1. Scope and contact
MyTaxiHub is responsible for the information it handles for its website, bookings, planning tools and driver-registration/portal operations. Contact helpmytaxihub@gmail.com or WhatsApp +94 75 015 5962 about privacy. This notice does not merge records with the other Shehan Tour Solutions services.
2. Customer, journey and account information
We process account identifiers and authentication/session information; names, email, telephone or WhatsApp details and country where provided; pickup and destination, route, date/time, traveller and luggage counts, selected category or safari package, quoted price, references and booking status.
We also process flight/pickup instructions, special requests, account booking history, support correspondence, completion or review information where provided, and payment or refund records where relevant. Do not include unnecessary sensitive information in free-text notes.
3. Tour planning information
Plans may include destinations, preferences, group details, dates, route/itinerary choices, saved revisions, sharing settings and quote acceptance records. A shared link can allow others to view what the sharing screen permits. Share only with intended recipients and review the information included.
4. Driver and vehicle information
Driver onboarding can involve legal name, contact details, application profile, driving or verification documents, vehicle registration and photos, application decisions and audit records. Authorised staff review these records; necessary driver or vehicle details may be shown to customers for assigned trips. Verification documents are not intended for public browsing.
5. Purposes and reasons for processing
We use information to answer inquiries, calculate and record quotes, administer accounts, arrange and dispatch trips, operate tour plans, verify drivers and vehicles, communicate service changes, handle complaints/reviews and protect the platform. Depending on the activity, this supports a requested or agreed service, an applicable legal duty, proportionate operational/security needs, or optional consent. Booking acceptance is not blanket marketing permission.
6. Sharing and service providers
Supabase supports authentication, database and storage functions; Vercel supports website hosting. Google Maps, Places and Routes services may process location/search and route information needed for their functions. Email and WhatsApp providers process the details needed for delivery.
Assigned drivers and operational partners receive necessary journey and contact information, not unrestricted access to your account. Staff access is role-dependent. Lawful disclosures may be made to authorities or advisers where required. We do not sell personal information or automatically share it with another brand merely because the brands are linked.
7. Cookies, browser storage and measurement
Authentication and essential website functions may use cookies or browser storage for sessions, recovery and booking/planning state. Removing these can interrupt sign-in or a pending journey.
Global Google Analytics and advertising tags are deliberately absent from the reviewed website layout. The existence of analytics helper code does not mean those tags are active. Hosting/security logs may still process IP addresses, timestamps, browser and request/error details. Any later optional measurement must have appropriate notice and controls before introduction.
8. Communications and location
Email or WhatsApp may deliver authentication and booking-related updates. Delivery failures do not change a saved booking; check the account or ask support. Essential service messages are distinct from optional marketing.
Maps use the locations you enter and any device-location access you choose to permit. This notice does not claim continuous GPS tracking is active on the public website. Driver app or live-location features must present their actual permissions and collection behaviour when enabled; testing a staging app does not itself activate production tracking.
9. Retention
We retain account, booking, communication and operational records for as long as needed to provide services, handle complaints and disputes, prevent misuse and meet applicable accounting or legal requirements. We delete or minimise information when no longer needed. Deleting an account may not delete a record that must lawfully be retained; backup and provider records may take longer to expire.
10. Driver-document retention
Driver verification records have a configurable retention process for superseded, abandoned, declined or archived applications, while active approved records may be retained for the active relationship. Cleanup timing depends on the configured policy and operational execution; this notice does not promise deletion on an unverified fixed day.
11. Security and international processing
We use access controls and other practical safeguards appropriate to the service. No website, app or messaging platform can guarantee absolute security. Keep passwords, sign-in codes and private links confidential, and report suspected misuse promptly.
Hosting, database, authentication and communication providers may process information outside Sri Lanka. We use these services for the purposes described here and seek appropriate safeguards where required. We do not promise that all information is stored only in Sri Lanka.
12. Your choices and privacy requests
Contact the business using the details below to request access, correction or deletion, ask about use of your information, withdraw optional consent, or raise a concern. We may ask for proportionate identity verification and explain any lawful reason a record must be retained. Do not send passwords or sign-in codes. Rights available under applicable law remain unaffected.
Where applicable, you may raise a privacy concern with Sri Lanka’s Data Protection Authority at www.dpa.gov.lk. A request concerning another service must be directed to that service; the shared Shehan Tour Solutions branding does not merge their accounts or booking records.
13. Children, optional information and policy updates
A responsible adult should arrange travel and provide necessary group details for children. Ask before sending health or accessibility information and provide only what is needed for safe arrangements. We may update this notice as practices change; the date above identifies this version. Further instructions are available on our Data Deletion page.