Passenger app privacy notice

Version: 2026-10-15 · Last updated: 5 November 2026

This notice explains how CabLink uses personal data about people who use the CabLink passenger app (on Android, on iPhone and iPad, and in the browser at cablink.ie/app/) to request or book a taxi in Kilkenny, Ireland: what we collect, why, who can see it, how long we keep it and what rights you have. Drivers have their own notice in the CabLink Driver app. Businesses that book taxis through a CabLink Business account, and the guests they book for, are covered on cablink.ie/privacy.

CabLink holds Dispatch Operator Licence DH12686, issued by the National Transport Authority.

Who is responsible for your data

The controller of your personal data is Marius Sorin Zamfir, sole trader, trading as CabLink, 64 Lintown Avenue, Kilkenny, R95 C6F9, Ireland. Registered business name number: 795100.

Privacy questions and requests: support@cablink.ie
Support: support@cablink.ie
Data protection officer: CabLink has not appointed one. At its current scale CabLink is not required to; it reviews this decision as it grows. Privacy questions go to support@cablink.ie.

"CabLink", "we" and "the office" in this notice mean the controller named above and the people who work for it in the CabLink office.

The short version

You sign in with your email address and a password. You confirm your email address, and you verify your mobile phone number once by SMS. You can then book.
While your request is waiting for a driver, drivers who can take it see your first name, where you want to be picked up and dropped off, and any comment you add. Only the driver who accepts sees your full name and phone number, and only while the trip is live.
The app uses your phone's location only while the app is open: when you tap to use it, and, if you switch it on, to share your live location with your driver until you are picked up.
If you cancel a lot, the system can make you wait or block your account. Before you confirm cancelling an immediate request, the app tells you what it will cost. These rules follow your verified phone number. A person at CabLink reviews any block or suspension if you ask, and can lift it.
We keep trip and booking records because the National Transport Authority (NTA) can ask to see them.
We do not sell your data, show you advertising, use analytics tools or send you marketing.

What we collect

Your account

Your email address and a password. Your password is handled by Google Firebase Authentication; we never see it. Firebase also records whether you have confirmed your email address, and technical sign-in data (for example when the account was created and last used).
Your mobile phone number, verified by a code Firebase sends you by SMS. The verified number is linked to your account and is the number your driver sees and calls. You verify by SMS only when you first add a number or change it; signing in, reinstalling the app or resetting your password does not send an SMS.
The account identifier Firebase gives your account. It stays the same when you reinstall the app or sign in on another phone, so your trips and bookings stay with your account.
Your first name (required) and surname (optional).
Your acceptance of the Passenger Terms and this notice: the version numbers you accepted and the time you accepted them, and the versions you accepted before. Before accepting you also tick a separate box confirming that you are 18 or over; the app records the acceptance, not a separate age record.
Technical values the service needs: when you last requested a trip or booking, and any wait, lock, block or suspension on your account (see "Automated rules" and "Suspension by the office").

If you used the app before 9 October 2026, your account was anonymous. When you add an email address and password, they are linked to the same account, so your trips and history stay yours.

We do not ask for your date of birth, home address or payment details.

Your trips and bookings

Pickup, any stops (up to 3) and destination: the address text, the map coordinates and Google's identifier for the place.
When you want to travel (now, or the date and time of a booking).
The type of vehicle you choose: number of seats, and whether you need a wheelchair-accessible taxi (see "Wheelchair-accessible taxis").
Any comment or note you add for the driver.
The fare estimate shown to you and the road distance of the route.
What happens to the trip or booking: when it was requested, accepted, when the driver arrived, when you were picked up and dropped off, the distance and duration, whether and why it was cancelled or reassigned, and the driver and vehicle that did it.
The contact details of the trip: your name and your verified phone number. The app always uses your verified number; you cannot give a different one.

Wheelchair-accessible taxis

Choosing a wheelchair-accessible taxi may reveal that you, or someone travelling with you, has a disability, which is health information. So the app asks for your explicit consent when you choose the wheelchair-accessible option: it is selected only if you tap I AGREE. We record only that a wheelchair-accessible vehicle is needed: the app never asks why, and never asks for a diagnosis or any other health information. We use it only to offer the trip to drivers whose vehicle the office has confirmed as wheelchair accessible. It is visible, as a vehicle requirement, to drivers who can see the open job and to the office, and it is kept with the trip record for the periods below. You can withdraw your consent at any time by choosing another vehicle before you request; a trip already requested keeps its record.

