Privacy policy

Last updated: 31 October 2026

We only ask for what we need to drive you safely and on time. We never sell your data and we don’t use advertising or tracking cookies. This policy follows the EU General Data Protection Regulation (GDPR).

01Who is responsible

The data controller is Premium Paris Transfer, which runs bookings and payments for StarClass Paris:

02What we collect

• Your booking: the ride, date and time, pickup and drop-off places, flight or train numbers, number of passengers and child seats, and any note you add (for example your children’s ages, so we fit the right seats).
• Your contact details: name, email address and mobile number.
• Payment status: the amount, how you paid and when. We never see or store your card number. You enter card details only on the payment provider’s secure page (myPOS for Premium Paris Transfer, or Stripe when offered).
• Messages: what you write to us by email or WhatsApp.
• Technical data: your IP address is kept for up to 2 days to stop booking spam and password guessing. Our host keeps standard security logs.

03Why we use it, and the legal basis

• To arrange, confirm and carry out your ride, take your payment and contact you about it: performance of our contract with you (GDPR art. 6.1.b).
• To keep invoices and accounting records: legal obligation (art. 6.1.c).
• To protect the website and our clients against fraud and abuse, and to answer your questions: our legitimate interest (art. 6.1.f).

We don’t send newsletters or advertising, and we don’t make automated decisions about you.

04Who receives it

• Our team and the chauffeur who drives you, only for your ride.
• Payment providers: myPOS (the secure payment page of Premium Paris Transfer) and Stripe when card payment through Stripe is offered. They process your payment under their own privacy policies.
• Cloudflare, which hosts the website and its booking database.
• Resend, which sends our booking emails, when email confirmation is switched on.
• WhatsApp (Meta), if you choose to message us on WhatsApp.
• Google Fonts, which supplies the website’s typefaces and receives your IP address when the page loads.

We never sell or rent your data.

05Transfers outside the EU

Some of these providers are based in the United States or may process data there. In that case the transfer is covered by recognised safeguards, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

06How long we keep it

• Bookings and their payments: as long as needed for your ride and any questions or claims, then as long as French law requires for accounting records (generally up to 10 years for accounting documents).
• IP addresses used against spam: 2 days.
• Messages: as long as useful to follow up your booking.

07What stays on your device

The website saves a few things in your browser’s local storage so it works smoothly: a draft of your booking form (kept for 7 days so you don’t lose it), your last booking reference, and your language choice. They stay on your device and you can delete them at any time in your browser settings. There are no advertising or tracking cookies. The admin area uses one security cookie for our staff only.

08Security

The website uses HTTPS encryption. The admin area is protected by a password, a secure session cookie and limits on login attempts. Card details are entered on the payment provider’s page, never on this website.

09Your rights

You can ask to see, correct or delete your data, to limit or object to how we use it, and to receive it in a portable format. Write to [email protected]. We reply within one month. Some data must be kept for legal reasons (for example invoices).

If you think we haven’t handled your data properly, you can complain to the French data protection authority, the CNIL (cnil.fr), or to the authority of the country where you live.

10Changes

If we change this policy, we update this page and its date.