Privacy policy

This privacy policy explains how ShuttleScout handles personal information we collect from visitors and operators. It is written in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

Who we are

ShuttleScout is an independent directory of South African shuttle, airport-transfer and charter operators at shuttlescout.co.za. We are the responsible party for personal information collected through the site. You can reach us via the contact form.

What we collect, and why

We collect personal information through a few specific channels.

Quote request form. When you request a quote from an operator, we collect your name, email address, phone number, trip details and any message you include. We pass your enquiry to the operator(s) you have selected so they can reply directly.

Operator claim form. When an operator claims a listing, we collect their name, contact details, role at the business and any message. We use this to verify the claim and contact the operator.

Contact form. When you send us a message via /contact, we collect your name, email address and message so we can reply.

Concierge chat.When you use Scout (our AI concierge), your messages and the assistant's replies are stored as a conversation transcript. Transcripts are automatically deleted after 90 days.

Analytics. We track anonymous, aggregate usage (page views, button clicks). We do not use cookies and do not link this data to any identifiable visitor.

We do not collect any other categories of personal information, and we do not buy data from third parties.

Who we share it with

We share information with two groups, and only as much as is needed for each purpose:

1. Operators. When you submit a quote request, your enquiry is shared with the operator(s) you have selected so they can reply to you. This is the whole point of the form.
2. Service providers. We use Supabase as our database, Vercel as our host, and Anthropic for the AI concierge. These providers process data on our behalf under their own privacy commitments.

We do not sell personal information, swap it with marketing partners, or use it for unrelated purposes.

How long we keep it

• Quote requests and claims: retained while they are relevant to the introduction, typically up to 24 months. Older records are periodically reviewed and removed.
• Contact messages: retained for up to 12 months.
• Chat transcripts: automatically deleted after 90 days.
• Analytics events: retained for up to 12 months.

We do not keep personal information longer than necessary, as required by section 14 of POPIA.

Your rights under POPIA

You have the right to:

• Access the personal information we hold about you.
• Correct or update information that is inaccurate.
• Object to processing in certain circumstances.
• Request deletion of your information.
• Complain to the Information Regulator of South Africa if you believe we have mishandled your information.

To exercise any of these rights, send a message via the contact form with the subject "Privacy request" and tell us what you'd like. The Information Regulator can be reached at inforegulator.org.za.

Cookies and tracking

ShuttleScout does not use marketing or tracking cookies. Our analytics is built on anonymous, aggregate counters with no cookies and no persistent identifiers.

Security

We protect personal information using standard practices: HTTPS site-wide, server-side validation, rate limiting and bot protection on every form, and row-level security on the database. Access to submitted data is restricted to authorised team members.

Our Information Officer

In line with section 56 of POPIA, ShuttleScout has designated an Information Officer responsible for compliance and data-subject requests. You can reach the Information Officer via the contact form with the subject "Privacy request" or "Information Officer."

Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects when changes were made. Material changes will be flagged on the site.