Messages, complaints and office messages

Trip chat: messages between you and your driver.
Your complaints: reports you make with REPORT A PROBLEM (category and description), with your first name and the trip details, and the office's notes and outcome.
Reports about you: a driver can report a problem with a passenger to the office, or ask not to be matched with a passenger again. These are linked to your trip and account. You are not notified in the app, but you can ask to see them (see "Your rights").
Messages from CabLink: conversations the office opens with you in the app (for example about a complaint or lost property), and your replies.
Emails to you: Firebase sends the email to confirm your address and, if you ask, the password-reset email. If the office suspends your account, CabLink emails you a notice with the end date and the reason (see "Suspension by the office"). CabLink sends no other emails.

Your location

When you tap to use it: the app reads your phone's location only when you tap USE MY LOCATION or the button that centres the map on you, and only while the app is open. It takes one reading, which is sent to Google to find the nearest address; you can then use it as your pickup.
Live location for your driver (optional, off by default): after a driver has accepted your trip, and until you are picked up, you can switch on SHARE MY LIVE LOCATION WITH DRIVER to help the driver find you. While it is on, the app writes your latest position (and its accuracy) to your trip, overwriting the previous one, at most every few seconds and only when you move or every 2 minutes. Only the driver who holds your trip can read it; the office cannot. It stops, and the position is deleted, when you switch it off, when you are picked up, when the trip ends or is cancelled, or when a different driver takes the trip; it also switches itself off after 30 minutes. It never changes your booked pickup, and no history of your positions is kept. It works only while the app is open.
The app never tracks your location in the background and never asks for background location permission.

On your phone only

Your Home and Work addresses, up to 10 named favourite places and up to 8 recent addresses are stored only on your phone, not on CabLink's servers. Address details that came from Google are refreshed or dropped after 30 days. They are cleared automatically when a different CabLink account signs in on the phone or when your account deletion completes; uninstalling the app also removes them. Because they are not on our servers, they do not move to a new phone.

Your phone and the app

A notification token so we can send you trip and booking updates (Firebase Cloud Messaging). On iPhone and iPad, Firebase passes the notifications to Apple Push Notification service (APNs), which delivers them to your device.
Crash reports from the app (Firebase Crashlytics): what went wrong in the code, your phone or tablet model, the version of its operating system (Android, iOS or iPadOS) and the app version. We do not attach your name, email address or phone number to crash reports.
App integrity checks (Firebase App Check: on Android using Google Play Integrity, on iPhone and iPad using Apple DeviceCheck), which tell our servers that a request comes from a genuine copy of the app. To check that an SMS verification request comes from a genuine app, Firebase may also use Play Integrity (Android), a silent Apple push notification (iPhone and iPad) or reCAPTCHA.
The browser version at cablink.ie/app/ uses none of these three: it has no notifications, crash reports or app integrity checks.

We do not collect your contacts, photos, camera, microphone, advertising identifier or data from other apps.

Who can see your data

Drivers

While your request or booking is waiting for a driver: drivers who are eligible to take it (licensed, with a suitable vehicle, and not excluded by the rules below) can see your first name, pickup, stops and destination, the time of a booking, the vehicle requirements, the fare estimate and any comment you added. An immediate request is offered to drivers for up to 10 minutes; then the system closes it (see "Automated rules"). A booking is shown to drivers only from 7 days before its pickup time. The text of job notifications sent to drivers does not include your name or addresses.
The driver who accepts: also sees your full name and verified phone number, but only while the trip is live (accepted, arrived at pickup, or on board), or while they hold your booking. They can call you from the app during that time. If you share your live location, they also see it until you are picked up.
After the trip: the driver keeps your first name and the trip addresses in their trip history, and can message you through the app for 21 days after a completed trip. They no longer see your phone number.
If you call your driver from the app, your phone shows your number to the driver as caller ID, as with any phone call.

