Privacy Policy
Last updated: 30 July 2026 · Applies to the PingCab rider app, the PingCab Pro driver app, the PingCab firm portal (admin.ping-cab.com) and this website.
1. Who we are
PingCab is a booking platform connecting riders with licensed local taxi firms in North Wales. It is operated by Ashwrk Ltd (company number 17258873), 14–16 Stanley Street, Holyhead, Anglesey LL65 1HG, United Kingdom ("we", "us"), which is the data controller for the personal data described in this policy. Data protection contact: privacy@ping-cab.com.
Taxi firms on PingCab are independent businesses. For the booking records they keep as licensed operators (and anything they do with data inside their own business), each firm is a separate, independent controller. This policy covers what we do.
2. What we collect and why
Riders (PingCab app)
| Data | Why | Legal basis (UK GDPR Art. 6) |
|---|---|---|
| Name, phone number, email address | Your account; so the firm and driver fulfilling your ride know who they're picking up and can contact you | Contract |
| Device location while using the app | Setting your pickup point and showing nearby availability. Optional — you can type addresses instead | Contract |
| Pickup and drop-off addresses, routes, ride times and states | Arranging and running your ride; your ride history and receipts | Contract |
| Payment data: a Stripe customer reference and payment-method token, amounts, payment outcomes | Charging the fare and connection fee when your ride completes. Full card numbers are held only by Stripe — never by us | Contract; legal obligation (financial records) |
| Camera (optional — card scan) | Only if you choose to scan a card when adding a payment method: Stripe's SDK reads the card with your camera, on your device. No image is stored or sent to us | Contract (at your initiative) |
| In-app chat messages with your driver | Ride coordination; safety and dispute records | Contract; legitimate interests (safety) |
| Ratings you give and receive | Marketplace quality and safety | Legitimate interests |
| Device push token | Ride status notifications | Contract |
| Support requests and complaints | Helping you; recording complaints against firms/drivers | Contract; legitimate interests |
Drivers (PingCab Pro app)
| Data | Why | Legal basis |
|---|---|---|
| Name, phone number, email | Your account, shown to passengers and your firm | Contract |
| Driving licence and taxi driver's licence (badge) images, expiry dates | Verification by your firm before you can carry passengers | Contract; legitimate interests (a safe marketplace); the firm's legal obligations |
| Vehicle assignment | Matching offers to vehicle class; shown to passengers | Contract |
| Live location while online — including in the background | Your firm's live fleet map and dispatch; during a ride, live tracking for your passenger. We keep your current position (continuously overwritten), not a historical trail | Contract |
| Job history and earnings summaries | Your earnings screens; your firm's records | Contract |
| Chat messages, ratings, push token | As for riders | Contract / legitimate interests |
Firm owners and managers (Portal)
| Data | Why | Legal basis |
|---|---|---|
| Your name, email, phone; the firm's trading and legal names, Companies House and VAT numbers, depot address, licensing authority and operator licence number | Registering and verifying the firm; invoices; the legal identity behind bookings | Contract; legitimate interests (verification); legal obligation |
| Operator licence and vehicle certificate documents you upload | The compliance vault you use to evidence licensing | Contract |
| Stripe account and billing references, subscription status | Fare payouts and subscription billing | Contract; legal obligation |
We do not collect special-category data, and we do not carry out automated decision-making with legal or similarly significant effects. Booking broadcasts are simple eligibility checks (online, approved, right vehicle class, active subscription), not profiling.
3. Where data comes from
Almost everything comes from you directly. Location comes from your device with your permission. Payment outcomes come from Stripe. Drivers' approval decisions come from their firm.
4. Who we share data with
- The firm and driver fulfilling a ride — a rider's name, pickup and drop-off, and a contact route (in-app chat, and phone number where used for the booking). Drivers' names, vehicle and plate are shared with the rider. This is the core of the service.
- Your firm (drivers) — your documents, status, live position while online, and job history.
