Personal Identification Information

• Full name, email address, phone number, and billing address.
• Payment card information is processed through PCI-DSS certified processors. Apex does not store raw card numbers.
• Company name for corporate account holders.
• Flight number and travel itinerary for airport transfers.
• Special requirements and accessibility needs.

Usage and Technical Data

• IP address and approximate geographic location.
• Browser type, operating system, and device type.
• Pages viewed, time spent, and referring URLs.
• Booking history and service preferences.
• Communication records with our dispatch and customer service teams.

Third-Party Analytics

Our website may use tools, including Google Analytics. These automatically collect certain technical information about your visit. To opt out of Google Analytics tracking, visit tools.google.com/dlpage/gaoptout.

• To process and manage reservations and provide transportation services.
• To contact you regarding your booking, including confirmation, chauffeur details, and any changes.
• To process payments and prevent fraud.
• To send service updates, booking reminders, and operational communications.
• To send marketing communications and promotional offers, only with your consent. You may opt out at any time.
• To improve our website, services, and customer experience.
• To comply with applicable laws and regulations, including M.G.L. c.159A.
• To enforce our Terms and Conditions and protect the rights, property, and safety of Apex, our clients, and our chauffeurs.
• To manage corporate accounts, generate invoices, and maintain financial records.

Apex does not sell, rent, or trade your personal information. We share information only in these limited circumstances.

Service Providers

Trusted vendors include payment processors, CRM platforms, email service providers, and IT support. All are bound by confidentiality obligations and may only use your data to provide services to Apex.

Worldwide Affiliate Network Partners

When your ride is fulfilled through our worldwide affiliate network, we share only your name, pickup details, destination, and contact number with the affiliate. All affiliate partners sign the Apex Affiliate Partner Agreement and GDPR Data Processing Agreement. They are contractually prohibited from using your data for any purpose other than completing your booked transfer.

Legal Requirements

We may disclose information when required by law, court order, or legal process, or to protect the rights, property, or safety of Apex, our clients, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

Types of Cookies We Use

• Essential Cookies — Required for the website to function. Cannot be disabled.
• Analytics Cookies — Track usage patterns to help us improve our services. Includes Google Analytics.
• Marketing Cookies — Used to deliver relevant advertisements. Set only with your active consent.
• Preference Cookies — Remember your settings and preferences.

Cookie Consent

When you first visit apexblackcar.com, a cookie consent banner will ask for your consent to non-essential cookies. Essential cookies are activated automatically. Analytics and marketing cookies are only activated after you provide active consent. You may withdraw consent at any time through the website cookie settings or your browser settings.

• Booking and ride records — 7 years (financial record-keeping under M.G.L. c.62C).
• Payment data — 7 years (tax and financial compliance).
• Corporate account records — 7 years (business and tax compliance).
• Medical transport records — 7 years (HIPAA and healthcare compliance).
• Marketing preferences — Until you opt out.
• Website analytics data — 26 months (standard Google Analytics default).
• Customer service communications — 3 years (dispute resolution).
• Damage and incident records — 7 years (legal liability and insurance).

• SSL/TLS encryption for all data in transit.
• PCI-DSS compliant payment processing. Apex does not store raw payment card numbers.
• Access restricted to employees who need it to do their jobs.
• Regular security assessments and monitoring.
• Secure data storage with access controls and audit logging.

In the event of a data breach, Apex will notify affected Massachusetts residents and the Massachusetts Attorney General within thirty days as required by M.G.L. c.93H.

• Right to Access — Request a copy of the personal information we hold about you.
• Right to Correction — Request correction of inaccurate or incomplete information.
• Right to Deletion — Request deletion of your personal information, subject to legal exceptions.
• Right to Opt-Out of Marketing — Opt out at any time by clicking unsubscribe or contacting us directly.
• Right to Data Portability — Request your personal information in a structured, machine-readable format.
• Right to Withdraw Consent — Where we process your data based on consent, you may withdraw that consent at any time.
• Right to Lodge a Complaint — File a complaint with the Massachusetts Attorney General's office (mass.gov/ago) or the U.S. FTC (ftc.gov).

To exercise any of these rights, contact us at reservations@apexblackcar.com or write to us at 26 Patriot Place, Suite 200, Foxborough, Massachusetts 02035. We will respond within thirty days.

By providing your mobile phone number, you consent to receive text messages from Apex about your bookings and chauffeur information. To opt out, reply STOP to any Apex text message.

Apex provides HIPAA-compliant non-emergency medical transportation. Medical transport records are retained for seven years.

Our services are not directed to children under the age of thirteen. We do not knowingly collect personal information from children under thirteen.

California residents have additional rights under the California Consumer Privacy Act. Apex does not sell personal information. To exercise your California privacy rights, email reservations@apexblackcar.com with the subject line "California Privacy Rights Request."

Apex Black Car and Limousine INC is the data controller for personal data collected from EEA and UK residents. All affiliate partners sign the Apex GDPR Data Processing Agreement. Standard Contractual Clauses apply to international transfers under Article 46 GDPR.