What you see about your driver

Your driver's name, photo, vehicle (photo, make, model, colour and registration), live position on the map from acceptance until the trip ends, and an estimated arrival time; and your driver's phone number for the CALL button while the trip is live.

The CabLink office

The office can see your account (including your email address, verified phone number and any restriction on it), your trips and bookings, complaints, reports and office messages, and can cancel or reassign trips and bookings when needed. The office cannot see your password or your live location.
Trip chats: the office can open the chat between you and your driver only after recording a reason (a complaint investigation, lost property, safety, or a request from you or the driver). Each opening is logged with who opened it, when and why (never the message text), and access lapses after 8 hours.
Office actions on your account (for example a suspension, or a deletion the office carries out at your request) are logged with who did them, when and why.

Service providers acting for us

Google (Firebase) stores and processes our data as our processor: database (Cloud Firestore), sign-in, email confirmation, password reset and SMS verification (Firebase Authentication), server functions (Cloud Functions), notifications (Firebase Cloud Messaging), crash reports (Crashlytics) and app integrity (App Check). For notifications and crash reports Google also processes some technical data about the use of those services under its own terms.
Brevo delivers the account-notice emails CabLink sends (a suspension notice): it receives your email address and the text of the notice, as our processor. Brevo stores and processes this data in the European Union. The emails come from CabLink <support@cablink.ie>. Replies to support@cablink.ie are forwarded to CabLink's own inbox by Cloudflare's email routing service.
CabLink's road-routing service runs on a server CabLink rents from Contabo GmbH, a German hosting company, in the European Union, using the open-source routing software OSRM and OpenStreetMap road data. It works out road distances, routes and approximate drive times; it uses no traffic information. It receives map coordinates only, never your name, phone number or email address. Your app sends it your pickup, any stops and your destination, to estimate the fare and draw your route; after a driver has accepted and until the driver arrives, the driver's latest position (which your app already receives to show the taxi) and your pickup, at most every 15 seconds, to draw the road the taxi still has to drive and the arrival time you are shown. The driver's app sends it the driver's position and your pickup, to show the driver how far away your job is by road, decide whether a booking from a CabLink Business account is close enough to offer, draw the route to your pickup and work out the arrival time you are shown; and, once you are on board, the route through your stops to your destination. It only answers signed-in CabLink drivers and passengers whose phone number has been verified; CabLink Business accounts cannot use it. Distances are kept in the server's memory for up to 24 hours and routes for up to 30 minutes, by position only; positions are not written to its logs.
Google Maps Platform shows the map and handles addresses: when you type an address the text you type is sent to Google's place search (only if the app's own list of local places has fewer than 3 matches); when you pick a suggestion or use your location, Google converts it into an address or coordinates. Routes, fare distances and arrival times are not worked out by Google: CabLink's road-routing service (above) does that. When your driver taps to navigate, the driver's navigation app (Waze or Google Maps, both run by Google) receives the pickup, stop or destination being driven to, under its own terms and privacy policy. Google also receives your phone's IP address and basic device information when the map loads. For Google Maps Platform, Google is not our processor: Google (Google Ireland Limited for people in the EU) receives this data as an independent controller under its own privacy policy.
Apple (iPhone and iPad only): Apple Push Notification service delivers CabLink's notifications to your device, using a device token, and Apple DeviceCheck answers the app integrity checks described in "Your phone and the app". The iPhone and iPad app is distributed through Apple under Apple's own terms (TestFlight while in testing, the App Store once released). Apple handles this data under its own privacy policy.

Authorities and others

The National Transport Authority: CabLink must keep records of bookings and complaints and make them available to the NTA promptly on request (S.I. No. 33 of 2015, Regulation 63(5)).
Gardaí, courts and other public bodies where the law requires us to, and our legal and insurance advisers where needed to establish or defend a legal claim.

We never sell your data and we never give it to anyone for their own marketing.

