Data Privacy & Your Rights
Last updated: May 31, 2026
Georgia residents
Georgia is our home state. Georgia does not yet have a comprehensive consumer privacy statute, so the rights below — granted by Road2Sky to every rider regardless of residency — together with applicable federal law (the FTC Act, the Telephone Consumer Protection Act, and the Americans with Disabilities Act) define your privacy protections in this state:
- Access — request a copy of the personal information we hold about you.
- Correction — fix or update inaccurate information in your account.
- Deletion — close your account and have associated personal data removed (subject to legal retention requirements).
- Marketing opt-out — unsubscribe from non-transactional email and SMS at any time.
- Reasonable security & breach notice — we follow industry-standard safeguards and notify affected riders without unreasonable delay.
New Jersey residents (NJDPA)
Under the New Jersey Data Privacy Act (effective January 15, 2025), once we meet the statute's applicability thresholds for NJ residents, you are entitled to:
- Confirm processing and access personal data we have about you.
- Correct inaccurate personal data.
- Delete personal data provided by or obtained about you.
- Data portability — obtain a copy of your personal data in a portable format.
- Opt out of (i) targeted advertising, (ii) sale of personal data, and (iii) profiling that produces legal or similarly significant effects.
- Sensitive-data consent — we will obtain affirmative consent before processing sensitive personal data (e.g. precise geolocation outside a ride).
We will respond to NJ requests within 45 days. If we deny a request you may appeal, and if the appeal is denied you may file a complaint with the New Jersey Office of the Attorney General, Division of Consumer Affairs.
New York residents (SHIELD Act)
Under the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act we maintain a written information-security program, perform risk assessments, encrypt personal data in transit and at rest, and notify NY residents of any breach of their private information without unreasonable delay (and within statutory deadlines).
New York consumers also retain the rights described in the Georgia residents section above. We support these for every NY rider regardless of any other state law.
California residents (CCPA / CPRA)
If you are a California resident, you have the right to:
- Right to know — request what personal information we collect, use, and disclose about you.
- Right to delete — request deletion of your personal information (subject to legal retention requirements).
- Right to correct — request correction of inaccurate personal information.
- Right to opt out — opt out of the sale of your personal information (we do not sell personal data).
- Right to limit — restrict the use of sensitive personal information (e.g. precise location) to essential service purposes.
- Right to non-discrimination — we will not discriminate against you for exercising any of these rights.
Information we collect
In the last twelve months, we have collected the following categories of personal information:
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, email, phone, mailing address | Account creation and communication |
| Location data | GPS coordinates during active rides, pickup / drop-off addresses | Ride tracking, chauffeur matching, fare calculation |
| Transaction data | Ride history, fare amounts, tip amounts, tokenised card references | Service delivery, billing, accounting |
| Device information | Browser type, IP address, device OS, session cookies | Security, fraud detection, diagnostics |
| Commercial information | Services used, promo codes redeemed, preferences | Service improvement, personalisation |
Data retention
We retain your personal data for as long as your account remains active, plus seven (7) years for tax, accounting, and legal compliance after account closure. Ride history and transaction data may be retained indefinitely in anonymised, aggregated form for analytics — those records cannot be re-linked to identifiable individuals.
Do we sell or share your data?
No. We do not sell your personal information for monetary value, and we do not share it for cross-context behavioural advertising. We share limited data only with service providers (payment, SMS, email) under strict data-handling agreements, or as required by valid legal process.
How to exercise your rights
You can submit a rights request in one of three ways:
- Online form: Do Not Sell or Share My Personal Information (preferred — fastest response)
- Email: privacy@road2sky.com with the subject "Privacy Rights Request"
- Phone: 1-800-CAR-RENT (Monday — Friday, 9 am — 8 pm)
- Mail: Road2Sky Privacy Office, Atlanta, Georgia, USA — full mailing address available on request via the email above.
We'll verify your identity and respond within 45 days. You may also authorise an agent to submit a request on your behalf — we'll require written proof of authorisation.
Minors
Road2Sky does not knowingly collect personal information from anyone under 18. If you become aware that a minor has provided us with personal information, please contact our privacy team and we will delete it promptly.
Contact us
Our privacy team responds to all data-rights requests within 45 days. If you're not satisfied with our response, you may file a complaint with the consumer-protection authority for your state — for example the Georgia Consumer Protection Division, the New Jersey Division of Consumer Affairs, the New York Office of the Attorney General, or the California Office of the Attorney General.