1. Who Operates alvashuttle.com
ALVA HOSPITALITY & ENTERTAINMENT, LLC operates alvashuttle.com and is responsible for the privacy practices described in this Policy to the extent it determines the purposes and means of processing.
Website: alvashuttle.com
Online Privacy Requests: alvashuttle.com Privacy Request Form
3. Scope of This Policy
This Policy applies to personal information processed through alvashuttle.com websites, customer and partner interfaces, reservation functions, passenger manifests, schedules, dispatch tools, driver or vehicle features, tracking or location functions, administrative tools, support communications, and related services.
It does not replace the privacy notices of transportation operators, hotels, employers, or other customers that independently collect or control information through their own operations.
3. Our Privacy Role
In many customer deployments, a transportation operator, hotel, or business customer determines why and how Passenger Data, employee information, driver information, or operational data is collected. In those situations, that customer may act as the applicable business or controller, and alvashuttle.com may process the information as a service provider or processor on the customer's behalf.
We may separately determine processing reasonably necessary for account administration, billing, platform security, fraud prevention, technical support, service reliability, legal compliance, and protection of our rights.
4. Privacy Principles
- Collect information reasonably related to providing and securing the Service.
- Limit access to authorized users and service providers who need information for legitimate purposes.
- Use location information for transportation, operational, safety-support, or technical purposes—not unrelated movement profiling.
- Apply reasonable safeguards appropriate to the nature of the information.
- Honor applicable privacy rights and legally valid requests.
- Do not sell location information to data brokers or advertisers for independent marketing.
5. Information We May Collect
A. Customer and Authorized User Information
We may process names, usernames, contact information, company or organization affiliation, role, permissions, account status, login activity, user settings, and administrative actions.
B. Passenger and Manifest Information
Depending on customer configuration, the Service may process passenger or guest names, contact information, passenger counts, reservation details, pickup location, destination, schedule or departure information, trip type, notes, hotel or partner affiliation, cruise or travel information, manifest entries, assigned shuttle or driver, and trip status.
C. Driver, Vehicle, and Operational Information
We may process driver identifiers, vehicle or shuttle identifiers, assignments, schedules, capacity, operational status, pickup and destination information, dispatch activity, and other transportation-management information submitted or generated through the Service.
D. Location and Tracking Information
If enabled by a customer or user, the Service may process GPS or other location information associated with a vehicle, driver, company device, pickup point, destination, or transportation operation, together with timestamps, accuracy information, device status, or related operational data.
E. Subscription and Billing Information
We may process subscription plan, billing contact, invoice, transaction, payment-status, and related commercial account information. Where third-party payment services are used, those providers may process payment information under their own terms and privacy practices.
F. Device, Technical, and Security Information
Our systems may receive IP address, browser type, device type, operating system, pages or functions requested, date and time of access, session information, authentication events, error data, security logs, and diagnostic information.
G. Communications
If you contact us, we may receive your name, contact details, company, message, support request, privacy request, and related correspondence.
6. How We Collect Information
Information may be provided directly by customers, authorized users, passengers, partners, drivers, administrators, devices, integrations, or service providers. Some operational and technical information is generated automatically when the Service is used.
7. How We Use Information
We may use information to:
- provide, operate, configure, and maintain the Service;
- create and manage customer and user accounts;
- receive, organize, display, and manage reservations and passenger manifests;
- support dispatch, scheduling, capacity, routing, pickup, and destination workflows;
- process driver, vehicle, and operational status information;
- provide enabled tracking, mapping, routing, or location features;
- send service-related, reservation, operational, security, or support communications;
- authenticate users and manage permissions;
- detect fraud, misuse, security threats, or technical problems;
- troubleshoot, maintain, improve, and develop the Service;
- administer subscriptions and billing;
- comply with law and lawful process; and
- establish, exercise, or defend legal claims.
8. Passenger Data and Customer Responsibilities
Customers are responsible for providing legally required notices and obtaining legally required consents or other authority for Passenger Data they collect and submit through the Service.
Passengers may be interacting primarily with the transportation operator, hotel, cruise-transfer provider, or other customer rather than directly with alvashuttle.com. Privacy requests concerning customer-controlled data may therefore need to be handled by, or coordinated with, the applicable customer.
We ask customers not to place unnecessary highly sensitive information into reservation, manifest, pickup, destination, dispatch, or free-text fields.
9. Location and Tracking Information
The Service may process location information when a customer enables GPS, tracking, mapping, routing, pickup-location, driver, vehicle, or device-location features.
Location information can be affected by device settings, GPS availability, satellite visibility, buildings, airports, parking structures, multiple roadway levels, cellular or Wi-Fi conditions, browser permissions, operating-system restrictions, hardware limitations, and third-party mapping services.
We do not use driver, vehicle, passenger, or pickup-point location information to build advertising profiles based on a person's movements.
Customers that track employees, contractors, drivers, vehicles, or passengers are responsible for any notices, consents, workplace policies, agreements, or other legal requirements applicable to that tracking.
11. Sale of Personal Information and Targeted Advertising
alvashuttle.com does not sell, rent, or license passenger, driver, vehicle, or location information to data brokers or advertisers for their independent marketing purposes.
We do not use movement or route information to create advertising profiles or serve targeted advertising based on a person's physical movements.
If our practices materially change, this Policy will be updated and legally required notices or choices will be provided before the new practice applies where required.
12. Data Minimization
We seek to process information reasonably necessary for transportation operations, customer administration, technical support, security, billing, or legal purposes. Customers and users should avoid submitting information that is unnecessary for those purposes.
13. Data Retention
We retain information for periods reasonably necessary to provide the Service, satisfy contractual obligations, maintain security and audit records, resolve disputes, comply with law, enforce agreements, and protect legal rights.
Retention may differ by data type, customer configuration, subscription plan, written agreement, backup cycle, or legal requirement. Customer-controlled Passenger Data and operational records may also be subject to the customer's own retention instructions or legal obligations.
After information is no longer reasonably needed, it may be deleted, anonymized, or deidentified, subject to backup, legal-hold, security, fraud-investigation, dispute, tax, accounting, or other lawful retention needs.
14. Data Security
We use reasonable administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, disclosure, misuse, alteration, loss, and destruction.
Measures may include authentication, role-based permissions, encrypted transmission, credential protection, logging, monitoring, restricted administrative access, server and application security controls, and software maintenance, as appropriate to the Service.
No internet-connected service can be guaranteed completely secure.
15. Cookies, Sessions, and Local Storage
The Service may use cookies, session identifiers, browser storage, or similar technologies when reasonably necessary to authenticate users, maintain sessions, remember settings, preserve operational state, protect security, prevent fraud, or provide application functionality.
We do not use necessary operational cookies solely to create targeted-advertising profiles based on transportation activity.
16. Third-Party Maps, Routing, Hosting, and Technology
The Service may rely on third-party mapping, routing, navigation, hosting, communications, browser, mobile-operating-system, network, or related technology. Those providers may process technical or location information under their own terms and privacy practices.
17. Deidentified and Aggregated Information
Where permitted by law, we may create aggregated or deidentified information for service analysis, operational trends, capacity planning, security, product improvement, or business reporting. We may retain and use information that no longer reasonably identifies an individual, subject to applicable law.
18. Privacy Rights
Depending on where you live and the law that applies, you may have rights to:
- confirm whether personal information is being processed;
- request access to personal information;
- correct inaccurate personal information;
- request deletion of certain personal information;
- obtain a portable copy of certain information;
- withdraw consent where processing is based on consent;
- opt out of certain sales, targeted advertising, or qualifying profiling if applicable; and
- appeal certain privacy-request decisions where applicable law provides that right.
These rights are subject to identity verification and applicable legal exceptions.
19. How to Submit a Privacy Request
Submit a Privacy RequestUse the online Privacy Request Form to request access, correction, deletion, a portable copy, consent withdrawal, an appeal, or to report a privacy or security concern.
Please provide enough information for us to reasonably identify the relevant account, customer, transportation operator, reservation, or record. We may need to verify identity before fulfilling a request.
If the information is controlled by one of our business customers, we may direct the request to that customer or assist the customer in responding as appropriate.
20. Privacy Appeals
Where applicable law provides an appeal right, submit an appeal through the Privacy Request Form, identify the prior request, and explain why you believe the decision should be reconsidered.
21. Children's Privacy
The Service is designed for business transportation operations and is not directed to children under 13. We do not knowingly operate the Service for the purpose of collecting personal information directly from children under 13 without authorization required by applicable law.
Customers using the Service in connection with minors are responsible for their own notices, permissions, and legal obligations.
22. International Users
The Service is operated from the United States. If it is accessed from another country, information may be transferred to and processed in the United States or another location where service providers operate, subject to applicable law.
23. Do Not Track and Global Privacy Signals
Where applicable law requires recognition of a legally valid universal opt-out or privacy preference signal for a processing activity, we will honor the signal as required.
Because alvashuttle.com does not currently sell personal information or use transportation-location information for targeted advertising as described in Section 10, an advertising opt-out may not change core operational functionality.
24. Security Incident Response
If personal information is involved in a security incident, we will investigate and take reasonable measures appropriate to the circumstances. Where applicable law requires notification, we will provide or assist with legally required notification.
25. Changes to This Privacy Policy
We may update this Policy as the Service, technology, or legal requirements change. The "Last Updated" date will be revised. If a material change affects sensitive information practices, additional notice or consent will be provided when required by law.
26. Contact Us
Privacy questions, data-rights requests, appeals, and security concerns may be submitted through the online request process:
alvashuttle.com Privacy Request FormOperator: ALVA HOSPITALITY & ENTERTAINMENT, LLC
Website: alvashuttle.com