Why we use your data and our legal basis

To create and secure your account (email, password, verified phone), take your request or booking, find a driver, show your trip and your driver's position, let you and your driver message and call each other, send you trip and booking updates, and answer your messages to the office: performance of our contract with you (the Passenger Terms), GDPR Article 6(1)(b).
Your live location, when you switch it on: performance of our contract with you, to help your driver find you (GDPR Article 6(1)(b)). It is your choice; switching it off stops it at once.
To keep records of bookings and complaints and make them available to the NTA, and to run the complaints procedure the NTA requires: legal obligation, GDPR Article 6(1)(c), under S.I. No. 33 of 2015, Regulation 63(4) and (5).
To keep the service secure and fair: crash reports, app integrity checks, the waits, locks, blocks and suspensions after repeated or late cancellations or misuse, keeping those restrictions with your verified phone number so that a new account cannot be used to get round them, the limit on open bookings, drivers' "don't match again" choice, and logging office access to chats and office actions: our legitimate interests in running a safe and reliable service, protecting drivers from wasted journeys and abuse, and being accountable for how the office uses data, GDPR Article 6(1)(f).
To investigate safety incidents and complaints, and to establish or defend legal claims: our legitimate interests and those of drivers and passengers, GDPR Article 6(1)(f).
Wheelchair-accessible requests: your explicit consent, given in the app when you choose the wheelchair-accessible option (GDPR Article 9(2)(a)), together with our contract with you (GDPR Article 6(1)(b)). We use it only to send a suitable vehicle, as described in "Wheelchair-accessible taxis".

Apart from wheelchair-accessible requests, we do not rely on your consent. The location permission your phone asks for (on Android, iOS or iPadOS, or your browser's permission in the web app) is a technical permission: you can refuse it and type addresses instead.

Where we rely on legitimate interests you can object (see "Your rights").

Automated rules

CabLink uses fixed rules, not profiling: they look only at what you did (for example how many requests you cancelled and when), never at who you are. They are:

First accept wins: your request is offered to all eligible drivers at once; the first driver to accept gets it. Drivers who declined your request, or who asked not to be matched with you again, are not offered it.
Searching time limit: an immediate request is offered to drivers for up to 10 minutes, and offered again every 30 seconds during that time. If no driver accepts it, the system closes it as "No driver available" and tells you; if no driver is available at all when you make the request, it is closed straight away. This is not a cancellation by you: it does not count toward any wait or block, and there is no penalty. If a driver who accepted your request gives it back before the pickup, it is offered to drivers again as a new search of up to 10 minutes.
Cancellation waits and blocks for immediate requests: the system counts the immediate requests you cancel yourself since your last completed ride, and the late cancellations (7 minutes or more after a driver accepted) you make in a calendar month. The first three cancellations make you wait 3 minutes, 15 minutes and 2 hours before your next immediate request; a fourth blocks the account from requesting rides. A second late cancellation in a calendar month blocks the account for 7 days; repeating that after such a block blocks the account from requesting rides. These counts, the dates of the cancellations and any block are stored on your account record. While an account is blocked, bookings it holds are cancelled.
Booking locks: if you cancel 5 bookings (or trips that came from a booking) after a driver had accepted them, or 12 of any kind, within one hour, you cannot request or book for 1 hour. Only cancellations you make yourself count.
Open-booking limit: you can have at most 5 open bookings. A 6th is cancelled automatically and you cannot request or book for 1 hour.
Short waits: you must wait a minute between two requests, and between two bookings. You can have one live trip at a time.
Scheduled bookings: a booking is offered to drivers from 7 days before its pickup time; a booking made further ahead waits until then. 30 minutes before pickup the driver holding your booking is asked to confirm; if they do not confirm within 5 minutes, or cannot start it in time, the booking is offered to other drivers. 15 minutes before pickup a confirmed booking becomes a live trip. If no driver has taken a booking 15 minutes after its pickup time, it expires and you are told.
Restrictions follow your verified phone number: a wait, lock, block or suspension is also recorded against your verified phone number. If that number is verified on another CabLink passenger account (for example after you delete your account and create a new one), the restriction applies to that account too until it ends.

Why these rules exist. Every cancelled request takes a driver away from other passengers, sometimes after they have already driven towards you. The waits and blocks protect drivers' time and keep taxis available for people who travel. Before you confirm cancelling an immediate request, the app tells you exactly what it will cost (for example "you cannot request again for 15 minutes", or that it will block the account), so a restriction never comes as a surprise.

