Travelcab
Back to home

Personal Data Protection Policy

TRAVELCAB — R Y O LAB S.A.C. · RUC 20608981102

Last updated: August 2026

By using Travelcab's services, you accept the personal data processing practices described in this policy. If you do not agree, you must refrain from using our services.

1. Introduction

R Y O LAB S.A.C. (hereinafter, "Travelcab"), identified with Tax ID (RUC) 20608981102, with address at Av. Benavides 1238, Of. 403, Miraflores, Lima, Peru, is the owner of the personal data banks and responsible for the processing of data collected through its digital channels.

This Personal Data Protection Policy has been prepared in accordance with Law No. 29733, the Personal Data Protection Law, and its Regulations approved by Supreme Decree No. 003-2013-JUS.

2. Scope

This policy applies to all persons who use Travelcab's services in Peru, including:

  • Passengers: persons who request or receive private transportation services or tour packages.
  • Drivers: persons who provide transportation services.
  • Website and digital channel users: persons who browse www.travelcab.net or interact with our WhatsApp channels and social media.

3. Personal data we collect

3.1

Data provided by the user

  • Full name.
  • Identity document number (national ID, passport, or foreign resident card).
  • Phone number and email address.
  • Pickup address and service destination.
  • Flight information (airline, flight number, arrival/departure time).
  • Payment data (processed by the Niubiz payment gateway; Travelcab does not store card data).
  • Number of passengers, luggage, and special requirements.
  • For drivers: driver's license data, background checks, vehicle information, and photograph.
3.2

Data generated during service use

  • Location data: driver location during service delivery (GPS every 30 seconds) for monitoring and safety purposes.
  • Transaction data: service type, date, time, origin, destination, amount, service status.
  • Communications: messages exchanged through our customer service channels (WhatsApp, email, Chatwoot).
  • Device data: model, operating system, IP address, browser type.
3.3

Data from external sources

  • Data provided by online travel agencies (OTAs) acting as intermediaries in service booking.
  • Identity verification and background check information for drivers, provided by authorized suppliers.
3.4

TravelCab Conductor Application

The TravelCab Conductor mobile application, intended exclusively for service drivers, collects the following data during the work shift:

  • Precise GPS location: collected every 30 seconds during the driver's active shift for real-time fleet tracking and efficient service assignment. Location collection starts when the driver begins their shift and stops when they end it.
  • Name and phone number: used for driver authentication in the application. Accounts are created by the company administrator.
  • Photographs: driver selfie at the start of the shift and photographs of the vehicle odometer at the start and end of the shift, for operational control, identity verification, and mileage recording.

All data is transmitted in encrypted form using the HTTPS protocol and stored on secure servers. Location data is collected only during the driver's active shift, not permanently. The driver may request the deletion of their data by contacting travelsafe@travelcab.net.

4. Purpose of data processing

Travelcab uses collected personal data for the following purposes:

  • Service delivery: managing reservations, assigning drivers and vehicles, coordinating pickups, processing payments, and issuing receipts.
  • User communication: sending booking confirmations, driver details, operational service information, and satisfaction surveys.
  • Safety: GPS fleet monitoring, identity verification, fraud prevention, and compliance with safety protocols.
  • Customer service: managing inquiries, complaints, refund requests, and lost items.
  • Service improvement: statistical analysis, research, and development to improve the quality and efficiency of our services.
  • Marketing: sending promotions, offers, and commercial communications, only when the user has given prior consent. The user may revoke this consent at any time.
  • Legal compliance: fulfilling legal, tax, regulatory obligations, and requirements from competent authorities.

5. Data sharing

Travelcab may share personal data in the following cases:

  • With drivers: passenger name, phone number, pickup address, destination, and flight data, exclusively for the delivery of the contracted service.
  • With payment gateways: data necessary for payment processing (Niubiz operates under PCI DSS standards).
  • With third-party tour operators: when the user contracts a tour package that includes third-party services, the data necessary for program execution will be shared.
  • With competent authorities: when there is a legal obligation, court order, or administrative authority requirement.
  • With technology service providers: cloud hosting services (Google Cloud Platform), communication platforms (Twilio, Chatwoot), and GPS monitoring systems (Comsatel), under confidentiality agreements.

Travelcab does not sell, rent, or transfer personal data to third parties for purposes other than those described in this policy.

6. Cookies and similar technologies

Travelcab's website uses cookies and similar technologies for:

  • User authentication and session maintenance.
  • Remembering user preferences.
  • Traffic and browsing behavior analysis.
  • Improving the user experience.

The user can configure their browser to reject cookies; however, some website functionalities may be affected. You can review the detail of the cookies we use in our Cookie Settings.

7. Data retention

Travelcab retains personal data for the time necessary to fulfill the described purposes and comply with applicable legal obligations. In particular:

  • Transaction and payment receipt data: according to the terms established by Peruvian tax regulations (minimum 5 years).
  • Customer service communications data: up to 2 years from the last interaction.
  • Driver data: during the term of the contractual relationship and up to 5 years after its termination.

Once retention periods have elapsed, data will be deleted or anonymized.

8. Rights of the data subject

In accordance with Law No. 29733, the data subject has the right to:

  • Access: request information about the personal data that Travelcab maintains about you.
  • Rectification: request the correction of inaccurate or incomplete data.
  • Cancellation: request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
  • Opposition: object to the processing of your data for certain purposes, particularly for marketing purposes.
  • Revocation of consent: revoke the consent given for the processing of your data, without retroactive effect.

To exercise these rights, the data subject may send a request to travelsafe@travelcab.net indicating their full name, identity document number, and the right they wish to exercise. Travelcab will respond to the request within the 10 business day period established by law.

9. National Personal Data Protection Authority

If the data subject considers that their rights have not been properly addressed, they may file a complaint with the National Personal Data Protection Authority, attached to the Ministry of Justice and Human Rights:

  • Address: Calle Scipión Llona 350, Miraflores, Lima.
  • Phone: (01) 204-8020
  • Email: protegetusdatos@minjus.gob.pe

10. Security measures

Travelcab implements technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or destruction, including:

  • Encryption of communications (HTTPS/TLS) across all digital channels.
  • Payment processing through PCI DSS certified gateway (Niubiz).
  • Role-based access controls for authorized personnel.
  • Data hosting on cloud infrastructure with security certifications (Google Cloud Platform).
  • Regular staff training on data protection matters.

11. International data transfer

Some of Travelcab's technology service providers may be located outside Peru (cloud services, communication platforms). In these cases, Travelcab ensures that such providers offer an adequate level of data protection, in accordance with the provisions of Law No. 29733 and its Regulations.

12. Modifications to this policy

Travelcab reserves the right to modify this Personal Data Protection Policy. Modifications will be published on www.travelcab.net and will take effect upon publication. Users are advised to periodically review this policy.

13. Contact

For inquiries about the processing of your personal data:

TRAVELCAB — R Y O LAB S.A.C. · RUC 20608981102 · Owner of the personal data banks, in accordance with Law No. 29733 and Supreme Decree No. 003-2013-JUS.