Privacy Policy

1. Introduction

Welcome to CIsland Chauffeur Services ("we," "our," or "us"). We operate the website cisland.vip and provide chauffeur services in Sri Lanka. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

2. Information We Collect

We collect the following types of information:

2.1 Information You Provide

• Contact Information: Name, phone number, and email address
• Trip Details: Pickup and drop-off locations, date and time preferences, number of passengers, luggage count
• Special Requests: Any additional requirements or preferences you share with us

2.2 Information Collected Automatically

• Location Data: Geographic coordinates when you use our location services
• Device Information: Browser type, operating system, and device identifiers
• Usage Analytics: Aggregated, privacy-safe metrics about how you interact with our website

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To process and fulfill your chauffeur booking requests
• Communication: To send you booking confirmations, updates, and service-related messages via WhatsApp
• Route Planning: To calculate fares and provide accurate navigation for your trips
• Analytics: To understand usage patterns and improve our services (using aggregated, non-identifiable data)
• Security: To protect against fraudulent or unauthorized bookings using Cloudflare Turnstile
• Legal Compliance: To comply with applicable laws and regulations

4. WhatsApp Business Communication

We use WhatsApp Business (operated by Meta) to communicate with you about your bookings. By submitting a booking request through our website, you explicitly consent to receive service-related messages via WhatsApp, including:

• Booking confirmations with trip details
• Trip reminders and updates
• Navigation links for your chauffeur
• Service-related notifications

Important: We will only send service-related messages. We will not send marketing messages or share your WhatsApp contact with third parties for promotional purposes. You can opt out of WhatsApp communications at any time by contacting us directly.

5. Third-Party Services

We use the following third-party services that may collect or process your information:

5.1 Google Maps

We use Google Maps API for location autocomplete and route calculation. Google's privacy policy applies to their services: Google Privacy Policy

5.2 WhatsApp Business / Meta

We use WhatsApp Business Cloud API (operated by Meta) for sending booking notifications. Meta's privacy policy applies: WhatsApp Business Policy

5.3 Cloudflare

We use Cloudflare for website hosting, bot protection (Turnstile), and privacy-safe analytics. Cloudflare's privacy policy: Cloudflare Privacy Policy

6. Data Retention

We retain your personal information for the following periods:

• Booking Information: We retain booking details for 12 months after the trip date for service quality and dispute resolution
• Analytics Data: Aggregated, non-identifiable usage data may be retained indefinitely for service improvement
• Communication Records: WhatsApp message records are retained according to Meta's policies

You can request deletion of your personal information at any time by contacting us (see Section 12).

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Opt-Out: Opt out of WhatsApp communications by contacting us directly
• Data Portability: Request your data in a structured, commonly used format

To exercise these rights, please contact us using the information in Section 12.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• HTTPS encryption for all data transmitted to and from our website
• Cloudflare Turnstile bot protection to prevent unauthorized access
• Secure API communication with third-party services
• Limited access to personal information on a need-to-know basis
• Regular security assessments and updates

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your information.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States (where our third-party services are located). We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Displaying a prominent notice on our website
• Sending you a notification via WhatsApp for significant changes (if you have an active booking)

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: