Privacy Policy

Who we are

Velora Shuttle (David Češka, IČ 03075303, J. Š. Baara 2777/6, 370 01 České Budějovice), based in Prague, Czech Republic, is the data controller responsible for your personal data. For any privacy question you can reach us at david@velora-shuttle.cz.

What we collect

• Booking data — names, contact details, pickup and drop-off locations, dates, flight numbers and any special requests you provide when arranging a transfer.
• Contact form submissions — your name, email, phone (if given), route of interest and message.
• Payment and invoicing data — payment status, invoice details and related booking records. We do not collect or store full card details on this website.
• Technical data — IP address, browser type and basic device information collected automatically, plus cookies (see our cookie policy). With analytics consent, Microsoft Clarity also records privacy-masked page rendering and interactions such as clicks, scrolling and mouse movement for heatmaps and session replay. Booking and contact submissions also record the landing page, referring site and campaign tags.

Why we collect it and the legal basis

• To provide the service you book — performance of a contract.
• To answer enquiries — our legitimate interest in responding to you, or steps taken at your request before a contract.
• To meet legal and tax obligations — compliance with a legal obligation.
• Analytics — only with your consent, which you can withdraw at any time.
• Marketing — only with your consent, which you can withdraw at any time; used for Google Ads conversion measurement and ad personalisation.

How long we keep it

Booking and invoicing records are kept for as long as required by Czech accounting and tax law. Contact enquiries are kept only as long as needed to deal with them. Google Analytics keeps event data for 2 months and user data for 14 months; the user-data period restarts after new user activity. Microsoft Clarity keeps ordinary session replays for 30 days and aggregated click and heatmap data for up to 9 months; other analytics data is retained for a limited period in line with the tools we use.

Who we share it with

We share data only with service providers who help us run the business — transactional email (Resend), hosting and website measurement (Vercel Web Analytics and Speed Insights), visit analytics with your consent (Google Analytics), behavior analytics and session replay with your consent (Microsoft Clarity), and error monitoring (Sentry) — each acting as a processor under contract. With your marketing consent we also share conversion and advertising data with Google Ads, which processes it as an independent data controller under its own terms. We never sell your data.

International transfers

Some of these providers are based in, or process data in, the United States. Where that is the case, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased where the law allows;
• receive your data in a portable format;
• object to or restrict certain processing;
• withdraw consent at any time; and
• lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ).

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last revised.

Contact

Questions about your data or this policy? Email david@velora-shuttle.cz.