Privacy Policy

1. Data we collect

We collect the following data: name, email address, phone number, location data (for order fulfilment), payment data (processed via a secure payment solution) and platform usage data (logs, device info).

From drivers, we additionally collect: national ID number (for identity verification), vehicle details and a copy of the driving licence.

2. Purpose and legal basis for processing

We process data for: providing the service and fulfilling the contract (GDPR art 6(1)(b)), compliance with legal obligations (art 6(1)(c)), and legitimate interests in developing the service and ensuring security (art 6(1)(f)).

3. Data retention

We retain data for as long as necessary to provide the service, but no longer than 3 years after the last use. Accounting records are retained for 7 years as required by law.

4. Sharing with third parties

We share data only with partners necessary to provide the service: payment processors, analytics services (in anonymised form), and law enforcement where required by law. Data is never sold or shared with third parties for marketing purposes.

5. Your rights

You have the right to: access your data, request correction or deletion, restrict processing, object to processing, and request data portability.

To exercise your rights, contact: info@heva.me. We will respond within 30 days. You may also lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

6. Cookies

We use cookies to operate the service and measure usage statistics. More information is available in our Cookie Policy.

7. Contact

For privacy-related questions, contact: info@heva.me