Privacy Policy

Last updated: August 2026 · Where 2 Airport Transfers ("Where 2", "we", "us")

Where 2 respects your privacy and processes personal information in line with South Africa's Protection of Personal Information Act, 4 of 2013 (POPIA). This policy explains what we collect when you book or enquire, why we collect it, and your rights.

1. What we collect when you book a trip

• Booking information: your name, WhatsApp/phone number, travel date, pickup time, route, direction, pick-up and drop-off addresses, number of passengers, luggage details, flight number, and any notes you provide.
• Communications: messages you exchange with our dispatcher and drivers on WhatsApp, email (bookings@where-2.co.za) or through our booking form.
• Address suggestions: as you type a pick-up or drop-off address, our booking form asks Google Maps Platform to suggest matching South African addresses. What you type in those two fields, and your IP address, are sent to Google for that purpose under Google's own terms. If you would rather not use it, you can type your address in full and ignore the suggestions, or book on WhatsApp instead.
• Payment records: if you pay by card we keep a record that the payment happened — the amount, the date, and a reference number from our payment provider. We never see or store your card number, expiry or CVV; those are entered on Yoco's own payment page and never reach us.
• Technical basics: our booking form runs on our own website and writes straight into our own booking database. We use no advertising or analytics cookies — see section 6.

2. If you apply to drive with us

Drivers and driver applicants give us considerably more personal information than passengers do, so it is set out separately here. All of it is submitted through our driver sign-up form and stored in the same booking database.

• Identity and licensing: full name, ID number, date of birth, home address, cell number, email address, Professional Driving Permit number and expiry, and driving licence code and expiry.
• Photographs: a recent photograph of your face, photographs of your PDP and driving licence, and photographs of your vehicle inside and out.
• Vehicle and compliance: make, model, colour, registration, VIN, seat count, towbar and trailer details, and the expiry dates of your licence disc, roadworthy certificate, operating licence, passenger liability cover and vehicle insurance.
• Banking details: bank, branch, account name, account number and account type, used only to pay you.
• Emergency contact: the name, surname and contact number of a next of kin or someone close to you, so we have somebody to reach if something happens to you while you are on a trip. We use it for nothing else, it is visible only to the Where-2 dispatcher, and it is never shown to passengers or to other drivers.

We use this to verify that you are legally entitled to carry passengers, to keep our compliance records current, to allocate trips to you and to pay you. Your first name, your photograph, your vehicle and its registration are shown to the passenger on their trip page so they can identify you and the car at pickup. Nothing else from the list above is ever shown to a passenger.

If your application is declined we keep it only as long as we need to record the decision, and then delete it.

3. Why we collect it

• To provide the transfer you booked: confirming availability, allocating a driver and vehicle, tracking your flight, and communicating pickup arrangements.
• To share the minimum necessary details with your allocated driver (your name, contact number, pickup point, flight and luggage details) so they can perform the trip.
• To keep operational records of bookings for scheduling, invoicing and dispute resolution.
• To ask, after your trip, whether you'd like to leave a review. You are never obliged to.

4. What we don't do

• We do not sell or rent your personal information to anyone.
• We do not send marketing messages unrelated to a booking without your consent.
• We do not collect, see or store payment card details. Card payments are taken on a secure page hosted by our payment provider, Yoco — your card number never passes through our website.

5. Who we share it with

Your details are shared only with:

• The driver allocated to your trip — and only the details they need to do it: your name, contact number, pickup point, flight number and luggage.
• Our hosting provider, whose South African servers run this website and hold our booking database on our behalf.
• Google Maps Platform, for address suggestions while you fill in the booking form (see section 1) and for the map links our drivers use to navigate to your pickup point.
• Yoco Payments, a South African payment provider, if you choose to pay by card. You are taken to Yoco's own secure page to enter your card, so Yoco receives your card details and we do not. We send them only the amount to collect and your booking reference. Yoco returns a payment reference to us so we can reconcile it against your booking. Yoco is a registered South African payment services provider and processes your card data under its own privacy terms.
• WhatsApp (Meta), where you have chosen to communicate with us on it.

Shared-rides calendar. If you book a Sharing trip and leave the listing box ticked, our public shared-rides calendar shows that a trip exists on your route: the airport, town, direction, date, pickup time to the nearest half hour, seats free and the price. It never shows your name, contact details, address, flight number or booking reference. You can untick the box when you book, or ask us to remove the listing at any time.

Each operates under its own privacy terms. We do not share your information with anyone else, and we may disclose it only where the law requires it.

6. Cookies and how our website works

• We set no advertising cookies, and use no third-party analytics or tracking.
• Our public pages and our booking form set no cookies at all. You are not asked to accept any, because there are none to accept.
• The dispatcher and driver portals set a session cookie and a signed sign-in cookie so a signed-in user stays signed in. Those are strictly necessary for those portals to work and are not used to follow anyone across other websites.
• Your trip status page is reached through a long random link. It is not published or indexed, but anyone you forward that link to can see the trip details on it.

7. How long we keep it

Booking records are kept for as long as reasonably required for operational, tax and legal purposes, after which they are deleted or anonymised. Driver records are kept for as long as you drive for us and for as long afterwards as the law requires; declined applications are deleted once the decision has been recorded.

8. Security

Booking and driver records are held in a password-protected database on our hosting provider's servers, reachable only by our own website. The dispatch portal is behind a username and password and the driver portal behind a cell number and PIN; the site is served over HTTPS. Access to the full records is limited to the Where 2 dispatcher, and drivers receive only the details needed for the trips allocated to them. No payment card details are held anywhere in our systems, because we never collect them — card payments happen on Yoco's page, and all we receive back is a reference number and the amount.

9. Your rights under POPIA

You may ask us at any time to confirm what personal information we hold about you, to correct it, or to delete it (subject to records we are legally required to keep). Contact us at bookings@where-2.co.za or WhatsApp +27 60 796 1174. If you believe your information has been mishandled, you may lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).

10. Children

Bookings must be made by a person 18 or older. Where a booking includes child passengers, the adult making the booking provides their details.

11. Changes

We may update this policy from time to time; the latest version will always be available at this page with its date shown above.