Privacy policy
Updated 12 September 2026.
Questions about any of this: info@santorinitaxi.com or +30 698 364 9276.
Who controls your data
Santorini Taxi, the trading name of a licensed tourist transport operator based in Fira, Santorini, Greece, is the controller of the personal data described in this policy. For any question or request, write to info@santorinitaxi.com.
What we collect
When you make a booking we collect your name, email address and phone number, the pickup and drop-off points, your flight number or ferry details if you travel that way, your hotel or address, the number of passengers, and any notes you add, such as a child seat or a pet travelling with you. If you contact us by phone or WhatsApp instead, we keep a record of what was agreed so the driver has it correctly.
Why we collect it
We use this data to confirm your booking, brief the assigned driver, take payment, send the confirmation, the reminder and the receipt, and answer you if you get in touch. We rely on three legal bases: performing the contract created when you book; our legitimate interest in dispatching your ride correctly and preventing fraudulent bookings; and, for analytics cookies only, your consent, given or refused through the cookie banner.
Who we share it with
The driver assigned to your ride receives your name, phone number and pickup details only, never your payment details. Payment is handled by Stripe and PayPal: your card number reaches their servers, never ours. Our website and booking system run on our web hosting provider (name available on request), and email is sent and received through the mailbox on that same hosting account. Our dispatcher also gets a short phone alert for each new booking through a messaging relay: it carries the booking reference, the route, the time and the car, never your name, phone number or email address. Pages that show a map load map tiles from OpenFreeMap, which sees the visitor's IP address, the same as any website you visit. An address you type rather than choose from our list is matched to the nearest route we already hold on our own server; it is not sent to any outside routing service. If you accept analytics cookies, Google Analytics 4 runs through Google Tag Manager; it does not load before you consent. Where Cloudflare Turnstile is switched on to stop automated form submissions, it processes the technical data needed to tell a person from a bot. We do not sell personal data, and we do not pass it to any other business for their own marketing.
How long we keep it
Booking records are anonymised 24 months after the pickup date: the personal details are removed and only anonymous statistics remain. Email logs linked to a booking are kept for the same period and anonymised with it.
Your rights
The quickest way to use these rights is the data page: enter the email address you booked with and a link arrives there, either to download everything we hold for it or to delete it. Nothing happens without the link.
Under the GDPR you can ask to see the data we hold about you, have it corrected, receive a portable copy of it, object to how we use it, or ask us to delete it. Write to info@santorinitaxi.com and we will answer within one month. We do not use your data for automated profiling.
Complaints
If you are unhappy with how we handle your data, you can complain to us directly, or to the Hellenic Data Protection Authority, the supervisory authority for Greece.