Privacy Policy

1. Scope

Classic Travel ("La Limo", "we", "us" or "our") takes the protection of your personal data seriously and processes it in accordance with applicable data protection law.

This Privacy Policy explains which of your personal data we process, and for what purpose, when you:

• visit our website at www.lalimo.app;
• use the La Limo mobile application; or
• register, book, or take a ride through La Limo

(together, the "La Limo Services").

The La Limo Services are not directed at minors. Account holders must be adults.

This policy is framed in accordance with the EU General Data Protection Regulation ("GDPR"). Where the data protection laws of the Arab Republic of Egypt (including Law No. 151 of 2020) also apply to our processing, we provide you with equivalent protections and rights.

The La Limo app and website are developed, hosted, maintained, and technically operated on our behalf by Lanes LLC, which processes your personal data only for us, as our processor and on our instructions (see sections 2 and 15). Customer and trip data processed through the La Limo Services belong to Classic Travel. Both Classic Travel and Lanes LLC comply with the Egyptian Personal Data Protection Law No. 151 of 2020.

2. Controller

The controller responsible for the processing of your personal data is:

Classic Travel
Data controller — service provider and merchant of record
10 Ahmed Zou Alfakar Street, San Stefano, Alexandria, Egypt
Commercial Register No.: 14857
Tax registration number: 474-679-446
General contact: contact@lalimo.app
Privacy and data requests: privacy@lalimo.app

Lanes LLC
Data processor — develops, hosts, maintains, and technically operates the La Limo Services, and processes personal data only on Classic Travel's documented instructions (see section 15)
10 Ahmed Zou Alfakar Street, San Stefano, Alexandria, Egypt
Commercial Register No.: 87955
Tax registration number: 778-904-229
Technical support: support@lalimo.app

3. Data Protection Officer

We have not appointed a formal Data Protection Officer. You can direct any question or request relating to your personal data to privacy@lalimo.app, and our team will handle it.

4. Data Security

Security measures. We use appropriate technical and organizational measures to protect your personal data at a level suited to the risk, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing.

Encryption. Data transferred between your device and La Limo is generally encrypted in transit (TLS encryption). You can usually recognize an encrypted connection by the lock symbol in your browser's address bar.

Email. If you contact us by email, please note that we cannot fully rule out access by third parties. For confidential information we recommend using a secure channel; please let us know if you would like to correspond in encrypted form.

5. Website and App Usage Data

Server logs. When you use the La Limo Services, our hosting and cloud infrastructure automatically records limited technical data in standard server logs — such as your IP address, the date and time of a request, the status code returned, and your browser or app version. We do not build advertising profiles. Our website uses no analytics or tracking; the app uses crash reporting and product analytics as described in section 7.

Device attestation. The app uses Firebase App Check, which asks your device's operating system (Apple's App Attest or Google's Play Integrity) to confirm that requests come from a genuine, unmodified copy of the La Limo app. This produces a short-lived attestation token for the device and does not identify you. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in protecting the service from abuse).

Purposes. We process this log data only to establish and maintain the technical connection, to keep the La Limo Services secure and functioning, and to detect and prevent misuse such as fraudulent bookings or cyberattacks.

Deletion. Log files are deleted or anonymized once they are no longer required, unless we are required to retain them by law.

Legal basis. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in a secure, functioning service) and, for registered users, Article 6(1)(b) GDPR (performance of a contract — see section 10).

6. Cookies and Local Storage

Our website is a static site: it sets no cookies and uses no analytics or tracking technologies.

The La Limo app stores your settings (such as language, currency, and notification history) locally on your device so the app works and remembers your preferences. This data stays on your device and is deleted when you uninstall the app. Essential technical storage of this kind requires no consent; the legal basis is Article 6(1)(f) GDPR (legitimate interest in a functioning service).

7. The La Limo Mobile App

Overview. The La Limo app is the main way to access the La Limo Services, and broadly the same processing applies as for our website (see section 5) and for registered use (see section 10).

One device per account. To secure your account, the app assigns your device a session code and allows one active device per account — signing in on a new device signs out the previous one.

Push notifications. The app can send push notifications to your device — ride status updates, replies to your support chat messages (see section 13), and, when your chauffeur is on the way, the verification code used to identify your ride. If you enable notifications, a push token for your device is stored with your account and removed when you sign out. The legal basis is Article 6(1)(a) GDPR (consent), and you can turn notifications off at any time in your device settings.