What this means for you. The waits and the one-hour locks are short and end by themselves. A block, however, stops you requesting or booking rides with CabLink, and a block after a fourth cancellation, or after repeated late cancellations, does not end by itself. These blocks are decided by the system, and they may significantly affect you. You therefore have these rights (GDPR Article 22(3)):

Ask a person to review it. Email support@cablink.ie (or write to 64 Lintown Avenue, Kilkenny, R95 C6F9, Ireland), say which account (your email address or phone number) and why you think the block or restriction should not apply, and add anything you want us to consider, for example an emergency, a problem with the app or a driver who did not come. A person at CabLink, not the system, looks at the cancellations that were counted and at what you tell us, and replies to you with the outcome and the reason.
What a review can do. The person reviewing can confirm the restriction, shorten it or lift it, and corrects your account record if something was recorded wrongly. A review is a fresh look at your case, not an automatic reversal: a restriction that was applied correctly and fairly may stay in place.
You can also complain to the Data Protection Commission (see below).

Suspension by the office

The office can suspend an account, for example after abuse of a driver, a safety concern or misuse of the service. A suspension is decided by a person, not by the system, and is recorded with who decided it, when, why and for how many days (1 to 365). While it runs you cannot request or book rides, and bookings it covers are cancelled. You are told in the app, and CabLink emails you a notice with the end date and the reason. The suspension ends by itself on the date shown. Like a block, it also follows your verified phone number. If you believe it was issued in error or is too long, contact support@cablink.ie: a person who did not take the decision where possible reviews it and replies, and can confirm, shorten or lift it.

Where your data is stored

Database (Cloud Firestore): Google's multi-region location "eur3" in the European Union. Your profile, trips, bookings, chats, complaints, office messages, your shared live location (while it is on), the record of restrictions linked to your verified phone number, and the queue of account-notice emails are stored there.
Sign-in (Firebase Authentication): Google runs this service in the United States. For you it holds your email address, your password in protected form, your verified phone number, the account identifier and technical sign-in data.
Server functions: Google's europe-west1 region (Belgium), except one function that checks drivers' uploaded files, which runs in us-east1 (United States).
Files (Cloud Storage): drivers' photos and vehicle photos, which you see on your trip, are stored in Google's US-EAST1 region in the United States. No files about passengers are stored there.
Email delivery (Brevo): in the European Union (Brevo's data centres in France, Germany and Belgium).
Road-routing service: CabLink's server with Contabo GmbH, in the European Union.
Crash reports, notifications, app integrity, SMS delivery and Maps services are provided by Google and may be processed in the United States and other countries where Google operates. On iPhone and iPad, notification delivery and app integrity checks also pass through Apple, which may process them in the United States and other countries where Apple operates.

Transfers to the United States are made to Google LLC, which is certified under the EU-US Data Privacy Framework (European Commission adequacy decision (EU) 2023/1795). Google's data processing terms for Google Cloud and Firebase rely on that framework and provide the European Commission's Standard Contractual Clauses as a fallback. CabLink has decided to keep its file storage in the United States on this basis.

How long we keep your data

These are CabLink's retention periods. The National Transport Authority does not set a retention period for booking and complaint records; the periods below are CabLink's own choice.

The periods below are applied automatically. An automatic process runs every night and deletes or anonymises records when their period ends.

