Privacy Policy

MyDrively

Last updated: 2026-06-07

1. Introduction

This Privacy Policy explains how MyDrively (“MyDrively”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you use the MyDrively mobile application, web application, website and related services (“the Service”).

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable data protection laws across the European Economic Area (EEA), the United Kingdom, and other European jurisdictions.

2. Roles and Responsibilities

Data Controller
For personal data related to end customers entered into the Service (such as test drive customers), the user’s employer or organization is the data controller.

Data Processor
MyDrively acts as a data processor on behalf of the organization using the Service.
For personal data related to user accounts (employees using the app), MyDrively acts as a data controller.

3. Personal Data We Process

Depending on how the Service is used, we may process the following categories of personal data:

User account data
- Full name
- Email address
- Phone number
- Job title
- Authentication data
- Language and preferences

Customer data (entered by users)
- Customer name
- Phone number
- Email address
- Booking details
- Test drive documentation
- Digital signatures (where applicable)
- Additional customer-related information voluntarily entered by authorized users, including preferences, requirements, special requests, comments, and other booking-related notes

Technical and usage data
- Device information
- App version
- Log data
- Error and diagnostic data
- IP address (where required for security)

4. Purposes of Processing

Personal data is processed for the following purposes:
- Providing and operating the Service
- User authentication and account management
- Booking and scheduling functionality
- Sending transactional emails, SMS messages, and calendar invitations
- Generating and storing documents
- Improving stability, security, and performance
- Complying with legal obligations

5. Legal Basis for Processing (GDPR Article 6)

We process personal data based on the following legal grounds:
- Contractual necessity (Art. 6(1)(b)). Processing required to provide the Service.
- Legitimate interests (Art. 6(1)(f)). Security, service improvement, and fraud prevention.
- Consent (Art. 6(1)(a)). For optional features such as SMS, email notifications, and calendar invitations, where required.
- Legal obligation (Art. 6(1)(c)). Where processing is required by law.

6. Data Storage and Hosting

MyDrively uses secure third-party cloud infrastructure to store and process data, including:
- Google Firebase and Google Cloud Platform services (authentication, databases, storage and cloud infrastructure)
- Cloud messaging services
- Email and SMS service providers
- Calendar integration services

Data may be stored and processed within the EEA or in countries approved by the European Commission or protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs).

7. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:
- Encrypted communication (TLS)
- Access controls and authentication
- Role-based access restrictions
- Secure cloud infrastructure
- Regular security updates

No system can guarantee absolute security, but we take reasonable steps to protect your data.

8. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Retention periods are determined by:
- Contractual obligations
- Legal requirements
- Operational needs

Organizations using MyDrively are responsible for defining retention policies for customer data they control.

Personal customer contact information connected to bookings is automatically anonymized 3 years after the booking start date/time. Anonymization means that the customer surname, phone number, phone country/prefix information, e-mail address and booking comments are permanently deleted.

The customer first name, booking details, vehicle information, booking history and anonymized statistics will be retained for operational and analytical purposes.

9. Sharing of Personal Data

We do not sell personal data.

Personal data may be shared only with:
- Authorized users within the same organization
- Trusted service providers acting as data processors
- Authorities, where required by law

All processors are subject to contractual data protection obligations in accordance with GDPR Article 28.

10. International Data Transfers

Where personal data is transferred outside the EEA or the UK, we ensure appropriate safeguards are in place, including:
- Adequacy decisions
- Standard Contractual Clauses (SCCs)
- Other lawful transfer mechanisms under GDPR

11. User Rights

Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time (where applicable)

Requests should be directed to your employer (as data controller) or to MyDrively for account-related data.

12. Cookies and Tracking

MyDrively does not use cookies in the mobile application.

Limited technical identifiers may be used for security, authentication, and functionality.

The MyDrively website may use necessary technical cookies or similar technologies required for security, functionality, hosting, and website operation. Where analytics or non-essential cookies are used, these will only be used where permitted by applicable law.

13. Children’s Privacy

MyDrively is a business-oriented service intended for use by authorized employees and representatives of organizations.

The Service is not directed to children and is not intended for personal use by minors.

However, individuals under the age of 18 may use the Service where permitted by applicable law and authorized by their employer or organization.

We do not knowingly collect or process personal data from children in contexts unrelated to the operation of the Service by authorized business users.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When material changes are made, users may be notified or required to review the updated policy before continuing to use the Service.

The current version will always be available on the MyDrively website and, where applicable, within the application.

15. Language and Interpretation

This Privacy Policy is available in multiple languages for convenience.

In the event of any inconsistency or conflict between translations, the English version shall prevail.

16. Contact Information

For questions regarding this Privacy Policy or data protection matters, please contact:

MyDrively
Email: contact@mydrively.co