Take Me Too! Privacy and Cookies Policy

Privacy Policy

This privacy policy describes what information we collect about you (including from third parties such as Facebook), how we use it, and the rights you have in relation to that collection and usage.

If you have any questions about this privacy policy, please contact us at hello@takemetoo.org.uk .

Who we are

Take Me Too! is a project run by Pembrokeshire Association of Community Transport Organisations (PACTO), a Registered Charity (number 1148810) and Company Limited by Guarantee (number 7825882), whose registered office is at 5b Old School Estate, Station Road, Narberth, Pembrokeshire, SA67 7DU.

For the purposes of the General Data Protection Regulations and any other applicable data protection and privacy laws and regulations (“Data Protection Legislation”), PACTO will be the ‘data controller’ for all personal information we determine the means and purpose of processing. 

How do you use my data?

We gather two types of information about our Members:

• data that Members provide through optional, voluntary registration and
• data gathered through tracking information derived mainly by tallying page views and journeys requested and/or offered through Take Me Too!

This information enables us to improve the tailoring of our features and content to Members' needs and to help us to better understand the demographics of our Members. How we use the data we collect from you is described in more detail below.

When you register with us

The Take Me Too! Website offers free, voluntary registration to Members. By registering, Members can request journeys, reply to journey requests and book journeys; they can take advantage of personalisation (the ability to filter matches according to a user-supplied criteria); and they have the ability to edit existing journey requests.

When you register with us, we will use your personal information to create your account. The details we collect from you will include your name, age, gender, home postcode, phone number and email address, and, if you are a driver, your driving licence number and details of your vehicle.   We will also ask for information about any extra help you may need.  You have the option to add more information about yourself into a personal profile, such as a photo and links to your (public) Facebook, Twitter or Instagram pages. Except for any information which you have chosen to share on your Take Me Too! profile, your personal information will not be visible to other Take Me Too! members. You will be identified on the site by the User Name you have selected. We will only release your contact details to another Member, once both parties have agreed to a journey match. 

We need to process your personal information in this way to enter into and perform the services you have asked to receive.

When you use our services or website functionality

We use your data to help to match journey requests with drivers, in order to facilitate shared travel.

We will also send out emails/SMS/app alerts notifying you of relevant journey requests and/or replies to specific journey postings. 

Our Website also enables members to reciprocally post reviews relating to their car sharing experiences, which may be positive or negative. We reserve the right to post, monitor and remove reviews relating to members as we think appropriate to deliver services to our community of members.

We may also send you email notifications of specific changes to the Website and our service offering. Unless we need to as part of providing the services, we never share individual email addresses, telephone numbers or postcodes with any third parties, including advertisers or partners, without your prior consent.      

We need to process your personal information in this way to enter into and perform the services you have asked to receive.

When you phone us

When you phone us, we may also handle your personal information (your name, contact details and the other details you provide to us during the call) in order to provide the customer services you have asked us to. This could be when you ask us to confirm your account details, or explain our services to you.

When you have expressed an interest in our services:

If you have opted in via our website to receive marketing communications from us, we will handle your personal information for example (your name, email address and postal address and telephone number) to provide you with marketing communications in line with any preferences you have told us about.

Every email or message we send to you for marketing purposes will also contain instructions on how to unsubscribe from receiving them.

When we send you marketing material in the post, we rely on our legitimate interest to let you know about our latest offers and services.

You are not under any obligation to provide us with your personal data for marketing purposes.

You can tell us that you do not want your personal information to be processed in this way at any time by contacting us at hello@takemetoo.org.uk or, where relevant, by following the unsubscribe link shown in every marketing communication you receive from us. You can also unsubscribe by managing your settings in the “Account Settings” section of our online platform.

To make our site better:

We will also use your personal information to provide you with a more effective user experience (such as by displaying potential journeys or car sharing options we think you will be interested in, based on your location or previous journey history).

Our use of your information in this way means that your experience of our site will be more tailored to you, and the options and recommendations you see on our site may differ from someone accessing the same site with a different journey history or browsing habits.

We will also use your personal information for the purposes of making our site more secure, and to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, and statistical purposes.

We process your data for this reason because we have a legitimate interest to provide you with the best experience we can, and to ensure that our site is kept secure.

You can prevent us from using your personal information in this way by using the 'do not track' functionality in your internet browser. If you enable do not track functionality, our site may be less tailored to your needs and preferences.

What about technical information and analytics?   

When you visit our site we will automatically collect the following information:

• technical information, including the Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, screen resolution, operating system and platform; and
• information about your visit, including the full Uniform Resource Locators, clickstream to, through and from our site (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page.
• we may collect information about the devices you use to access our services, including the hardware models, operating systems and versions, software, file names and versions, preferred languages, unique device identifiers, advertising identifiers, serial numbers, device motion information and mobile network information.