Crash reporting and product analytics. The app uses Firebase Crashlytics and Google Analytics for Firebase, both provided by Google (see section 15). Crashlytics sends us a report when the app crashes or hits an error, containing the technical error details, your device model, operating system version, and app version. Analytics records how the app is used — the screens you open, booking steps taken, cancellations and refunds (including the amounts), payment attempts, and errors — together with your language, currency, country, and theme settings. Your La Limo account identifier is attached to these records so that we can trace a problem you report to what happened in the app. We use this data only to find and fix faults and to improve the service: it is not used for advertising, is not combined with data from other apps or websites, and is never sold. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in a stable, improving service). You can object to this processing at any time by emailing privacy@lalimo.app (see section 16).

8. Location Data

Location permission. The La Limo app accesses and collects your device's location data (precise GPS location and, where precise location is unavailable or not permitted, approximate location). We only access your device location with your permission, which your device asks you for the first time the app needs it.

How we use location data. We access, collect, and use location data to:

• Set your pickup point — to detect your current position, suggest it as your pickup location, and show your position and nearby availability on the map;
• Arrange and perform your ride — to match you with a chauffeur, calculate routes, distances, prices, and estimated arrival times, and let you follow the vehicle on the map during the ride;
• Provide support and keep the service safe — to help locate a ride in progress if you contact support, and to detect and prevent misuse such as fraudulent bookings.

Collection and sharing. Location data is collected only while you are actively using the app; the app does not track your location in the background. During an active ride, your live position is used on your device to show your progress on the map, and your chauffeur's position is shared with you on the map so you can follow the vehicle. Messages you send in the in-app chat do not contain your location. To carry out a ride you have booked, we share the relevant location information (such as your pickup point and destination) with the chauffeur or partner transportation provider performing it (see section 10). Addresses and coordinates you search for are processed by Google Maps Platform to provide address search, geocoding, and route calculation (see section 15).

Withdrawing permission. You can withdraw your location permission at any time in your device settings. You can still use the La Limo Services without it by entering your pickup address manually, although location-based features (such as automatic pickup detection and live map display) will then not be available.

Legal basis and retention. The legal basis is Article 6(1)(a) GDPR (consent, given through your device's permission dialog) and Article 6(1)(b) GDPR (performance of a contract, where location data is needed to arrange and perform the ride you booked). We retain location data only for as long as necessary for the purposes described above (see section 18).

9. Account Sign-In

You create and access your La Limo account using Sign in with Google or Sign in with Apple — these are the only sign-in methods; La Limo does not store a password for you. When you sign in, the provider transmits certain personal data to us (such as a verified email address, and your name where you choose to share it) to set up and identify your account. The provider will tell you what data is shared, and the transfer requires your consent.

The legal basis for processing data via third-party sign-in is Article 6(1)(a) GDPR (consent), which you may withdraw at any time with effect for the future.

10. Account and Booking Data

What we collect. When you register and use the La Limo Services or book a ride, we process the personal data you provide (your "customer data"), including:

• Account details — first and last name, email address, telephone number with dial code, date of birth (to verify that you are at least 18 years old), language and country, and an optional profile photo;
• Booking details — pickup location, destination and stops, dates and times, flight number, selected vehicle, and any special requests such as child seats;
• History — your previous orders and rides, your La Limo Balance movements, and any driver ratings or reviews you submit;
• Billing and payment data — receipts and invoices, and limited payment information (the card brand and last four digits only — see section 12).

How we use customer data. We use your customer data to provide the La Limo Services — to create, maintain, and support your account, to process your bookings and refunds, and to arrange and deliver the rides you request. To do this, we share the data necessary to complete your ride with the chauffeur or partner transportation provider performing it, and your chauffeur can contact you by phone or through the in-app chat during a ride.

What your chauffeur sees. To perform a ride, the chauffeur's app receives your first and last name, telephone number with dial code, country, and profile photo, together with the booking details (pickup, destination and stops, dates and times, flight number, number of passengers and pieces of luggage, and any child-seat request). Chauffeurs may use this information only to perform your ride and are bound to keep it confidential. In return you see the chauffeur's name, photo, and telephone number for the ride. The rating and review you submit after a ride are stored against the chauffeur's record and may be shown to the chauffeur and to our staff.

Preventing misuse. We also process customer data to detect and resolve technical or operational problems and to prevent misuse (such as fraudulent bookings or cyberattacks). In that respect the legal basis is Article 6(1)(f) GDPR (our legitimate interest).

Legal basis. The legal basis for processing your customer data to register you and perform your bookings is Article 6(1)(b) GDPR (performance of a contract). Where you provide additional, voluntary information (such as a flight number or a profile photo), the basis is Article 6(1)(a) GDPR (consent) together with our legitimate interest under Article 6(1)(f) GDPR.

