1. Who this policy covers#
Toke is the controller of personal data processed through this website. This policy covers visitors, people registering passenger or licensed-driver interest, and people who contact Toke. The public website does not currently create passenger or driver accounts or accept taxi bookings.
2. Data we collect#
Interest forms collect first name, last name, email address, selected audience, language, consent choice and submission time. Contact enquiries contain the sender’s email address and the information they choose to include. Cloudflare Turnstile supplies a verification result and limited technical data needed to protect forms from abuse. Optional analytics records page and interaction events only after consent; it does not intentionally include form contents or precise location.
We also receive ordinary security and delivery information generated when the website or email service is used, such as request identifiers, timestamps and limited server logs. We do not ask for identity documents, payment information or driver licence documents through this website.
3. Why we use data#
We use personal data to respond to enquiries; record and follow up passenger or driver interest; deliver relevant launch information where requested; protect forms and systems from abuse; operate and secure the website; measure website usefulness where analytics consent has been given; and meet legal obligations or establish, exercise or defend legal claims.
The legal basis is consent for optional analytics and requested updates, steps taken at the visitor’s request for registrations and enquiries, and Toke’s legitimate interests in operating a secure and useful website. Where law requires another basis, that basis will apply.
4. Service providers and transfers#
Toke uses infrastructure providers necessary to operate the website, including Cloudflare for Turnstile verification and Resend for email delivery. Hosting and deployment providers may process limited technical data. Providers act under their own legal obligations and, where they process data for Toke, appropriate contractual and transfer safeguards are used.
Toke does not sell personal data. Data is not shared for third-party advertising. It may be disclosed where required by law or necessary to protect people, rights or systems.
5. Retention and security#
Interest registrations and related correspondence are kept only while relevant to the pre-launch relationship and are reviewed for deletion after 24 months without meaningful contact. General enquiries are normally retained for up to 12 months after resolution. Consent and suppression records may be retained as needed to honour a withdrawal and demonstrate compliance. Security records are kept only for a proportionate period. See the Data Retention Policy.
Toke applies proportionate access controls, secure service configuration and data minimisation. No online system can be guaranteed completely secure.
6. Your rights#
Subject to applicable law, individuals may request access, correction, deletion, restriction or portability of their data, object to processing, and withdraw consent at any time. Withdrawal does not affect earlier lawful processing. Requests may be sent to contacto@toketaxi.net. Toke may request reasonable information to verify the requester and normally responds within one month.
Individuals may also complain to the Spanish Data Protection Agency or another competent supervisory authority.
7. Cookies, children and changes#
The Cookie Policy explains local storage, Turnstile and optional analytics. This website is intended for adults interested in Toke and is not directed at children. Material changes to this policy will be published here with an updated date and version.
Document history
This is the first public version of this document.
Need help with this document?
Email us with privacy, accessibility, complaint or legal questions.