Last updated 2026-09-21
What we collect
For a booking: the passenger's name, contact details, pickup and destination addresses, flight or tail-number details, vehicle and service preferences, and payment details processed by our payment provider. For a corporate or household account: the traveller and booker details, standing instructions, policy rules, cost centres and invoicing details the account holder gives us. For a wedding, prom, group or travel-desk programme: the schedule, the guest or delegation list and the itinerary the client sends. From the website: analytics and, where enabled, chat data described under cookies.
Why we collect it
To fulfil the booking: to assign a chauffeur, to track the flight, to reach the passenger on the day, to issue the receipt. To operate an account: to apply profiles, to enforce policy, to invoice, to keep the duty-of-care record a client requires. To plan a programme: to build the vehicle list and the timeline. To improve the service: feedback and correspondence are read by the coordinator. We do not sell data and we do not use it for marketing to passengers who have not asked for it.
Who sees it
The desk; the coordinator for the account or programme; and the chauffeur assigned to a journey, who sees the passenger's name, pickup, destination and standing instructions for that journey only. Partner operators fulfilling stretch limousine, bus and coach bookings, and network operators fulfilling bookings at airports beyond Ontario, are bound by the network's confidentiality terms and by the LondonLimo.net standard. Our payment provider and, where the travel desk is used, BookingWorldwide.net see what they need under their own policies. Chauffeurs sign a confidentiality undertaking that survives their engagement with us. Information is disclosed to authorities only where the law requires; on a cross-border journey the passengers' documents are shown to the border agencies by the passengers themselves.
Medical, minor and sensitive bookings
Bookings that involve a hospital or medical journey, an unaccompanied minor, a prom group or a passenger who asks for discretion are held by the coordinator and the desk only, shared with the chauffeur journey by journey, and not used for any other purpose. Clients who require a withheld name or additional agreements should say so at booking.
Cookies and analytics
The site uses Google Analytics to understand how pages are used and a Tawk.to chat widget so that the desk can answer questions on the page; both set cookies where enabled. The reservation engine is provided by our booking-platform partner and sets the cookies it needs to hold a booking in progress under its own policy. The travel desk's search panel opens BookingWorldwide.net, which applies its own policy.
How long we keep it
Booking and journey records for seven years for accounting and duty-of-care purposes; profiles and accounts for as long as the account is open and for one year after; programme files for three years or, on request, destroyed after the programme; correspondence for three years. Card numbers never reach our systems; the payment provider holds them under its own security standard.
Your rights
You may ask what we hold about you, ask us to correct it, ask us to delete it where we are not required to keep it, and object to its use. Send the request through the contact page; a coordinator answers within thirty days. This policy is governed by the law of Ontario, Canada, and by the federal Personal Information Protection and Electronic Documents Act.