Privacy Policy

Operated by Helvetic Drive Ltd. | Effective upon publication

1. Controller and contact

Helvetic Drive Ltd., Bbuto, Bweyogerere, Wakiso District, Central Region, Uganda, is the controller responsible for personal data used in our transport services. Privacy contact: Juliet Hauser-Katatumba, via hello@helveticdrive.com. Website: https://helveticdrive.com. This policy takes effect upon publication. We process data under applicable Ugandan data protection law, including the Data Protection and Privacy Act, 2019 and relevant regulations; other mandatory laws may apply in particular cases.

2. Information collected

We may collect names, telephone numbers, email addresses, pickup and destination locations, itineraries, flight details, passenger and luggage counts, child-seat requirements, selected vehicle and driver, booking records, invoice and payment status, customer correspondence, and optional emergency contact name, phone and relationship. Contact forms collect name, email, phone and message. Vehicle GPS systems collect vehicle location and route history. Website technical data may include IP address, device/browser details and cookies depending on implemented features. We do not store full payment card numbers.

3. Purposes and lawful bases

We use data to answer enquiries, quote and confirm bookings, coordinate transport, contact passengers, dispatch drivers, process payments, maintain business records, respond to complaints, handle emergencies, protect passengers and vehicles, and comply with legal obligations. Processing relies on appropriate lawful grounds under applicable law, including consent where required, contract performance, legal obligations and other permitted grounds. Marketing by email or WhatsApp occurs only after explicit opt-in and may be withdrawn at any time.

4. Booking system and service providers

Customer information is handled through our Othware-developed booking system, email, WhatsApp and administrative records. Access is role-based: management and authorised Swiss-based administrative personnel may access necessary data; drivers access only their assigned trip details; Othware may access information only as needed for technical support and maintenance. We may share minimum necessary data with replacement transport partners, hotels and lodges for booked services, insurers, banks, payment processors, professional advisers and authorities where legally required. We do not sell personal data. Appropriate confidentiality and processor arrangements are required.

5. International access and transfers

Authorised staff in Switzerland may access booking data for management and customer support. Hosting location and infrastructure providers are being confirmed with Othware. International processing or access will be subject to applicable Ugandan cross-border transfer requirements and appropriate safeguards. This section must be updated with confirmed hosting and transfer arrangements before the booking system goes live.

6. Payments

Card payments are handled by an external payment processor; Helvetic Drive does not store full card details. The processor has not yet been selected. Bank transfers may be made to accounts in Uganda or Switzerland as instructed on the invoice. Payment-related data is processed to reconcile transactions, issue invoices and comply with accounting and tax obligations.

7. GPS location data

All company vehicles are GPS-equipped for dispatch, navigation, vehicle protection, incident review and passenger safety. Vehicle location history is ordinarily retained for 90 days; relevant records may be preserved longer for an accident, claim or legal proceeding. Access is limited to authorised personnel. Passengers should be informed that vehicle tracking is in operation.

8. Communications and contact forms

We communicate via email, telephone, WhatsApp and website forms. Contact forms display a link to this Privacy Policy; submitting an enquiry does not by itself subscribe the customer to marketing. WhatsApp messages are generally deleted 12 months after the last booking, while necessary contractual records may be archived separately for applicable retention periods. Messaging providers may process data under their own terms.

9. Photos, reviews and children

We publish identifiable customer photos or testimonials only with prior express permission. For children, permission is obtained from a parent or legal guardian. Child-related booking details are used only where necessary to arrange safe travel. Emergency contact details are optional and used only for emergencies.

10. Retention

Booking and business records are retained for up to 10 years where required for accounting, tax, contractual or legal obligations; specific Ugandan statutory periods must be verified. Other personal data is deleted or anonymised when no longer needed. GPS data is normally kept for 90 days and WhatsApp communications for 12 months after the last booking, subject to legitimate preservation requirements.

11. Security and confidentiality

We use proportionate access controls, confidentiality commitments, secure account management and technical and organisational security measures. Drivers and external transport partners must protect customer information. We investigate suspected breaches and make notifications when legally required. A written data processing agreement with Othware remains to be completed before customer data is processed in production.

12. Cookies and vehicle cameras

The precise website cookies, analytics tools and marketing technologies are not yet confirmed. Non-essential technologies will be used only with any legally required notice and consent; the final website cookie notice must accurately list the tools in use. Use of dashcams has not been decided. If cameras are introduced, this policy and relevant notices must be updated before activation.

13. Your rights

Subject to applicable law, you may request access to, correction or deletion of your data, object to certain processing, withdraw consent, and raise concerns about our handling of personal information. Send requests by email to hello@helveticdrive.com. We may verify identity and retain information where legally required. You may also contact Uganda’s Personal Data Protection Office as appropriate.

14. Updates and language

This policy may be updated to reflect actual processing practices and legal requirements. The current version is published at helveticdrive.com. Versions may be offered in English, German, French and Italian; the English text is intended as the reference version where legally permissible.

15. Contact

16. PDPO registration

Helvetic Drive is registered with Uganda’s Personal Data Protection Office (PDPO) under registration number PDPO-202610-15888. The certificate was issued on 20 October 2026 and expires on 19 October 2027, unless revoked.

Swiss-managed. Uganda-based. | Driven by Trust.