Privacy Policy

This policy explains how Morzine Bus collects, uses and protects personal information on the Morzine Transfers website and the Morzine Transfers booking platform. It covers:

• the website at morzine-transfers.com, including the register-interest form for transfer operators
• the booking platform at app.morzine-transfers.com: the booking form embedded on morzine-transfers.com and on other operators' websites, the hosted booking pages, the payment pages, the partner portal and the operator dashboard

Morzine Bus takes the bookings for its own transfer business on the platform, and also provides the platform to other airport transfer operators.

Who we are

Morzine Transfers is owned and operated by [LEGAL ENTITY NAME], trading as Morzine Bus, a company registered in France (SIRET [SIRET]), at [REGISTERED ADDRESS], 74110 Morzine, France. In this policy, "we", "us" and "our" mean Morzine Bus.

For anything about your personal information, email [email protected] or call +33 6 40 92 46 19.

Our role

• Morzine Transfers and Morzine Bus bookings. When you book a transfer that Morzine Bus runs, we decide how your information is used. We are the "controller" under data protection law.
• Bookings with another operator. When you book with another transfer company that uses our platform, that company is the controller of your booking. We store and process it on their behalf, under a data processing agreement, only to provide the platform to them. Their own privacy policy also applies, and you can contact them or us about your information.
• Operators, their staff, partners, and people who register interest in the platform. We are the controller of account and enquiry information.

The information we collect

When you book a transfer

• your name, email address, phone number and preferred language
• your journey: pickup and drop-off places and addresses, dates and times, flight numbers and flight times, the number of passengers and bags, skis, bikes, child seats and the ages of children who need them, and any special requirements you tell us
• payment details: payments are taken by Stripe, so we never see or store your full card number. Stripe tells us whether you paid, the amount, the card type and the last four digits of the card, and any refund
• how the booking reached us, for example the website you booked on or the partner who booked for you, and the page to return you to after paying
• messages about your booking, and notes our team adds to it
• when you accept the terms or pay, the time, your IP address and your browser type, as a record of what was agreed

Please don't include health information in your special requirements unless the driver needs it to carry out your transfer safely.

If a partner, such as your chalet company, books for you, they give us these details on your behalf. Partners agree to our partner terms, which require them to tell you that they pass your details to us.

When you use the website

• The website has no user accounts and does not use advertising cookies.
• If you accept, we use Google Analytics to measure how the website is used: the pages viewed, how visitors arrived, the type of device and browser, and approximate country and city. Google Analytics does not store your IP address. Without your consent it isn't loaded. The booking platform does not use Google Analytics.
• Like any website, our hosting provider, Cloudflare, processes your IP address and basic browser information to deliver pages and protect the site from attacks.
• If you register interest in the platform, we collect your name, company, email address, phone number, website, where you operate, fleet size, how you take bookings today, your message, the page you sent it from, your IP address and your browser type.

Operators, staff and partners

• your name, email address, password (stored only in scrambled, hashed form), two-factor authentication settings, language and role
• your company's details, the routes, vehicles and prices you set up, and your Stripe account ID
• billing details for the platform fees we charge operators, handled through Stripe and Pennylane
• a record of sign-ins, failed sign-in attempts and actions in the dashboard, including exports and erasures of customer information, kept for security
• for partners, when you accepted our partner terms, which version, and your IP address

Information collected automatically

When you use the booking form or dashboard, our servers record your IP address, browser type, the pages and actions requested, and any errors, to keep the platform secure and working. On forms open to the public, Cloudflare Turnstile checks that you are a person rather than an automated program.

Google user data

Operators can connect a Google account in the platform's Settings so that each trip is added to their Google Calendar and to a Google Sheets spreadsheet. This section explains exactly what the platform accesses through that connection. It applies only to operators who choose to connect. Travellers who book a transfer never connect a Google account.

What the platform accesses, and why

When you connect, Google asks you to allow the following. We ask only for what these features need.

