Privacy policy

Cumberland Car Service, LLC ("we", "us") provides chauffeured ground transportation. This policy explains what personal information we collect when you book a ride, ride with us, or drive for us; why we collect it; who we share it with; how long we keep it; and the choices you have. It applies to CumberlandCS.com and to our passenger, chauffeur, and corporate portals.

Cumberland Car Service, LLC does not sell your personal information, and we do not share it for anyone else's advertising or marketing. This holds for everyone and for every category of data we hold — including the bank account information chauffeurs connect through Plaid. We share data only with the service providers who help us operate your trips, listed under Who we share information with, and only for that purpose — never for sale, rental, or trade, and never with data brokers.

We collect only what the service actually requires:

• Account details — your name, email address, and mobile number, so we can identify you and reach you about a trip.
• Trip details — pickup and drop-off addresses, times, passenger count, flight number for airport pickups, and any notes or accessibility needs you give us.
• Payment information — card payments are processed by Stripe. Card numbers are sent directly to Stripe and are never stored on our servers; we keep only the brand, last four digits, and expiry so you can recognize a saved card.
• Chauffeur information — for people who drive for us: licensing, insurance and vehicle documents, background check status, and the banking details needed to pay you.
• Location — while a chauffeur is on an active trip, their device reports position so you can watch the car approach. We do not track chauffeurs when they are off duty, and we do not collect passengers' device location.
• Technical records — sign-in sessions and security logs, kept to protect accounts against unauthorized access.

We do not sell personal information, and we do not share it with advertisers or data brokers.

We ask for your agreement to this policy before you create an account or book as a guest, and we record the date and version you agreed to. Separate, additional consent is requested for anything beyond the core service — for example, connecting a bank account, or receiving promotional messages. Those are never bundled into signing up.

You can withdraw an optional consent at any time in your account settings. Withdrawing consent for a bank connection immediately unlinks the account and erases the stored credentials. If we revise this policy in a way that affects how we handle your information, we will ask you to review and agree again rather than relying on your earlier agreement.

Chauffeurs are paid by direct deposit. To set that up, you may connect your bank account through Plaid, a regulated service that verifies bank account ownership.

• Connecting a bank account is entirely optional — you can instead enter your account details manually and verify by micro-deposit.
• We ask for your explicit consent before Plaid opens, and no connection can be started without it.
• Your banking credentials are entered inside Plaid and are never seen by, or sent to, us. From Plaid we receive only the account and routing numbers needed to send your payments, plus the verification result.
• Those numbers are stored encrypted and are used for one purpose: paying you.
• We do not use Plaid to read your balances or transaction history, and we do not use your bank data for credit decisions, marketing, or analytics.
• When you unlink the account we erase the stored credentials and instruct Plaid to close the connection on their side.

Plaid handles the information you give it under its own privacy policy, available at plaid.com/legal.

We share the minimum necessary with service providers who process it on our behalf, under contract, and only for the purpose shown:

• Stripe — Payment processing and card storage
• Amazon Web Services (SNS) — SMS trip notifications and one-time codes
• Google Maps Platform — Address lookup, routing, and distance
• Plaid — Driver bank account verification for payouts

Your chauffeur sees only what is needed to complete your trip. We also disclose information where the law requires it, or to investigate fraud or a threat to someone's safety.

We keep each kind of information only as long as it is needed, and no longer. These limits are enforced automatically by a scheduled process that erases or anonymizes data once its window has passed — they are not aspirations.

Trip, receipt, and payout records are the one category we cannot erase on request: tax law requires us to keep them for seven years. After an account is deleted those records remain only in anonymized form, no longer linked to a named person.

You can, at any time:

• See what we hold — your trips, receipts, and account details are in your portal; email us for anything else.
• Correct it — update your details in account settings.
• Delete it — request account deletion from your account settings. We hold the request for 30 days so it can be undone if it wasn't you, then erase your personal details and anonymize what we must keep.
• Withdraw consent — for optional processing, in account settings.
• Opt out of messages — turn off email or SMS notifications in settings, or reply STOP to any text. Messages about a trip you have booked are part of the service.

Georgia residents, and residents of states with comprehensive privacy laws, have these rights by statute; we extend the same rights to everyone. We do not discriminate against anyone for exercising them. To make a request, email support@CumberlandCS.com.

Traffic to our site is encrypted in transit. Bank details and other secrets are encrypted at rest. Access to customer data is limited to staff who need it for their role, every administrative action is logged, and staff and chauffeur accounts require two-factor authentication. Databases are backed up on a schedule and the backups are encrypted.

Our service is not directed to children, and we do not knowingly collect information from anyone under 13. Children ride with us regularly as passengers — booked by an adult, whose account holds the reservation. If you believe a child has given us information directly, contact us and we will delete it.

We review this policy at least annually and whenever we change how we handle personal information. Every version carries a version number and effective date, shown at the top of this page. When a change is material we ask you to review and agree the next time you sign in.

Questions, requests, or complaints about privacy: support@CumberlandCS.com. We respond within 30 days.