Privacy Policy

Habibi Come to Crete Transfers, operating in Crete, Greece, decides what is collected on this site and why. We are the data controller under the General Data Protection Regulation.

Reach us on +30 697 626 3677 or at habibitransferscrete@gmail.com. Anything on this page can be asked about at either.

The booking form asks for your name, email address and mobile number, where we are collecting you and where you are going, the date and time, how many of you there are, and which vehicle you chose. If the journey starts or ends at an airport it asks for your flight number, and there are optional fields for luggage, child seats and anything you want the driver to know.

We keep the fare you were quoted alongside it, so there is a record of the price if it is ever questioned. We also record which of our priced zones your address fell into — that is how the fare is worked out, and it is only ever seen by us.

We need all of this to drive you: it is processing necessary to perform the booking you asked for. Without it there is no transfer, which is why none of those fields ask your permission first.

The pickup and drop-off fields search Google Places. From the third character you type, what is in the box is sent to Google so it can suggest matching hotels and addresses, and when you pick one, Google returns its coordinates.

This happens whether or not you accept cookies, because there is no way to take a booking to an address we cannot find. Google processes that search under its own privacy policy. The route map on the results page loads from Google in the same way.

Four companies handle your booking on our behalf, and none for their own ends:

• Supabase stores the booking. It is the database behind this site.
• Resend sends the two emails — your confirmation and our copy — so it sees the details it has to print in them.
• Vercel serves the site, and like any web host keeps short-lived server logs that include IP addresses.
• Google handles the address search described above, and the analytics below if you allow them.

These are US companies that process data in Europe and elsewhere under the standard contractual clauses and transfer frameworks the GDPR provides for. We do not sell anything to anyone, and nobody outside this list is given your details.

This site sets no cookies at all unless you say yes to the banner. Decline it, or ignore it, and Google Analytics is never loaded — not loaded and switched off, but never fetched, so there is nothing to set a cookie with.

If you accept, Google Analytics records which pages you look at and how far through the booking you get, so we can see where the site is confusing. Your answer is remembered in your browser's local storage rather than in a cookie, because recording a refusal of cookies by setting a cookie would be absurd.

To change your mind later, clear this site's data in your browser settings and the question will be asked again.

Bookings are kept while the transfer is being arranged and afterwards as business records. Greek tax law requires accounting records to be kept for several years, and a booking with a fare on it is one, so we keep them for that period and then delete them.

Analytics data is held by Google for the retention period set on our property. It is not linked to your booking, and we cannot look up an individual person in it.

You can ask us for a copy of what we hold about you, to correct it if it is wrong, to delete it, to restrict what we do with it, to receive it in a portable form, or to object to our processing it. If you accepted analytics you can withdraw that at any time, and withdrawing does not affect anything done before.

Write to habibitransferscrete@gmail.com and we will answer within a month. There is one exception we will tell you about honestly: we cannot delete a booking whose record we are legally required to keep for tax purposes until that period is up.

If you think we have handled your data badly, you can complain to the Hellenic Data Protection Authority at dpa.gr. We would rather you told us first, but it is your right either way.

If we start collecting something new, or hand data to somebody not listed above, this page changes before that happens and the date at the top changes with it.