• Your Google account's email address (the "openid" and "email" permissions). We show it in Settings so you can see which account is connected.
• Your list of calendars (permission to see your calendars). We read the list of calendars you can edit so you can choose one from a menu. We do not read the events in your calendars.
• Events in your calendars (permission to view and edit events). We add an event for each trip to the calendar you chose, and update that event if the trip changes. We do not read, change or delete any other events.
• Spreadsheets (permission to see, edit and create spreadsheets). We add a row for each trip to the spreadsheet you chose. We do not read the existing contents of your spreadsheets, and we do not open any other spreadsheet.

How we use it

We use Google user data only to provide these user-facing features: showing which account is connected, letting you choose a calendar, and adding your trips to your calendar and spreadsheet. We do not use it for anything else.

How we store and protect it

We store the minimum needed to keep the connection working:

• the authorisation token Google gives us, encrypted in our database
• your Google account's email address, the permissions you granted, and when you connected
• the ID of each calendar event we create, so we can update the right event if a trip changes

Short-lived access tokens are kept in memory for up to one hour, and your list of calendars for up to five minutes, then discarded.

Sharing

We do not sell Google user data, share it with third parties, use it for advertising, or use it to develop, improve or train artificial intelligence or machine learning models. We do not allow people to read it, except where you have asked us to help with your connection and given permission, where it is needed for security purposes such as investigating abuse, or where the law requires it.

Removing access and deleting your data

You can disconnect Google in Settings at any time. When you do, we ask Google to revoke our access and immediately delete the stored token, account email and permissions from our database. You can also remove our access from your Google account at myaccount.google.com/permissions. Events and rows we have already added stay in your calendar and spreadsheet, because they belong to you. You can delete them in Google.

Google API Services User Data Policy

Morzine Transfers' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your information, and our legal basis

• To take, confirm and run your transfer, including sending your trip to the drivers and team who carry it out, through the dashboard, daily run sheets, and the operator's calendar or spreadsheet. Legal basis: performing our contract with you.
• To take payment and handle refunds. Legal basis: performing our contract with you.
• To send emails about your booking: confirmations, decisions on requests, payment links and payment reminders, and a reminder before you travel. Legal basis: performing our contract with you.
• To check your flight's times, so pickups can be adjusted when flights change. Legal basis: our legitimate interest in running transfers on time.
• To find addresses as you type them into the booking form. Legal basis: performing our contract with you.
• To keep accounting and tax records. Legal basis: our legal obligations.
• To measure how the website is used, with Google Analytics, so we can improve it. Legal basis: your consent, which you can withdraw at any time from Cookie settings at the bottom of every page.
• To keep the website and platform secure, and to prevent fraud and automated abuse. Legal basis: our legitimate interest in protecting our services and customers.
• To reply to people who register interest in the platform, and to provide the platform to operators and bill them. Legal basis: taking steps at your request before a contract, and performing our contract with operators.

We do not send marketing emails, sell personal information, or use it for advertising. We do not make decisions about you by purely automated means that have legal or similarly significant effects.

Who we share it with

• The operator who runs your transfer, and their drivers. For Morzine Transfers bookings, that is Morzine Bus.
• The partner who booked for you, such as your chalet company, who can see the bookings they made.
• Service providers who process information for us, under contracts that require them to protect it:
  • Stripe: card payments, refunds and fraud prevention. Stripe also uses some payment information as an independent controller, under its own privacy policy.
  • Postmark (ActiveCampaign): sending booking and account emails
  • Google: measuring website visits with your consent (Google Analytics, provided by Google Ireland Limited), address search in the booking form (Google Maps Places), and, for operators who connect Google, adding trips to their calendar and spreadsheet
  • AeroDataBox: looking up flight times from the flight number and date
  • Cloudflare: website hosting, security, and Turnstile checks on public forms
  • Sanity: the content management system behind the website. It holds website content, not visitors' personal information.
  • Hetzner Online: the servers that host the booking platform and its database, in data centres in the European Union
  • Ploi: managing and deploying the platform's servers, which gives it technical access to them
  • Laravel Nightwatch: monitoring the platform for errors and performance problems. Customers' contact details, addresses and full IP addresses are removed before anything is sent.
  • Pennylane: invoicing the platform fees we charge operators. It holds operators' billing details, not travellers' information.
• Authorities or advisers, where the law requires it or to establish, exercise or defend legal claims.
• A buyer or successor, if the business or platform is sold or merged, under the same protections.