11. Internal Access and Staff Tools

Our operations staff use an administrative dashboard, provided by Lanes LLC, to dispatch rides, handle refunds, and answer support requests. Staff sign in with a company Google account and are given one of several access levels, so that each person sees only what their role needs.

Through the dashboard, authorized staff can view your profile (including your date of birth and profile photo), your booking history, your payment records (the card brand and last four digits, payment-provider references, balance movements, and refunds), the in-ride chat with your chauffeur and the record of calls placed through the app (see section 13), and the chauffeur's live position and past route for your ride. They can edit a booking's date, vehicle, or chauffeur, cancel and refund a booking, and reply to you in the support chat. For accounting and operations, booking and customer records may be exported to spreadsheet or PDF files, which are handled under the same confidentiality obligations.

The legal basis is Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (our legitimate interest in running, securing, and supporting the service).

12. Payment and Fraud Prevention

Payment. Bookings are paid by credit or debit card, Apple Pay (on iPhone and iPad), or your La Limo Balance. Card details are handled by a certified payment service provider whose systems meet applicable security standards (such as PCI DSS). We use Cybersource, a Visa company, as our payment service provider. Your card number is encrypted in your device and sent directly to Cybersource, which returns a token — it never passes through our systems. To process a payment we transmit to Cybersource your email address, the amount and a reference for your booking, and, for the 3-D Secure check that your bank uses to confirm the payment is really you, technical details of the device you are paying from (its IP address, browser or app user agent, language, screen size, and time zone). We do not send Cybersource your name, address, or telephone number; the payment request carries a fixed placeholder name and address instead. Please refer to Cybersource's own privacy information for details of its processing. La Limo does not save cards and never stores full card numbers: you enter your card at each payment, and we keep only the card brand and last four digits of a completed payment on its record. The legal basis is Article 6(1)(b) GDPR (performance of a contract) and, for fraud prevention, Article 6(1)(f) GDPR (legitimate interest).

Payment currency and accounts. We hold two merchant accounts with Cybersource, one settling in Egyptian pounds and one in US dollars. Each time you pay, we determine from the card you enter which country issued it: Egyptian-issued cards are charged through the Egyptian pound account, and cards issued elsewhere through the US dollar account, converted at our current reference rate (see section 15). A refund goes back through the account that took the payment. A card issued outside Egypt may therefore be billed in US dollars and your bank may apply its own conversion.

Fraud prevention. To confirm that a payment method is used by its rightful owner and to prevent fraud, data such as IP address, email address, and payment information may be processed and checked. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in preventing fraud).

Whistleblower reporting. We are committed to ethical and transparent business practices. If you become aware of conduct that may involve fraud, corruption, harassment, discrimination, or other misconduct, you can report it confidentially to support@lalimo.app. Reports are handled sensitively.

13. Communicating with Us and with Your Chauffeur

If you contact us — by phone, email, or the contact page on our website — we process the information you provide to handle your request and respond to you. The legal basis is Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (performance or initiation of a contract).

Ride chat and calls. During a ride, the in-app chat connects you directly with your chauffeur. Chat messages are transmitted and stored through our infrastructure as part of the ride record, alongside the chauffeur's location trail (see section 8), and can be read by our operations staff during and after the ride for support and safety purposes (see section 11). Your messages do not contain your location. You can also call your chauffeur directly; the call is placed by your phone, not through La Limo, but the app records that you tapped Call so that our staff can see you tried to reach the chauffeur. Chat messages and call records are retained with the ride record (see section 18).

Support chat. The app also offers a support chat with La Limo, separate from any ride. Messages you send there, and our staff's replies, are stored with your account until it is deleted so that we can follow up on your request. The legal basis is Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (our legitimate interest in providing support).

14. Service Emails

We send you transactional emails about your account and bookings — a welcome message, booking confirmations, receipts and invoices, ride updates, payment-failure notices, tip receipts, refund and cancellation confirmations, and notices when La Limo cancels a ride — through our email delivery provider, SendGrid (see section 15), which receives your email address and the booking details needed for the message. These are service messages required to perform your contract; the legal basis is Article 6(1)(b) GDPR.

We currently do not send marketing emails or newsletters, and our emails contain no tracking pixels. If we introduce marketing communications in the future, we will ask for your consent first and you will be able to unsubscribe at any time.

