Privacy Policy – Luxway

1) Data controller

Data controller: Luxway

Legal form: SRL

Address: Chaussée de Jette 479, 1090 Jette Belgium

Company/VAT number: 1030106940

Email: info@luxway.be

Phone: +32 470 61 50 11

2) Data we process

As online bookings are not available, we mainly process the data you provide when you contact us (phone, email, form, social media, WhatsApp).

• Identity & contact: first name, last name, email, phone number, company (if applicable).
• Request/ride details: desired date/time, pick-up and drop-off locations, logistical preferences (number of passengers, luggage, etc.), exchanged messages.
• Contact form: when you use the contact form on our website, we process the data you enter (e.g., first name, last name, email address, phone number if requested, subject and message content). We may also process technical data related to sending the form (date/time sent, technical connection information such as IP address), solely for security, spam prevention and diagnostics.
• Billing (if a service is provided): billing address, invoice details, history of commercial exchanges.
• Technical data: security logs, IP address (e.g., anti-fraud, website security), and cookie-related data according to your choices (see section 9).

Important: please do not send us sensitive data (e.g., health data, political opinions, religion), especially via messages.

3) Purposes (why we use your data)

We process your data to:

1. Respond to your requests (information, availability, quote).
2. Organise and deliver the chauffeur-driven rental service.
3. Provide customer service (follow-up, complaints, incidents).
4. Manage billing and accounting.
5. Secure the website and prevent fraud.
6. Measure audience and improve the website (if you accept the relevant cookies).
7. Respond to your request sent via the contact form (information, availability, quote).
8. Ensure customer relationship follow-up and service continuity.
9. Prevent spam and protect the website against abusive use.

4) Legal bases

Depending on the case:

• Pre-contractual measures / contract: processing necessary to provide a quote and deliver the service, and to respond to an information or quote request.
• Legal obligation: accounting/invoicing.
• Legitimate interest: security, fraud prevention, service improvement, spam prevention and efficient request handling.
• Consent: certain cookies/trackers and, where applicable, certain marketing communications.

5) Retention periods

We keep your data only for as long as necessary:

• Requests & exchanges (quotes/contact): up to 24 months after the last contact.
• Messages from the contact form: up to 24 months after the last exchange.
• Customer files/services: up to 2 years after the service.
• Billing data: according to applicable legal obligations.
• Associated technical data (anti-spam/security): generally 6 months.
• Security logs: 6 months.
• Cookies: depending on category and your choices (see section 9).

6) Data sharing (including WhatsApp)

We may share certain data, only if necessary, with:

a) Drivers (and operational partners)

To deliver the ride, drivers may receive information such as: first/last name, time, locations, logistical constraints.

b) WhatsApp (communication and transfer of info to drivers)

If you communicate with us via WhatsApp, or if certain operational information is shared with drivers via WhatsApp:

• Your data is processed via WhatsApp, a service provided by WhatsApp/Meta, under their own terms and policies.
• This may involve international transfers and the use of Standard Contractual Clauses (SCCs) as a transfer mechanism, according to documents published by WhatsApp.

Best practice: avoid sending sensitive or unnecessary information via WhatsApp (e.g., identity documents). If you prefer, you can request an exchange via email.

c) Technical service providers

Hosting (Belgium), maintenance, messaging, internal tools (if used), etc. These providers act as processors with confidentiality and security obligations.

Contact form (messaging)

Requests sent via the contact form are forwarded to Luxway and may be processed through our messaging solution (email host/messaging provider). These providers act as processors and only process data to deliver the service.

d) Authorities

If we are legally required to do so.

7) Transfers outside the EEA

We prioritise providers in the EEA. When tools involve processing outside the EEA (e.g., WhatsApp), we implement appropriate safeguards (such as SCCs) and, where necessary, additional measures.

8) Security

We implement reasonable technical and organisational measures (access controls, backups, permissions management, etc.) to protect your data.

9) Cookies and trackers

Our website uses cookies/trackers:

• Strictly necessary (website operation): no consent required.
• Audience measurement/analytics and/or marketing: only set after your consent, which you can manage via the cookie banner and change at any time.

For more information, see our Cookie Policy: .

10) Your rights

You have, in particular, the rights of access, rectification, erasure, restriction, objection (including marketing), and data portability (subject to conditions). You can also withdraw your consent at any time when processing is based on it.

To exercise your rights: contact us at info@luxway.be. We may request proof of identity in case of reasonable doubt.

11) Complaint to the supervisory authority (Belgium)

If you believe your rights are not respected, you can lodge a complaint with the Data Protection Authority (DPA/APD/GBA):

Address: Rue de la Presse 35, 1000 Brussels
Phone: +32 (0)2 274 48 00
Email: contact@apd-gba.be

12) Changes to this policy

We may update this policy to reflect legal/technical developments. The “Last updated” date at the top of the page indicates the version in force.