Trip and booking records: kept in full for 12 months after the trip or booking ends, including the name and phone number stored with each trip. The record is then anonymised: your name, phone number and comments, the driver's phone number and photo links, the driver's position, the map coordinates and the link to your account are removed. A register entry remains (see below).
Link between past trips and your account: the account identifier is removed from each trip and booking when it is anonymised at 12 months. A record on hold (see "Holds") is anonymised, and unlinked, only after the hold ends.
Map coordinates of past trips: removed when the record is anonymised at 12 months; the address text is kept.
Anonymised trip register: kept for 6 years after the trip or booking ended, then deleted. Six years is the period within which most legal claims about a journey can be brought in Ireland. A register entry still contains the address text of the pickup, stops and destination, the times, distance, fare estimate and how the trip ended, and the driver's name, licence numbers and vehicle. It is therefore still personal data about the driver and, because addresses and times can point to a person, potentially about you. It is not anonymous statistics.
Your live location: deleted as soon as you switch sharing off, are picked up, or the trip ends or changes driver. This happens at once, not at the nightly process.
Restrictions linked to your verified phone number: CabLink keeps, for each verified phone number, which account it belongs to, the accounts it belonged to before (up to 10), and any wait, lock, block or suspension that applies to it, so that a restriction cannot be avoided by using a new account. How long depends on what it holds: a number that never had a restriction is deleted 30 days after it stops being linked to an account (you change your number or delete your account); a number whose restrictions all had an end date is deleted 12 months after the last one ended; a number with a block that has no end date is kept while the block is in force, a person reviews the block 24 months after it was applied, and the record is deleted once the block is lifted. The list of earlier accounts keeps only entries from the last 24 months.
Trip chat messages: deleted 180 days after the trip ended. You and your driver can write for 21 days after a completed trip; after that the chat is read-only until it is deleted. These are two different periods.
Complaints: kept in full while open and for 12 months after they are resolved; then the description, outcome, office notes, the complainant's name and contact details and the addresses are removed; the reference, category, status, dates, the driver's name and the links to the trip and the accounts involved remain.
Messages from CabLink: the messages are deleted 12 months after the office closes the conversation. Deleting your account closes your open conversations and removes your name from them.
Account-notice emails: CabLink keeps a copy of each notice it sends (your email address, the end date and the reason) in its email queue, with the delivery result, for 24 months, as a record that you were told; then it is deleted.
Driver blocks: a driver's "don't match again" entry about you is deleted 12 months after it was made.
Account deletion grace period: 7 days after you ask to delete your account (see "Deleting your account").
Inactive passenger accounts: an account with no activity for 24 months is deleted as if you had asked.
Deleted-account marker: the emptied profile left after a deletion (no name; it still holds the verified phone number) is removed 30 days after the deletion.
Office action log: kept for 24 months.
Office chat-access log: kept for 24 months. It records which trip chat the office opened, who, when and why, never the messages.
Export log: kept for 24 months. It records that the office exported records, when, by whom and to whom.
Record exports made by the office: files the office generates (for example for the NTA) are deleted from the office device after 24 hours.
Crash reports: kept by Google for 90 days.

Holds. A trip linked to an open complaint, or placed on hold by the office with a recorded reason, is kept until the complaint is resolved or the hold is lifted, and then follows the periods above.

Backup copies. So that CabLink can recover from a fault or an accidental change, Google keeps copies of CabLink's database for CabLink: a running history from which the database can be restored as it was at any minute of the last 7 days, and a copy taken every Sunday, each kept for 14 weeks and then deleted automatically. A one-off copy of the database made on 16 October 2026, before the service opened to the public, is kept for the same 14 weeks, until 22 January 2027, and then deleted. Data that is deleted or anonymised under the periods above can therefore remain in these copies for up to 14 weeks after it left the live system; it cannot be deleted from a copy one item at a time. The copies stay in the European Union, are used for nothing else, and only CabLink's administrator can open them, to restore data after a fault. If data is ever restored from a copy, every deletion and anonymisation made since that copy was taken is applied again before the restored data is used.

Deleting your account

In the app: Profile → Help & Support → Delete Account. You cannot do this during a live trip; cancel any upcoming bookings first. Your account is suspended at once: you cannot request or book, and you can reactivate it in the app during a grace period of 7 days. After the grace period the account is deleted by the nightly process described above; your account stays suspended until then.
If you cannot sign in: first try Forgot password in the app (the reset link goes to your email address). If you cannot use that email address any more, email support@cablink.ie with the subject "Delete my passenger account" from the email address on your account if you can. We check that the request comes from the account holder before acting. If you cannot write from that address, we ask for details only the account holder would know (for example the verified phone number and roughly when you last travelled), and we do not act on a request we cannot verify. The office then schedules the deletion without the grace period.
What is deleted: your sign-in (email address, password and the phone number held by Firebase), your name and phone number on your profile, your notification token, and your name on office conversations. Open bookings are cancelled.
What is kept, and why: trip, booking and complaint records, including the name and phone number stored with each trip, follow the periods above, because we must be able to produce booking and complaint records for the NTA and may need them for legal claims (GDPR Article 17(3)(b) and (e)). The record of restrictions linked to your verified phone number is also kept (see above), because otherwise deleting an account would be a way to get round a block.

