Privacy policy

Last updated: 3 November 2026

At Loyal Transfers, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, book a transfer, contact our team or work with us as a transport partner or driver.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable French data protection laws.

1. Who we are

Loyal Transfers SARL is a French passenger transport company based in Annecy, specialising in private airport and ski resort transfers across the French Alps.

Loyal Transfers SARL acts as the data controller for personal data processed in connection with our own services and business operations.

Company details

Loyal Transfers SARL
7 Rue de Narvik, C/O The 7th Element
74000 Annecy, France

SIRET: 90279854500031
Email: info@loyaltransfers.com
Website: https://loyaltransfers.com

For questions about this Privacy Policy or your personal data, please contact us using the email address above.

2. What personal data we collect

We collect information necessary to provide our transport services, manage reservations and communicate with customers.

Booking information

When you book a transfer, we may collect:

• Your first name and surname.

• Your email address and telephone number.

• Pickup and drop-off locations and addresses.

• Transfer dates and pickup times.

• Flight numbers and relevant travel information.

• Number of passengers.

• Luggage details and child seat requirements.

• Booking references and payment information.

• Additional instructions you choose to provide for your journey.

We do not routinely request passport details, dates of birth, nationality, medical information or the names and contact details of other passengers.

Communications

When you contact us by email, telephone, WhatsApp, our website or another communication channel, we may collect your contact details and the information you provide.

We may retain correspondence relating to bookings, enquiries, complaints and other service-related matters.

Telephone calls are not recorded by Loyal Transfers.

Website information

When you visit our website, we may collect:

• IP address and approximate location.

• Browser and device information.

• Pages visited and website interactions.

• Traffic sources and referral information.

• Cookie preferences and consent records.

The collection of information through non-essential cookies and similar technologies is subject to your consent where required by law.

Transport partners and drivers

When individuals or companies apply to work with Loyal Transfers, we may collect information necessary to assess applications, establish agreements and manage transport operations.

Depending on the relationship, this may include names, business contact details, company registration information, professional licences, vehicle and insurance documents, contractual information and payment details.

For drivers operating our vehicles, we may also process assigned journey details and vehicle GPS location data.

3. How we receive your information

We receive personal information through several channels.

Direct bookings: When you book through our website or contact us directly by email, telephone or WhatsApp.

Booking partners: When you arrange a transfer through a travel agency, booking platform or transport partner, such as Heidi, WeSki, SkiLift, AirportTaxis or another provider.

Business relationships: When transport partners, drivers or other service providers contact us or apply to work with us.

Website technologies: When you browse our website and interact with its features, subject to applicable cookie consent requirements.

When a reservation is made through a third-party booking platform, that platform may act as a separate data controller for its own activities.

Loyal Transfers is responsible for the personal data it processes to arrange and provide its transport services.

4. How we use your personal data

Providing and managing transfers

We process booking information to:

• Confirm and manage reservations.

• Arrange vehicles and assign drivers.

• Coordinate pickup locations and times.

• Monitor relevant flight arrival information.

• Communicate booking changes or delays.

• Complete transfers and provide customer support.

Legal basis: Performance of a contract or taking steps before entering into a contract.

Customer communications

We use your contact details to respond to enquiries and provide information relating to your booking.

This includes booking confirmations, service updates and automated SMS notifications containing driver information and pickup details.

Legal basis: Performance of a contract and, where appropriate, our legitimate interests in providing customer support.

Payments and accounting

We process payment and transaction information to collect payments, manage deposits and outstanding balances, issue refunds and maintain financial records.

Legal basis: Performance of a contract and compliance with legal obligations.

Transport operations and vehicle management

We use relevant booking, driver and vehicle information to coordinate journeys, manage our fleet, improve operational efficiency and protect our vehicles.

Our vehicles are equipped with GPS systems that record vehicle location and journey information.

GPS information is used for fleet management, route planning and optimisation, checking routes taken by drivers and, where necessary, verifying completed transfers or investigating customer complaints.

GPS tracking relates to vehicle movements and may indirectly identify an individual driver or a particular journey.

Legal basis: Our legitimate interests in managing reliable and secure transport operations, subject to applicable data protection and employment rules.

Website analytics and advertising

With your consent where required, we use Google Analytics, Google Ads and Meta Pixel to understand website usage, measure advertising performance and improve our services.

Advertising technologies may also help us show relevant advertisements to people who have previously visited our website.

Legal basis: Consent for non-essential analytics and advertising cookies and related technologies where required.

Newsletter and promotional emails

If you subscribe to our newsletter, we use your email address to send you news, updates and promotional offers.

You can unsubscribe at any time using the link included in our marketing emails or by contacting us.

Legal basis: Consent.

Managing business partnerships

We process professional information to assess transport partners and drivers, manage agreements, assign work, coordinate services and administer payments.

