Privacy Policy

1. Data subjects covered by this policy

• Passenger account holders who book or pay for rides for themselves
• Guest bookers using Mango’s guest checkout flow
• Booked-for riders whose trip is arranged by another person or business contact
• Solo minors booked by an adult account holder, together with their guardian or emergency contacts
• Drivers and driver-app users
• Business ride contacts and invoice contacts
• Support contacts, complainants, and safety reporters
• Visitors to Mango’s websites and public booking surfaces

2. Categories of personal data

3. Purposes and legal bases

3.1 Performance of a contract

• Create and manage accounts.
• Match rides, show ride status, process bookings, and facilitate communications.
• Collect payments, process payouts, and provide billing documents.
• Support cancellations, refunds, complaints, and customer service.

Legal basis: performance of a contract or taking steps at the data subject’s request.

3.2 Legal obligations

• Maintain tax, accounting, and payout records.
• Comply with legal requests, fraud controls, and regulated payment obligations.
• Maintain legally required evidence or records about disputes, incidents, and platform governance actions.

Legal basis: compliance with legal obligations.

3.3 Legitimate interests

• Protect the safety of passengers, drivers, Mango staff, and third parties.
• Prevent fraud, abuse, account takeovers, chargebacks, and platform circumvention.
• Investigate complaints, misconduct, no-shows, cleanup claims, and trust-and-safety incidents.
• Improve platform reliability, diagnostics, product quality, and operational planning.
• Verify that a booker is authorised to arrange a ride for another rider, including a solo minor, and keep an auditable record of that attestation.
• Send first-contact notices or ride updates to a booked-for rider, guardian, or emergency contact where that is reasonably necessary to perform or safeguard the ride.

Legal basis: Mango’s legitimate interests, balanced against the rights and freedoms of data subjects.

3.4 Consent

• Non-essential website analytics and advertising tags.
• Device permissions such as precise location, camera access, microphone access where applicable, and push notifications.

Legal basis: consent where required by law. Consent can be withdrawn, but earlier processing remains lawful.

4. Passenger-specific processing

For passengers, Mango typically processes account data, ride requests, live location, payment data, support messages, ratings, dispute materials, and fraud indicators to operate the booking flow, provide real-time updates, facilitate billing, and review cancellations or incident charges.

5. Guest, booked-for rider, and solo-minor processing

When a ride is booked without a Mango account, Mango processes the guest booker’s contact details, ride details, payment status, consent evidence, device or browser identifiers, and support history to create the booking, provide status updates, process payment, and keep a record of the guest clickwrap acceptance that applied at the time of booking.

When a signed-in user books for another person, Mango processes the booked-for rider’s name and phone number, the booker’s authority attestation, the stated relationship or booking role, and any ride-related updates that need to be sent to the rider, the booker, or both. Mango expects the booker to inform the rider or otherwise be authorised to share that rider data with Mango.

When an adult books a solo-minor ride, Mango may also process guardian or emergency contact details, the adult’s acknowledgement of the Third-Party & Minor Ride Booking Policy, and safety notes needed to coordinate pickup, drop-off, or incident handling. Mango is not a guardian or childcare provider, but it may use that data to facilitate communications and safety escalation during the ride.

6. Driver-specific processing

For drivers, Mango typically processes business identity data, KVK and VAT data, operator permit details, taxi driver card data, vehicle and insurance evidence, work-location settings, payout readiness, ratings, complaints, fraud indicators, and safety or moderation data in order to verify eligibility, enable dispatch, facilitate payouts, and enforce platform rules.

7. Profiling, fraud scoring, and safety review

Mango may use automated signals and human review to detect fraud, payment abuse, unsafe behavior, document inconsistencies, suspicious account patterns, chargeback risk, and operational reliability issues. These signals may influence internal review, requests for more evidence, dispatch restrictions, or safety interventions.

Mango does not rely solely on fully automated decision-making with legal or similarly significant effect where such processing is prohibited by law. Safety or compliance decisions may involve manual review and escalation.

8. Recipients and processors

Mango may share personal data with the following categories of recipients where relevant:

• Passengers and drivers, to the extent needed to perform a ride and related support.
• Payment and payout providers such as Stripe, including Stripe Connect for driver onboarding and payouts.
• Hosting, authentication, and database providers such as Supabase.
• Diagnostics and monitoring providers such as Sentry.
• Maps, geolocation, and routing providers such as Google Maps services.
• Messaging, notification, and infrastructure providers such as Expo, Apple, Google, email providers, and telecom vendors where enabled.
• Adtech and analytics providers on the website only after consent, such as Google and Meta.
• Professional advisers, insurers, regulators, law enforcement, or courts when legally required or reasonably necessary for claims or safety handling.

9. International transfers

Some processors or subprocessors may process personal data outside the EEA. Where that happens, Mango aims to use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or another valid transfer mechanism.

10. Retention

11. Data subject rights

Subject to the conditions and exceptions under applicable law, you may request:

• Access to your personal data
• Correction of inaccurate data
• Deletion of data that Mango no longer needs to keep
• Restriction of processing
• Objection to processing based on legitimate interests
• Data portability where applicable
• Withdrawal of consent where processing depends on consent

12. Account deletion and data export

Mango may provide in-app or support-driven processes for data export and account deletion. When an account is deleted, Mango may still retain data that must be kept for tax, accounting, anti-fraud, safety, legal, claims, moderation, or immutable billing record purposes.

13. Security

Mango applies technical and organisational measures intended to protect personal data, including access controls, role-based permissions, audit logging, secure storage, secret management, and operational monitoring. No system is completely secure, and users should also protect their own credentials and devices.

14. Complaints and contact

Privacy requests and complaints can be sent to legal@taximango.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority.