Privacy Policy

1. Who is responsible for your data

The data controller is BeBay d.o.o., Palih boraca 18, 85320 Tivat, Montenegro.

2. What personal data we collect

We collect the data we need in order to provide our booking service:

• Contact details — your name, email address and phone number.
• Booking details — pick-up and drop-off locations, date, time, number of passengers and any notes you provide (which may include information about children or special requirements you choose to share).
• Payment information — handled by our payment provider; we receive confirmation of payment but not your full card number.
• Technical and usage data — such as device and browser information and, with your consent, analytics about how you use the site.
• Communications — messages you send us and records of your requests.

3. How we use your data and our legal bases

We use your personal data for the following purposes, on the following legal bases under Article 6 GDPR:

• To take your booking, pass it to the Operator and complete payment — to perform our contract with you.
• To contact you about your booking and provide customer support — to perform our contract or in our legitimate interests.
• To prevent fraud, keep the platform secure and improve our service — in our legitimate interests.
• For analytics and any marketing — on the basis of your consent, which you can withdraw at any time.

4. Who we share your data with

We share your personal data only as needed to provide the service, and we do not sell it. We may share it with:

• The independent Operator who fulfils your booking, so they can contact you and carry out the trip.
• Our payment provider, to process your payment.
• Service providers who help us run the platform, such as hosting and — with your consent — Google for maps and analytics.
• Authorities or professional advisers where we are legally required to, or to establish or defend legal claims.

5. International transfers

We process your personal data within Montenegro and the European Economic Area (EEA). Where data is transferred to a country without an EU adequacy decision, we put appropriate safeguards in place, such as the European Commission’s Standard Contractual Clauses.

Some of our customers travel from outside the EEA, including Russia, for which there is no EU adequacy decision. We do not store personal data on servers in Russia, and we transfer data internationally only with appropriate safeguards in place.

6. How long we keep your data

We keep your personal data only as long as we need it for the purposes described above — typically for the duration of your booking and a reasonable period afterwards to meet legal, accounting and dispute-handling obligations — and then delete or anonymise it. In practice, we keep your booking and contact details for up to 24 months after your trip, and we keep records we are required to retain for tax and accounting purposes for as long as the applicable law requires.

7. Your rights

Under the GDPR and Montenegrin law you have the right to access your data; to have it corrected or erased; to restrict or object to processing; and to data portability. Where we rely on consent, you can withdraw it at any time.

To exercise your rights, contact us at info@bebay.me. We will respond within the time limits set by applicable law. You also have the right to complain to a supervisory authority — in Montenegro, the Agency for Personal Data Protection and Free Access to Information (AZLP) — or to the authority in your EU country of residence.

8. Cookies and similar technologies

We use strictly necessary cookies to make the site work and — only with your consent — analytics and other non-essential cookies, including those set by Google Analytics and Google Maps. We do not set non-essential cookies until you have agreed to them, and you can give or withdraw your consent through our cookie banner at any time.

9. How we protect your data

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. No online service can be guaranteed completely secure, but we work to keep your data safe and to notify the relevant authority — and, where required, you — of any serious data breach.

10. Children

Our platform is intended for adults. We do not knowingly collect personal data directly from children. Where a booking includes children, we rely on the booking adult to provide and be responsible for that information.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the current version on this page with the date it was last updated and, where appropriate, tell you about significant changes.

12. Contact us

For any questions about this Privacy Policy or your personal data, contact BeBay d.o.o. at info@bebay.me, or write to us at Palih boraca 18, 85320 Tivat, Montenegro.