Legal basis: Performance of a contract, steps taken before entering into a contract, legal obligations and our legitimate interests in operating our business.

Legal obligations and disputes

We may process and retain information where necessary to comply with legal requirements, investigate suspected fraud, handle disputes or establish, exercise or defend legal claims.

Legal basis: Compliance with legal obligations and legitimate interests, as applicable.

5. Who we share your information with

We share personal information only where necessary to provide our services, operate our business or comply with legal obligations.

Our drivers and transport partners

To complete your transfer, we provide the assigned driver with information required for the journey.

This may include:

• Customer name and telephone number.

• Pickup and drop-off locations.

• Transfer date and time.

• Flight information.

• Passenger and luggage details.

• Child seat requirements.

• Relevant journey instructions.

We do not normally share customer email addresses with drivers.

Drivers are given access only to bookings assigned to them, normally from approximately one day before the scheduled transfer.

Where a transfer is operated by an approved transport partner, we share the information reasonably necessary to complete that journey.

Technology and business service providers

We use third-party services to support our operations, including:

• ScheduleBull: Reservation and transport management.

• Stripe: Secure online payments.

• Pennylane: Accounting and financial management.

• Google services: Email, website analytics, advertising and mapping.

• WhatsApp: Customer and operational communications.

• Chaty: Website contact and communication options.

• Meta: Advertising measurement and website-based advertising technologies.

• SMS service providers: Sending operational notifications to customers.

These providers may process information on our behalf or as independent data controllers, depending on the service and applicable arrangements.

We may also share information with accountants, professional advisers, insurance providers or public authorities where necessary or legally required.

6. Payments and financial information

Online card payments are securely processed through Stripe.

Loyal Transfers does not store complete payment card details in its own reservation system.

We may retain transaction information such as payment amounts, dates, payment status, transaction references, refunds and outstanding balances.

We use Pennylane for accounting and financial administration.

Financial records are retained in accordance with applicable French accounting and tax laws.

7. Cookies and tracking technologies

Our website uses cookies and similar technologies to operate essential features, understand website performance and support advertising activities.

These may include:

Essential cookies: Required for website security, booking functionality, payment processing and remembering cookie preferences.

Analytics cookies: Used by Google Analytics to understand website traffic and visitor interactions.

Advertising cookies: Used by Google Ads and Meta Pixel to measure conversions, evaluate advertising campaigns and support relevant advertising based on website interactions.

Functional technologies: Used by services such as Google Maps to display maps and location information.

Non-essential cookies and tracking technologies are activated only after appropriate consent has been obtained.

You can accept or reject non-essential cookies through our cookie consent mechanism.

You have the right to withdraw your consent at any time.

For further information, please read our Cookie Policy.

8. Marketing communications and customer reviews

We send newsletters and promotional emails to individuals who have subscribed to receive them.

Every promotional email includes an option to unsubscribe.

After completing a transfer, we may contact customers by email to request feedback or invite them to leave a review.

These emails may contain links to independent review platforms, such as Trustpilot, Tripadvisor or Google.

If you choose to visit an external review platform, its own privacy practices and policies will apply.

We do not need to provide your email address to a review platform simply to send you a link to leave a review.

9. How long we keep personal data

We retain personal information only for as long as necessary for the purposes for which it was collected, subject to applicable legal obligations and legitimate business requirements.

Different categories of information have different retention periods.

Booking and transfer information

Operational booking information is retained while necessary to provide the transfer, manage the reservation and respond to customer enquiries.

Following completion of the service, relevant booking records may be retained in restricted archives for up to 5 years to handle disputes, complaints and potential legal claims.

Where French law requires a longer retention period, the applicable statutory period takes precedence.

In particular, electronic contracts concluded with consumers for an amount of €120 or more are retained for 10 years following the provision of the service, as required by French consumer law.

Information retained solely for legal or archival purposes is not used for unrelated operational or marketing activities.

Accounting and financial records

Invoices, accounting documents and supporting financial records are retained for 10 years from the end of the relevant financial year, in accordance with French accounting requirements.

Customer correspondence

Booking-related communications, including relevant Gmail and WhatsApp correspondence, may be retained for up to 5 years following the completed transfer where necessary for customer service, operational records, complaints or potential legal claims.

Correspondence that is no longer needed is deleted or anonymised, unless a legal obligation or an ongoing dispute requires further retention.

Where correspondence forms part of a document subject to a longer statutory retention period, that requirement takes precedence.

Newsletter and marketing information

Personal data used for marketing is generally retained during the customer relationship and for up to 3 years after the end of that relationship.

For individuals who have not become customers, marketing data is generally retained for up to 3 years from its collection or the last meaningful interaction initiated by the individual.

