequacy decisions in relation to transferring personal to third parties in other jurisdictions that have been deemed by the European Commission or the Information Commissioner in the UK to provide an adequate level of protection for personal data;
- entering into Standard Contractual Clauses for the transfer of personal data that have been approved by the European Commission of the UK’s Information Commissioner where appropriate. We have entered into "controller-to-processor" clauses with our service providers and "controller-to-controller" clauses with any parties that act as a joint or independent controller.
For more information on the appropriate safeguards that we have implemented, you can contact us using the details provided in section 1. We do not sell any personal data to third parties.
7. Your privacy rights7. Your privacy rights
https://support.free-now.com/hc/requests/new or a letter to the address mentioned under section 1 above.
- You have the right to access, correct, update or request deletion of your personal data;
- you can ask us to restrict processing of your personal information or object to processing;
- you can request portability of your data;
- you have the right to opt-out of marketing communications we send you at any time (you can also exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you or through the Privacy menu on the "App"). We will implement your opt-out as soon as possible (due to technical reasons, this will be within 48 hours);
- if we have collected and process your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent;
- you may at any time lodge a complaint with the UK’s data protection authority if you are unhappy with how we have used your data. The ICO’s address is:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilms
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
8. How we keep your personal data secure8. How we keep your personal data secure
We have taken appropriate technical and organisational measures to keep your personal data secure (in particular to protect your personal data against unauthorised access by third parties, as well as accidental or intentional modification, loss or destruction). We review these measures periodically and change them in line with state of the art security processes.
The transfer of your personal data from your device (e.g. smartphone) to us is always encrypted. FREE NOW is PCI DSS (Payment Card Industry Data Security Standard) certified.
9. How long we retain your data9. How long we retain your data
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or it to comply with applicable legal, tax or accounting requirements). In particular:
- Call recordings are deleted after 90 days;
- Inactive accounts are deleted after 3 years of inactivity.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
10. Updates and changes to this Privacy Notice10. Updates and changes to this Privacy Notice
We may modify this Privacy Notice from time to time in the future in accordance with applicable data protection laws and regulations or in response to changing technical or legal developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.
Last updated: November 2023