If you fail to provide us with Personal Information:

You always reserve the right to withhold your personal information, but this may affect how we provide our services

Where we need to collect personal information by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you.  In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.

Where is my data stored?

The data that we collect from you will be stored in a secure location within the UK. 

All information you provide to us is stored on our secure servers or those of our third party sub-contractors. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. You must not share your password with anyone.

How long do we retain your data for?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Where you have created an account with us, we will retain your data for the duration of your membership to ensure that we are able to assist you should you have any questions, feedback or issues in connection with any of our services, or if any legal issues arise.

Members can close their account at any point by contacting us at hello@takemetoo.org.uk. Once your membership terminates we will retain your personal information for no longer than 24 months – we retain this personal information under the legal basis of legitimate interests to allow us to service any enquiries from former customers or to help returning customers re-establish their membership account. We will anonymise any other information we hold on your behalf and only use this for compiling into aggregated statistical analysis of our services. Any personal information we are not obliged to retain that cannot be anonymised securely, will be destroyed.

Where we have used your personal information to contact you for marketing communications, if you tell us that you no longer wish to receive marketing communications from us, we promise to stop sending them to you. If you wish to unsubscribe from our marketing communications, we will remove your personal information from our marketing database as soon as possible.

Where we have processed your data for any other reason (such as where you have contacted us with a question in connection with our services) we will retain your data for a maximum of 5 years. As we are holding this data under our legitimate interests, your rights to object (as outlined in “Your right to object under data protection law”) apply as normal.

Any restorations of data for development or testing purposes is anonymised.

LAWFUL BASIS OF PROCESSING

We will only process your information for as long as we have a relevant legal basis to do so. This is usually in order to provide you with the services you have requested from Take Me Too! and unless stated, all of the above processing is conducted under the legal basis of performance of a contract.

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we consider the new purpose to be incompatible with the original purpose of collection, we will conduct a Privacy Impact Assessment or contact you to request your consent for further processing. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at hello@takemetoo.org.uk.

YOUR RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATIONS

You have various rights under the data protection laws. If you wish to exercise these rights, please contact us by email at hello@takemetoo.org.uk. 

Right to object

You have the right to object to us handling your personal information when:

• we are handling your personal information based on our legitimate interests (as described in the “How do you use my data” section above). If you ask us to stop handling your personal information in this way, we will stop unless we can show you that we have compelling grounds as to why our use of your personal information should continue
• for marketing purposes. If you ask us to stop handling your personal information on this basis, we will stop.

Right of access

You also have the right to access your personal information which we are handling.

Right to rectification

You have the right to require us to correct any inaccurate personal information we hold about you. You also have the right to have incomplete personal information we hold about you completed, by providing a supplementary statement to us.

Right to restriction

You can restrict our processing of your personal information where:

• you think we hold inaccurate personal information about you
• our handling of your personal information breaks the law, but you do not want us to delete it
• we no longer need to process your personal information, but you want us to keep it for legal reasons
• we are handling your personal information because we have a legitimate interest (as described in the “How We Use Your Data” section above), and are in the process of objecting to this use of your personal information

Where you exercise your right to restrict us from using your personal information, we will then only process your personal information when you agree, except for storage purposes and to handle legal claims.

Right to erasure

You have the right to require us to erase your personal information which we are handling in the following circumstances:

• we no longer need to use your personal information for the reasons we told you we collected it for
• where we needed your consent to use your personal information and you have withdrawn your consent
• you object to our use of your personal information and we have no compelling reason to carry on handling your personal information
• our handling of your personal information has broken the law
• we must erase your personal information to comply with a law we are subject to

Right to complain

You have the right to lodge a complaint with the Information Commissioner's Office, the supervisory authority for data protection issues in England and Wales.

Links to external websites

Our site may, from time to time, contain links to and from the websites of our partner networks and other organisations.  If you follow a link to any of these websites or use our services, please note that you have left our site and these websites have their own privacy policies.

We do not accept any responsibility or liability for these policies or websites. Please check their policies before you submit any personal information to these websites.

When will you change your privacy policy?

We will review this policy periodically, in line with any changes to the Take Me Too! service or data protection laws. 

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail, SMS message or via a message on the Take Me Too! App.

How do I contact you with feedback?

We welcome questions, comments and requests regarding this privacy policy.  Please contact hello@takemetoo.org.uk. 

Cookies Policy

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

• Session Cookies. We use Session Cookies to operate our Service.

• Preference Cookies. We use Preference Cookies to remember your preferences and various settings.

• Security Cookies. We use Security Cookies for security purposes.

This Privacy and Cookies Policy was last updated on 31 March 2019.