For operators who use the platform, the service providers above that handle their bookings are our sub-processors. We tell operators by email at least 30 days before we add or replace one, so they can object.

International transfers

Some of these providers are based in, or process information in, the United States or other countries outside the European Economic Area. Where they do, the transfer is protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses. For UK residents, the UK Extension to the Data Privacy Framework or the UK Addendum to those clauses applies. The booking platform and its database are hosted in the European Union.

How long we keep it

• Your details on a booking that went ahead or was cancelled: 24 months after your last journey for Morzine Bus bookings, then erased automatically. Other operators choose between 12 and 36 months, as their own policy says. After erasure we keep only the booking reference, dates, journeys, passenger numbers and amounts, without your name or contact details, for 10 years, as French accounting law requires.
• Booking requests that were declined, expired or never paid: 12 months after the request, then erased.
• IP addresses and browser details recorded with bookings, terms acceptances and register-interest enquiries: 12 months.
• Register-interest enquiries: 24 months, unless you become a customer.
• Operator, staff and partner accounts: while the account is open. We delete account details within 12 months of an account closing, apart from billing records, which we keep for 10 years.
• Records of sign-ins, exports and erasures: 12 months.
• Google connection data: until you disconnect, when it is deleted immediately.
• Server logs and error reports: 30 days.
• Website analytics (Google Analytics): 14 months, then deleted automatically by Google.
• Your cookie choice: 6 months, after which we ask you again.

You can ask us to erase your details sooner. We do so unless the transfer is still to run or the law requires us to keep them.

Cookies

On the website

• Your cookie choice (cc_cookie): remembers whether you accepted or refused analytics. Strictly necessary, it lasts 6 months.
• Analytics (_ga and _ga_5CQNLNSBZQ, Google Analytics): tell visits from the same browser apart and keep track of the current visit. They are only set if you accept them, and last at most 13 months.
• On the register-interest form, Cloudflare Turnstile may use a cookie and information about your browser to check you are not an automated program.

On your first visit we ask whether you accept analytics. Refusing is as easy as accepting, and the site works the same either way. You can change your mind at any time from Cookie settings at the bottom of every page. If you withdraw your consent, the Google Analytics cookies are deleted.

On the booking form

The booking form sets only cookies that are strictly necessary for it to work: a session cookie that keeps your booking in progress, and a security cookie that protects the form against forged requests. They expire when you close your browser or after two hours of inactivity. When you pay, Stripe sets its own cookies on its payment page to prevent fraud.

Strictly necessary cookies don't need your consent. We do not use advertising cookies.

How we protect it

Everything is sent over encrypted HTTPS connections. Passwords are stored hashed and Google tokens are encrypted. Operators and our own staff must sign in with two-factor authentication, and partners can turn it on. Each operator sees only their own bookings, and staff see only what their role needs. We keep a record of sign-ins and of every export or erasure of customer information, so misuse can be traced. Customers' details are removed from error reports and monitoring. The booking form's fonts are served from our own servers, so no font provider learns about your visit. We review the providers we use and keep their access to what they need.

If a security breach puts your personal information at risk, we tell the CNIL within 72 hours where the law requires it, and tell you without delay if the risk to you is high. When the booking is with another operator, we tell them straight away so they can do the same.

Your rights

Under the GDPR you can:

• ask for a copy of the personal information we hold about you
• ask us to correct it
• ask us to delete it, where we don't need to keep it for a legal reason
• ask us to restrict how we use it, or object to our using it on the basis of legitimate interests
• ask for a copy in a portable format
• withdraw consent at any time, where we rely on it

To use any of these rights, email [email protected]. We reply within one month. We can send you everything we hold about your bookings as a single file. If your booking is with another operator, we will pass your request to them and help them respond.

If you are unhappy with how we handle your information, you can complain to the French data protection authority, the CNIL, at cnil.fr, or to the authority in the country where you live. We'd appreciate the chance to put things right first.

Children

Our services are booked by adults. We only hold information about children that the person booking gives us, such as a child's age so the right seat is fitted.

Changes to this policy

We update this policy when our services or the law change, and show the date of the latest version at the top. If we make an important change, we will tell operators by email before it takes effect.