Full details: cablink-ff664.web.app/passenger-delete-account.html.

Your rights

Under the GDPR you have the right to:

access the personal data we hold about you and get a copy, including reports drivers have made about you and the restrictions recorded against your phone number;
rectification of data that is wrong or incomplete (you can change your name in the app, and change your phone number by verifying the new one by SMS);
erasure of your data, where we no longer need it or have no legal basis to keep it. We cannot delete booking and complaint records we must keep for the NTA, or data we need for legal claims, until the periods above end;
restriction of our use of your data while a dispute about it is resolved;
object to processing based on our legitimate interests;
data portability: a copy of the data you gave us (account details, trip and booking requests, your messages) in a machine-readable format, because we use it to perform our contract with you;
human review of a block or other restriction applied by the automated rules, to give your point of view and to contest it (see "Automated rules");
withdraw your consent to the use of a wheelchair-accessible request at any time, by choosing another vehicle; this does not affect trips already requested.

To use a right, email support@cablink.ie or write to 64 Lintown Avenue, Kilkenny, R95 C6F9, Ireland. Please write from the email address on your account; if you cannot, we may ask you to confirm details only the account holder would know before we answer. We will answer within one month; if a request is complex we may extend this by two further months and will tell you why within the first month (GDPR Article 12(3)).

Complaints to the Data Protection Commission

You can complain to the Data Protection Commission at any time: Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland, www.dataprotection.ie. We would like the chance to resolve your concern first, but you do not have to contact us before going to the Commission.

Age

You must be at least 18 years old to use the CabLink passenger app. Before you can continue, the app asks you to tick a box confirming that you are 18 or over, as part of accepting the Passenger Terms. It does not ask for your date of birth and does not check your age in any other way.

No marketing

CabLink does not send marketing messages, does not show advertising and does not use analytics or advertising tools. Notifications and emails from CabLink are only about your account, trips, bookings and messages.

Security

Data is encrypted in transit between the app and Google's servers and stored by Google with encryption at rest. Your full name and phone number are kept apart from the job details drivers see, and are released only to the driver holding your trip. Your live location can be read only by the driver holding your trip. The record of restrictions linked to phone numbers cannot be read by any app, only by CabLink's servers. Office staff sign in with individual accounts, and office access to trip chats is logged.

Changes to this notice

When we change this notice we publish the new text with the date it was last updated and say what changed. If the change matters, it gets a new version and the app asks you to read and accept it before your next booking. Earlier texts are available from support@cablink.ie.

What changed on 5 November 2026: this notice now also covers the iPhone and iPad app and the browser version (Apple notifications and integrity checks, and what the browser version does not use), and says that the automatic deletion is running; it has run every night since 30 October 2026. CabLink's retention periods did not change, and the version you accepted stays valid.

What changed on 29 October 2026: a new paragraph, "Backup copies", says how long copies of the database are kept (7 days of history and weekly copies kept for 14 weeks), that deleted data can remain in them for that time, who can open them, and that deletions are applied again after any restore. Nothing else changed, and the version you accepted stays valid.

What changed on 16 October 2026: routes, fare distances and arrival times are now worked out by CabLink's own road-routing service instead of Google's Directions service: Google no longer receives your pickup, stops and destination to draw your route, nor the driver's position to estimate the arrival time. Before pickup your app shows the road the taxi still has to drive, updated from the driver's position. Nothing else changed, and the version you accepted stays valid.

What changed on 15 October 2026: accounts now use an email address, a password and a phone number verified by SMS (they were anonymous before); optional live location for your driver; Home, Work and favourite places on your phone; explicit consent for wheelchair-accessible requests; restrictions that follow your verified phone number, and a review that can lift them; suspensions by the office and their email notices; the road-distance service and the email provider; all retention periods, including the trip register; the operator's contact details and licence; the data protection officer decision; and the fact that automatic deletion is not yet switched on.

Related documents: Passenger Terms · Delete a passenger account

CabLink Passenger Privacy Notice