At the end of the applicable period, we may seek renewed consent where appropriate. Otherwise, the information is deleted or anonymised unless another lawful reason for retention applies.

You may unsubscribe from marketing communications at any time.

Limited information may be retained where necessary to ensure that we respect an unsubscribe request or objection to marketing.

GPS and vehicle location information

Our vehicles are equipped with GPS systems that record vehicle location and journey history.

GPS records are retained for 12 months (1 year).

These records are used for route planning and optimisation and, where legally justified, to verify completed transfers when sufficient evidence cannot be obtained through less intrusive means.

GPS records may also be consulted when investigating relevant customer complaints or disputes, where their use is necessary and proportionate.

Access to GPS information is restricted to authorised personnel with a legitimate operational need.

After 12 months, GPS records are deleted or anonymised, unless a specific legal obligation or ongoing dispute justifies further retention.

Transport partner and driver information

Information relating to transport partners and drivers is retained during the relevant application, contractual or professional relationship.

Contractual records may subsequently be retained for up to 5 years after the end of the relationship where necessary to establish, exercise or defend legal claims.

Certain accounting, employment or other legally required records may be subject to longer statutory retention periods.

Deletion and restricted archiving

When personal data is no longer required for its original purpose, it is deleted, anonymised or moved to restricted archives where continued retention is legally justified.

Archived information is accessible only to authorised personnel and is not used for unrelated purposes.

10. How we protect your information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

Our reservation systems are accessible only to authorised employees using password-protected accounts.

Drivers receive access only to the booking information relevant to transfers assigned to them.

We limit access to personal information according to operational responsibilities.

We also use established technology and payment service providers that maintain their own security measures.

Although no electronic system can guarantee complete security, we aim to maintain safeguards appropriate to the nature of the personal information we process.

11. International data transfers

Loyal Transfers is established in France and provides transport services in the French Alps and neighbouring regions.

Some third-party technology and communication providers may process personal information outside the European Economic Area (EEA).

Where personal information is transferred internationally, the transfer must comply with applicable GDPR requirements.

Depending on the destination and service provider, appropriate safeguards may include European Commission adequacy decisions, Standard Contractual Clauses or other legally recognised mechanisms.

You may contact us for further information about the safeguards applicable to your personal data.

12. Your rights under GDPR

Under the GDPR, you have several rights concerning your personal information, subject to applicable legal conditions.

Right of access: You can request information about the personal data we hold about you and obtain a copy.

Right to rectification: You can ask us to correct inaccurate or incomplete information.

Right to erasure: You can request deletion of your personal data where the legal conditions are met.

Right to restriction: You can ask us to restrict certain processing activities.

Right to data portability: You may request eligible personal data in a structured, commonly used and machine-readable format.

Right to object: You can object to certain processing activities, including processing based on legitimate interests. You can object to direct marketing at any time.

Right to withdraw consent: Where processing relies on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.

Rights relating to automated decisions: You have rights concerning certain decisions based solely on automated processing that produce legal or similarly significant effects.

Additional rights may apply under French data protection law.

To exercise any of these rights, please contact us at:

info@loyaltransfers.com

We may request reasonable information to verify your identity before responding.

We normally respond within one month of receiving your request. Where legally permitted, this period may be extended by up to two additional months for complex requests. We will inform you of any extension within the initial month.

Some information may need to be retained to comply with legal obligations or establish, exercise or defend legal claims.

13. Automated decision-making

Loyal Transfers does not use solely automated decision-making or profiling that produces legal or similarly significant effects on customers.

We do not determine transfer prices through automated profiling based on customers' personal characteristics.

Third-party advertising platforms may carry out their own processing in connection with advertising technologies, as described in their respective privacy policies.

14. Children's personal data

Our transport services are available to families travelling with children.

We may collect information about the number of child seats required for a booking, but we do not routinely request children's names, dates of birth or identity documents.

We do not knowingly collect children's personal information for marketing purposes.

15. Third-party websites

Our website may contain links to third-party websites, travel partners, social media platforms, review services and other external providers.

These websites operate under their own privacy policies and practices.

We recommend reviewing the privacy information provided by any third-party website before submitting personal information directly to it.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business operations, legal obligations or data protection practices.

The latest version will be published on our website with an updated revision date.

Where changes materially affect the processing of personal data, we will provide additional information or request consent where required by law.

17. Contact and complaints

If you have any questions, concerns or requests regarding your personal information, please contact us.

Loyal Transfers SARL
7 Rue de Narvik, C/O The 7th Element
74000 Annecy, France

Email: info@loyaltransfers.com

If you believe your personal information has been processed in breach of applicable data protection laws, you have the right to lodge a complaint with the French data protection authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)

Website: https://www.cnil.fr

You may also lodge a complaint with another competent supervisory authority where applicable.