Privacy Policy

Effective Date: July 21st 2025

Zeelo Ltd and Zeelo Inc ("Zeelo", "we", "us", or "our") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share personal data across our business operations, including via our website (https://zeelo.co), rider and driver applications, customer support channels, and sales and marketing activities, in accordance with applicable data protection laws in the UK, the US, and other relevant jurisdictions.

1. Who We Are
‍
Zeelo is a transportation technology company operating in the United Kingdom, Ireland and the United States. We help businesses and schools manage safe, efficient shared transportation. Zeelo Ltd is registered in the UK, and Zeelo Inc is our US-based entity. For the purposes of data protection law, Zeelo acts as the data controller of personal data processed across our services, except where we act as a data processor on behalf of our clients (i.e. employers or schools).

When We Act as a Data Processor
‍
Zeelo acts as a data processor when we provide services on behalf of our clients who are the data controllers. This includes situations where:

• A school or employer provides us with rider information (e.g., names, emails, route access) to onboard users to the service.

• An employer or school specifically instructs Zeelo regarding personal data handling, e.g. user onboarding, notifications and reporting.

In these cases, the client retains control over the data and determines the purpose and means of processing, while Zeelo follows their instructions under a Data Processing Agreement.

2. What Data We Collect
‍
We collect and process the following types of personal data, depending on your relationship with Zeelo:

• Riders (students and employees) and rider parents (for children): Name, contact details (email and/or phone number), boarding and travel data, date of birth, payment history, communication preferences, device info, app usage.

• Drivers (subcontracted operators): Name, contact details, license and onboarding info, cell phone location data while driving, trip data, device info, app usage.

• Managers at transportation operators: Name, work contact details, account access activity.

• Customer managers (at schools/employers): Name, job title, work contact details, account access activity, report access.

• Prospective customer managers: Name, job title, work contact details, company info, communications with Zeelo and interaction with advertisements.

• Website visitors: IP address, browser type, cookies, pages visited, and submitted form data.

• Customer care contacts: Name, contact details, inquiry content, and interaction records.

We may also log and monitor user access and actions in our systems for security and audit purposes.

3. How We Use Your Data
‍
We use your data to:Provide and operate contracted transportation servicesFacilitate rider and driver app access and usageSupport customer relationships and respond to inquiriesAnalyse service quality and usage and improve our offeringsConduct marketing and sales out reachEnsure safety and monitor operational performanceComply with legal and regulatory requirementsSupport audits, risk management, and security operations

4. Legal Bases for Processing
‍
We rely on the following legal bases:Your consent (e.g., for marketing or non-essential cookies)Performance of a contract (e.g., delivering services to riders or customers)Our legitimate interests (e.g., service and app improvement)Compliance with legal obligations

5. Table of Uses and Legal Bases by Persona

6. Cookies and Tracking
‍
We use cookies to improve user experience and analyse traffic. For more information, please see Zeelo’s Cookie Policy. 

‍7. Sharing Your Data
‍
Zeelo never sells your data. We may share your data with:

• Service providers supporting our platform, apps, and customer operations (see our subprocessors listing for the service providers that process rider data provided by schools)

• Subcontracted transport operators (e.g., for driver onboarding or trip coordination)

• Clients (e.g., schools/employers) where we operate on their behalf

• Legal authorities or regulators when required

• Auditors or consultants assisting with compliance or security reviews

We ensure all third parties process data under strict contractual obligations and in line with applicable privacy laws. 

‍8. International Data Transfers
‍
Where data is transferred across borders in the UK, European Economic Area (EEA), or US, we ensure appropriate regulatory safeguards are in place to ensure your personal data remains protected. Many of our subprocessors are part of the EU-US Data Privacy Framework and its UK extension. For those that aren’t, we employ Standard Contractual Clauses as defined in the GDPR to provide legal protection.

‍9. Data Retention
‍
We retain personal data only as long as necessary for the purposes set out above or as required by law. Retention periods are determined based on contract requirements, legal obligations, and business needs, and are documented in our internal data retention schedule. Rider data is retained for up to two years after last inactivity unless superseded by another legal or contractual requirement.

‍10. Your Rights
‍
You have rights under applicable data protection laws, including:Access your dataCorrect inaccuraciesRequest erasureObject to or restrict processingWithdraw consentData portability (where applicable)To exercise your rights, contact us at contact@zeelo.co. We will respond within one month of receiving your request.

‍11. Children’s Data
‍
Where our services involve student riders, we process children’s data under the authority of the school or parent/guardian, and always with appropriate safeguards. We do not knowingly collect data directly from children via the website.

‍12. Accountability and Governance
‍
Zeelo maintains internal privacy governance processes that include regular risk assessments, data protection impact assessments (DPIAs), staff training, and oversight by a data protection officer.

‍13. Changes to This Policy
‍
We may update this Privacy Policy from time to time. Please check this page periodically for updates.

‍14. Contact Us
‍
If you have questions or concerns, please contact us at contact@zeelo.co or write to either:

• Zeelo, Inc., 859 Willard Street, Suite 400, Quincy, Massachusetts, 02169.

• Zeelo Limited, Building 423 - Sky View (Ro) Argosy Road, East Midlands Airport, Derby, England, DE74 2SA.