Legal
Privacy statement
This English version is provided for convenience. In the event of any inconsistency, the Dutch version shall prevail.
Last updated on 9 August 2026. This statement describes how Noir Driving Services, trading under the name T4XI, handles your personal data when you use our website or book a ride.
Who is responsible
Noir Driving Services in Almere, the Netherlands.
Chamber of Commerce number: 80673813
VAT identification number: NL003472098B32
Email: booking@t4xi.nl
Phone: +31 6 34 74 45 22
What data we collect
When you book a ride, we ask only for what is needed to carry out and confirm that ride:
- name
- email address
- phone number
- pick-up address and destination
- date and time of the ride
- number of passengers and luggage
- flight number for airport rides
- details you enter in a membership, business, hotel or partner request
- payment status, amount and technical Stripe references (not full card details)
In addition, we record price requests — the origin and destination you enter and the calculated price — so that we can verify our rates. Online payments are processed in a secure Stripe payment field. T4XI does not receive or store full card details; we do store the amount, payment status and technical payment references needed for confirmation, refunds and accounting.
What we use it for
To perform the transport agreement: scheduling your ride, confirming it by email or WhatsApp, and contacting you if anything changes. If you provide a flight number, we use it to track your flight status and adjust the pick-up time in the event of a delay.
The legal basis is the performance of the agreement with you. We do not use your data for advertising and do not sell it to third parties.
We use details from membership, business, hotel or partner requests only to assess the request, contact you and document agreed arrangements. We use payment data to process the payment, prevent fraud and maintain our financial records.
Who we share it with
We use the following service providers and recipients. Depending on the service, they act either as a processor on our behalf or as an independent controller:
| Party | Purpose | Region |
|---|---|---|
| Supabase | storage of bookings and quote requests | EU (eu-west-1, Ireland) |
| Resend | sending confirmation emails and forwarding requests | EU/US |
| Stripe | processing online payments and fraud prevention | EU/US |
| WhatsApp (Meta) | customer contact when you choose to use WhatsApp | EU/US |
| PDOK Location Server | address autocompletion while you type | Netherlands |
| Google Places API | address autocompletion as a fallback | EU/US |
| Vercel | hosting and delivery of the website | EU/US |
We also share your name, pick-up address and time with the driver who carries out your ride. That is necessary in order to collect you.
On what legal basis
To carry out and confirm your ride, we process your data on the basis of the performance of the agreement with you. For the amounts that appear on our invoices, a legal obligation applies: the statutory tax retention obligation. For recording price requests, we rely on our legitimate interest in being able to verify that our rates are correct — this involves no name or contact details.
How long we keep it
| Data | Retention period | Why |
|---|---|---|
| Invoices, payments and financial records | 7 years | statutory tax retention obligation |
| Booking and ride data | 12 months after the ride | customer service, refunds and disputes |
| Flight number and flight status | 30 days after the ride | only needed for performance and brief aftercare |
| Quote requests without a booking | 3 months | follow-up of the request; contains no contact details |
| Membership, business, hotel and partner requests | 12 months after the last substantive response | following up the request and documenting agreed arrangements |
| Complaints and customer service | 1 year after resolution | evidence and possible follow-up questions |
Once a period ends, we delete the data or render it untraceable, unless a legal obligation requires us to keep it longer. We keep the flight number for a shorter time than the booking itself: it is only needed to collect you and has no function afterwards.
We do not send a newsletter and do not keep a mailing list. There is therefore no retention period for marketing communications.
Cookies
Below is, per provider, exactly which cookies we use, for what purpose, how long we keep them, what data they contain, who receives them, and whether they are transferred outside the EU. Stripe is the only provider active without your consent — the others load only after you allow them in the cookie banner, and only if that service is actually configured. If we add a new provider or change the purpose, we will ask for your consent again.
- Purpose
- Secure processing of your payment and fraud prevention (Stripe Radar / Advanced Fraud Detection).
- Cookies/technique
- __stripe_mid, __stripe_sid, m (m.stripe.com), fraud-prevention signals via m.stripe.network
- Retention period
- Approximately 1 year (__stripe_mid) / 30 minutes (__stripe_sid), based on independent cookie registries. Stripe's own cookies policy does not publish an exact duration per cookie and refers to the cookie settings dashboard (stripe.com/cookie-settings) for the current state.
- Data categories
- Technical identifiers and device/session signals for fraud detection. No card details.
- Recipient
- Stripe Payments Europe, Ltd. / Stripe, Inc.
- International transfer
- EU-US Data Privacy Framework (Stripe, LLC is certified) as the primary mechanism. Standard contractual clauses (or the UK transfer addendum) apply only as a fallback, when DPF certification does not apply to a specific transfer — Stripe applies this order explicitly in its Data Transfers Addendum.
- Withdrawal
- Two separate questions: (1) is consent needed to place these cookies? No — this falls under the ePrivacy exemption for strictly necessary storage (Art. 5(3) ePrivacy Directive), because they are objectively needed to process the payment you started yourself; Stripe itself calls them "Necessary Cookies". (2) on what basis do we process the resulting data? On the GDPR basis of performance of a contract (Art. 6(1)(b)) for the payment itself, and legitimate interest (Art. 6(1)(f), recital 47) specifically for fraud prevention. A legitimate interest does not automatically exempt a non-necessary tracker from prior consent — that distinction doesn't apply here because the cookie placement itself already falls under the first exemption, not because the interest alone suffices. Loads only at the moment you actually start a payment.
You can change your choice for statistics and marketing cookies at any time via Cookie settings at the bottom of the website. Measurement stops immediately and the related cookies are deleted — no page reload is needed.
Your rights
You have the right to access your data, to have it corrected or deleted, and to object to the processing. To do so, send a message to booking@t4xi.nl. We respond within four weeks.
If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
Our website is accessible only over a secure connection. Data is stored in an environment with access control, and only staff who carry out or handle your ride have access to your booking.
See also our terms and conditions.