- Processors who run parts of the service for us, under contracts limiting them to our instructions:
- Supabase — database, authentication and file storage (hosted in London, UK/EU region)
- Stripe — payments, payouts and subscription billing (Stripe also acts as an independent controller for its regulated payment activities)
- Google Maps Platform — address search and routing
- Twilio — SMS verification codes at sign-in
- Expo — push notification delivery
- Vercel — hosting for this website and the firm portal
- Authorities — we may share data where the law requires or permits it: with licensing authorities investigating a firm or driver, with the police in connection with crime or safety, or to establish or defend legal claims.
- A buyer or successor of the business, under confidentiality, if Ashwrk Ltd is ever sold or restructured — your rights under this policy would continue.
- We never sell personal data and never share it for advertising.
5. International transfers
Our database and files are stored in the UK (London). Some processors (Stripe, Google, Twilio, Expo, Vercel) process limited data in the United States and elsewhere. Where data leaves the UK we rely on UK adequacy regulations (including the UK–US Data Bridge where the provider is certified) or the UK International Data Transfer Agreement / Addendum with the provider's standard contractual clauses.
6. Location data, in plain words
- Riders: location is used only while you're using the app, to set your pickup and show the ride. Deny it and you can still book by typing addresses.
- Drivers: while you set yourself online, PingCab Pro sends your position — including when the app is in the background or your screen is locked — so your firm's live map works and jobs can reach you. During a ride your position is also streamed to your passenger. Go offline and it stops. We store only your latest position, which is continuously overwritten; we do not build a movement history.
- Location permissions can be changed at any time in your device settings.
7. Cookies & analytics
This website sets no cookies and runs no analytics or tracking of any kind. The firm portal uses only the local storage needed to keep you signed in. The apps use only the local storage and identifiers needed to run the service (sign-in session, push token) — no advertising trackers, no third-party analytics. If we ever add crash reporting or analytics we will update this policy first.
Sponsored content: local businesses can pay for clearly labelled sponsored placements in the rider app (for example, sponsored map pins in the Explore section). These are shown to everyone in the area — we do not use your personal data to choose or target them, we count views only in aggregate, and no personal data is ever shared with the sponsor.
8. How long we keep data
| Data | Retention |
|---|---|
| Account details | While your account is active; deleted or anonymised when you delete your account |
| Ride and payment records | 6 years (tax, bookkeeping and licensing records), anonymised where the account is deleted |
| Chat messages | 12 months |
| Driver live position | Current position only — continuously overwritten while online; goes stale within minutes of going offline |
| Driver compliance documents | While the driver is active with a firm, plus 12 months |
| Firm compliance documents | While the firm is registered, plus 12 months |
| Support and complaint records | 2 years from resolution |
| Push tokens | Until sign-out, deletion, or the token is invalidated by your device |
9. Security
Data is encrypted in transit (TLS) and at rest with our hosting providers. Access inside the platform is enforced row-by-row at the database level — riders see their rides, drivers see their jobs, firms see their fleet. Compliance documents live in private storage with short-lived access links. Card data never touches our systems. No internet service can promise perfect security, but if a breach ever put your rights at risk we would notify you and the ICO as the law requires.
10. Your rights
Under UK GDPR you have the right to access your data, correct it, delete it, port it (receive a copy in a usable format), restrict or object to certain processing, and to withdraw consent where consent is the basis. You can delete your account directly in the app (Profile → Delete account) — ride and payment records we must keep for tax and licensing are anonymised rather than deleted. For any request, email privacy@ping-cab.com; we respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we'd welcome the chance to resolve it first.
11. Children
PingCab is not directed at children. You must be 18+ to book rides, and we do not knowingly create accounts for anyone under 16. If you believe a child holds an account, contact us and we will remove it.
12. Changes to this policy
We'll post changes here with an updated date, and for significant changes we'll notify you in the app or portal before they take effect.
13. Contact
Ashwrk Ltd, 14–16 Stanley Street, Holyhead, Anglesey LL65 1HG · privacy@ping-cab.com