15. Service Providers (Processors)

Where we involve third parties in our processing — for example, hosting, infrastructure, payment, or communication providers — they act on our behalf as processors under appropriate safeguards (in particular Article 28 GDPR), and only where they offer sufficient guarantees of suitable technical and organizational measures.

Our providers currently are:

• Lanes LLC — development, hosting, maintenance, updates, and technical operation of the La Limo app, website, and backend, on our instructions;
• Google / Firebase — app and cloud infrastructure; your account and booking data is stored on Google Cloud, with our backend services running in the United Kingdom (europe-west2, London) and live ride tracking and chat stored in the Realtime Database in Belgium (europe-west1);
• Google Analytics for Firebase and Firebase Crashlytics — crash reporting and product analytics for the app (see section 7);
• Google Maps Platform — address search, geocoding, and route calculation; receives the addresses you search for, place identifiers, and route coordinates;
• Cybersource (a Visa company) — payment processing, single-use card tokenization, 3-D Secure authentication, and refunds (see section 12);
• Apple — Sign in with Apple, and Apple Pay where you choose it as your payment method;
• Google — Sign in with Google;
• AirLabs — flight tracking for airport pickups; receives only the flight number and date you provide;
• ExchangeRate-API — currency reference rates used to display prices in your chosen currency and to convert charges made through our US dollar account; it receives no personal data;
• SendGrid (Twilio) — delivery of our transactional emails; receives your email address and the booking details needed for the message (see section 14);
• Google Gemini (Google AI) — used by our staff tools to read booking spreadsheets supplied by partners; it may receive the names and telephone numbers in those files, and is not used by the app itself.

Where a processor is located outside your country, we ensure the transfer is covered by an appropriate safeguard, such as an adequacy decision or standard contractual clauses (Articles 44–46 GDPR).

16. Your Rights

If we process your personal data, you have the following rights:

• Right of access (Article 15 GDPR) — to obtain confirmation of whether we process your data and to receive a copy and further information.
• Right to rectification (Article 16 GDPR) — to have inaccurate or incomplete data corrected or completed.
• Right to erasure (Article 17 GDPR) — to have your data deleted where the conditions are met.
• Right to restriction (Article 18 GDPR) — to have processing restricted in certain cases.
• Right to object (Article 21 GDPR) — to object, on grounds relating to your situation, to processing based on our legitimate interest, and to object at any time to direct marketing.
• Right to data portability (Article 20 GDPR) — to receive certain data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to withdraw consent (Article 7(3) GDPR) — to withdraw any consent at any time, with effect for the future, by emailing privacy@lalimo.app. Withdrawal does not affect processing carried out before it.
• Right to lodge a complaint (Article 77 GDPR) — to complain to a competent data protection supervisory authority.

To exercise any of these rights, contact privacy@lalimo.app.

17. Automated Decision-Making

In limited cases, you may be subject to an automated decision (Article 22 GDPR) — for example, if you re-enter a payment method that has previously failed, where there are current indications of a fraudulent booking, or where a pickup or drop-off point lies outside our service area or in a location we have blocked. In such cases, a booking request may be declined. Such a decision may be necessary to enter into or perform a contract (Article 22(2)(a) GDPR). You can contact us at privacy@lalimo.app to express your point of view, request human review, or contest the decision.

18. Data Retention and Account Deletion

Retention periods. We delete your personal data once the legal basis for processing it no longer applies. Note that more than one legal basis may apply at the same time, and a new one (such as a statutory retention obligation under commercial or tax law) may take effect when another ends. We retain data only for as long as necessary or as required by law.

Account deletion. You can request deletion of your account at any time in the app (Profile → Delete Account). Deletion is not possible while you still have a ride booked or in progress, so cancel or complete those first. Your account is then deactivated immediately: sign-in is blocked and the email address remains reserved so it cannot be reused, and we confirm the deactivation by email. Your profile, your profile photo, your support chat, and your La Limo Balance are deleted at the same time; any remaining balance is not paid out. Records of your bookings, payments, and refunds — including the ride chat and location trail of each ride — are retained for as long as commercial and tax law require and for fraud prevention, and are then deleted or anonymized. Deleted data may persist in our backups for up to 7 days. To request erasure of specific personal data beyond this, contact privacy@lalimo.app (see section 16).

19. Changes to This Policy

We may update or amend this Privacy Policy where necessary — for example, due to changes in law, regulation, or our services. The current version is the one published in the La Limo Services.

Cookie Notice

Our website sets no cookies and uses no tracking technologies. The La Limo app stores essential settings locally on your device only (see section 6). Should we introduce non-essential cookies or similar technologies in the future, we will ask for your consent first.