Privacy Policy
Last updated: 17 October 2026 · Version 1.1
1. General
This Privacy Policy explains what personal data Meilora collects and processes, for what purposes, on what legal grounds, how long it is retained, to whom it may be disclosed, and what rights data subjects have.
This Policy applies to personal data of users of the Meilora platform, including website visitors, registered users, customers, passengers, representatives of corporate clients, job applicants, and persons who interact with us for support, communication or other purposes.
2. Data Controller
The data controller for personal data processed through the Meilora platform is HENRI LEROUX LTD, trading as Meilora, a private limited company incorporated in England and Wales (company number 17319863), with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
For data protection enquiries, please contact us at: support@meilora.com
Meilora has not appointed a Data Protection Officer (DPO) as this is not currently required under applicable law given the nature and scale of our processing activities. The contact above serves as the point of contact for data protection matters.
3. Data We Collect
- 3.1 Identification and contact data: full name; email address; telephone number; account data; lead passenger details; where relevant, corporate contact details.
- 3.2 Booking data: route; pickup and drop-off locations; travel date and time; number of passengers; luggage information; child seat and other additional requirements; booking confirmation, modification, cancellation and fulfilment data.
- 3.3 Payment data: We may receive information about payments, transaction status, currency, amount, refunds and related operations. Full card details are generally processed by the payment provider, not the platform, unless otherwise stated.
- 3.4 Communication data: email correspondence; messages via the website, application, chat or messaging services; call recordings or support interaction content, where permitted by law.
- 3.5 Technical and digital data: IP address; device data; browser and operating system; session identifiers; technical logs; website and application usage events; cookies and similar technologies.
- 3.6 Job applicant data: name; email; location; profile link; CV and supporting documents; cover message; other data voluntarily provided by the applicant.
4. How We Collect Data
We receive data: directly from the user; from a customer booking a service for another passenger; from a corporate client; from service providers where necessary to fulfil a booking; from payment providers; from analytics, communication, hosting, mapping and other integrated services; automatically through use of the platform.
5. Purposes of Processing
We process data for the following purposes, among others: providing access to the platform; creating and managing accounts; processing enquiries and bookings; confirming, modifying, cancelling and accompanying orders; coordinating with service providers; processing payments, refunds and settlements; user support; verifying email, phone and other details; booking and security notifications; fraud and abuse prevention; platform improvement, analytics and statistics; legal compliance; processing job applications; protecting the rights and legitimate interests of the platform.
6. Legal Basis for Processing
Depending on the circumstances, we may process data on the following grounds: performance of a contract or pre-contractual steps; compliance with a legal obligation; legitimate interests of the controller; consent of the data subject; protection of vital interests; or another basis provided by applicable law.
7. Legitimate Interests
Our legitimate interests may include: ensuring the operation and security of the platform; fraud prevention and protection against unauthorised access; protection against abuse; service quality improvement; internal reporting and administration; protection of rights in disputes and claims; processing job applications and team development.
8. Recipients of Data
We may disclose data to:
— Independent transport providers (drivers and fleet operators): passenger name, contact details, pickup location, destination and booking details are shared with the assigned driver or fleet as necessary to fulfil the booked transfer. This is an essential part of the marketplace model.
— Experience providers (tour, activity and ticket operators and distributors, such as Viator and Tiqets): when you book an experience on Meilora, the lead traveller’s name and contact details, the participants and the booking details needed to book and deliver the experience.
— Payment providers (Stripe, PayPal and equivalents): for payment processing, refunds and fraud prevention.
— Cloud infrastructure and hosting providers.
— Communication service providers (email, SMS, push notifications).
— Mapping and geolocation services.
— Analytics providers, where consent has been obtained.
— File and document storage services.
— Professional advisers (legal, financial, audit).
— Public authorities and other persons where required by law.
We disclose only the volume of data reasonably necessary for the relevant purpose.
9. International Data Transfers
Where necessary for platform operation, data may be transferred to other countries. In such cases we take reasonable measures to ensure an adequate level of data protection in accordance with applicable law, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, and other lawful transfer mechanisms.
10. Retention Periods
We retain personal data no longer than necessary for the purposes of processing, unless a longer period is required by law, to resolve disputes, for tax records, contract performance or protection of the platform’s rights.
Retention periods may depend on the category of data, account status, presence of a booking, claim, dispute, legal requirement or other circumstances.
11. Rights of Data Subjects
Depending on applicable law, you may have the right to: request access to your data; request correction of inaccurate data; request erasure of data; request restriction of processing; object to processing; request data portability; withdraw consent where processing is based on consent; not be subject to solely automated decision-making that produces legal or similarly significant effects (Article 22 GDPR, where applicable); lodge a complaint with the relevant supervisory authority.
Some rights may be limited by law or may not apply in specific circumstances. To exercise your rights, contact us at support@meilora.com. If you are in the United Kingdom, you can also complain to the Information Commissioner’s Office (ico.org.uk).
12. Data Security
We take reasonable technical and organisational measures to protect data against loss, unauthorised access, alteration, disclosure or destruction. However, no data transmission or storage system can guarantee absolute security.
13. Data of Minors
The platform is not intended for independent use by children in circumvention of applicable rules. Where processing of a child’s data is required in connection with a journey, such data must be provided by a legal guardian or other authorised person, to the extent necessary for service delivery and legal compliance.
14. External Links and Services
The platform may contain links to third-party websites and services. We are not responsible for their privacy practices, content or data processing policies.
16. Changes to This Policy
We may update this Policy from time to time. The current version is published on the platform with the date of last update.
17. Contact
For personal data processing enquiries, please contact us at: support@meilora.com
Postal address: HENRI LEROUX LTD (Meilora), 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
You may also use the Help page at meilora.com/help.