Məxfilik Siyasəti

PRIVACY POLICY - TOURSCAB MOBILE APPLICATION

Effective Date: May 21, 2026 Governing Law: Law of the Republic of Azerbaijan "On Personal Data" (No. 998-IIIQ) and related legislation.

This Privacy Policy ("Policy") explains how ToursCab ("we", "us", or "our") collects, uses, processes, stores, shares, and protects the personal data of users ("User" or "you") of the ToursCab mobile application ("App").

By registering an account, booking services, or using the App, you explicitly and unconditionally consent to the collection, processing, storage, and transmission of your personal data in accordance with this Policy and the Law of the Republic of Azerbaijan "On Personal Data" (the "Personal Data Law").

1. LEGAL BASIS FOR PROCESSING

Under Article 6 of the Personal Data Law of Azerbaijan, processing of personal data is permitted based on the written or explicit electronic consent of the subject. By ticking the consent box or accepting the Terms and Conditions of the App, you grant ToursCab explicit electronic consent (equivalent to written consent under the Law of the Republic of Azerbaijan "On Electronic Signature and Electronic Document") to process your personal data as described herein.

2. TYPES OF DATA WE COLLECT

We collect personal data that you provide directly, data generated during your use of the App, and data received from our third-party Partners.

2.1. Registration and Identity Data:

• Full name (Surname, Name, Patronymic / F.I.A.);
• Date of birth and gender;
• Phone number and email address;
• Username and password.

2.2. Verification and Compliance Data (Specifically for Car Rentals):

• Passport or National ID card details (series, number, PIN/FIN code, and/or copy);
• Driving license details (series, number, date of issue, expiry, categories, and/or photographic copy);
• International Driving Permit (IDP) details (where applicable for foreign citizens).

2.3. Booking and Transaction Data:

• Travel details, daily tour selections, vehicle rental selections;
• Date, time, and location of the booking;
• Transaction history and booking statuses;
• Payment information: Payment card metadata (the first 6 and last 4 digits, expiration date, cardholder name) is collected by our secure payment gateway partner. ToursCab does not store your full card number or CVV/CVC codes on its own servers.

2.4. Location Data:

• Precise or approximate geographical location of your mobile device. This is used to display nearby rental cars, departure points for daily tours, and to facilitate navigation to Partner physical points. You can disable location access in your device settings, but doing so will limit certain App functionalities.

2.5. Technical and Usage Data:

• Device ID, IP address, operating system, browser type, App crash logs, and details of how you interact with the App.

3. PURPOSES OF DATA PROCESSING

We process your personal data for the following specific, legitimate business purposes:

• Intermediary Booking Services: To facilitate and confirm your bookings for rental cars and daily tours with our Partners;
• Partner Transmission: To transmit your identity, contact, and driving license details to the specific Partner from whom you booked a service, enabling them to prepare your rental contract or tour manifest prior to your arrival;
• Verification and Security: To prevent fraud, double-booking, and malicious "game-playing" on the platform;
• Customer Support: To resolve technical issues, process legitimate refunds of the Booking Fee (pursuant to Clause 3.2 of the Terms), and handle complaints;
• Notifications: To send you booking confirmations, push notifications regarding your upcoming tours or vehicle pick-up details, and legal or administrative updates;
• Regulatory Compliance: To comply with tax, bookkeeping, law enforcement, and other statutory requirements of the Republic of Azerbaijan.

4. SHARING AND TRANSMISSION OF PERSONAL DATA

4.1. Sharing with Partners (Data Controllers): As an online-to-offline (O2O) marketplace, we must share your relevant personal data (name, contact details, etc.) with the specific Partner (car rental operator or tourism company) that is providing the offline service. Once transmitted, the Partner acts as an independent data controller under Azerbaijani law and is bound by local data protection requirements.

4.2. Third-Party Service Providers: We may share data with secure third-party service providers who assist us in operating our platform, including:

• Licensed payment processing gateways;
• SMS and email dispatch providers;
• Cloud hosting and server infrastructure providers.

4.3. Legal and Law Enforcement Requests: We reserve the right to disclose personal data to competent state authorities, courts, and law enforcement agencies of the Republic of Azerbaijan if required to do so by law, or to protect the safety, rights, and property of ToursCab, its users, or the public.

5. STORAGE, SECURITY, AND RETENTION PERIODS

5.1. Storage Location: All personal data is securely stored on encrypted cloud servers, compliant with necessary international cybersecurity standards and local data protection regulations.

5.2. Security Measures: We implement appropriate technical, organizational, and physical security measures to protect your personal data from unauthorized access, alteration, disclosure, destruction, or accidental loss.

5.3. Retention Period:

• We retain active personal data for as long as your account remains active.
• Following account deletion, we retain limited billing, transactional, and legal record data for a statutory period required under the Tax Code and civil legislation of Azerbaijan (typically up to 3 to 5 years) to defend against potential legal claims or satisfy tax audits.
• For car rentals, records regarding drivers may be held longer if there are active disputes regarding traffic fines, vehicle damage, or insurance claims.

6. USER RIGHTS UNDER AZERBAIJANI LAW

In accordance with Articles 14 and 15 of the Law of the Republic of Azerbaijan "On Personal Data", you have the following statutory rights:

• Right to Access: To obtain confirmation as to whether your personal data is being processed, and to receive information about the categories of data, purposes of processing, and third parties to whom the data is disclosed;
• Right to Correction: To request the correction of inaccurate or incomplete personal data;
• Right to Block: To request the temporary suspension of processing of your personal data;
• Right to Erasure (Deletion): To request the complete deletion of your personal data. Please note that deletion of certain essential data will result in the immediate termination of your App account and the cancellation of active bookings;
• Right to Object/Withdraw Consent: To withdraw your consent to data processing. The withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

To exercise any of these rights, you can submit a written request via email to: info@tourscab.com, or use the automated account deletion tools inside the App settings.

7. COOKIES AND TRACKING TECHNOLOGIES

The App may use cookies and mobile tracking SDKs to collect usage statistics, remember your language preferences, and optimize your navigation experience. You can control the use of tracking features via your mobile operating system settings.

8. AMENDMENTS TO THIS POLICY

ToursCab reserves the right to amend this Privacy Policy at any time. If we make material changes, we will notify you through the App or via the email address registered to your account. Your continued use of the App after the effective date of the updated Policy constitutes your electronic acceptance of the revised terms.