Car-Take
Language
Back to jobs

Privacy Policy

Last updated: 17 October 2026

This policy explains what personal data Car-Take collects, why, who can see it, and the rights you have under the EU General Data Protection Regulation (GDPR). It applies together with our Terms of Service.

1. Who is responsible for your data

The controller is , . For any privacy question or request, email .

2. What we collect

  • Account details: your name, email address, phone number (so other members can contact you about jobs), password (stored only in hashed form by our authentication provider), membership type, and the date you accepted our terms.
  • Listings: pickup and drop-off cities and countries, vehicle make, model and type, condition, weight, dates, budget, notes, photos, and the contact name, email and phone you give for the listing.
  • Activity on the platform: messages between members, the status of drivers who apply for a job, saved favourites, ratings and reviews, reports you make or that are made about you, and moderation decisions.
  • Saved searches: the pickup country, drop-off country and vehicle type you save, so we can email you when a matching job is posted.
  • Billing: we take no payments during launch, so we hold no billing data. If paid plans start, we will keep your Stripe customer reference and subscription status; card details go straight to Stripe and we never see your full card number.
  • Technical data: IP address, browser and device information, and logs kept by our hosting providers for security and troubleshooting.

3. Why we use it, and our legal basis

  • To run your account and the marketplace (publishing listings, showing contact details to members, messaging, reviews, notification emails): needed to perform our contract with you.
  • To take membership payments (only if paid plans start): needed to perform our contract, and to meet our tax and accounting obligations.
  • To email you about saved searches: needed to provide the alerts you asked for. Remove a saved search at any time to stop them.
  • To keep the platform safe (reviewing listings, handling reports, preventing fraud and abuse, securing our systems): our legitimate interest in a trustworthy marketplace, and our legal obligations as an online platform.
  • To answer legal requests and defend legal claims: legal obligation and legitimate interest.

We do not sell your data, and we do not use it for advertising.

4. Who can see your data

  • Anyone visiting the site: published listings, including the vehicle, route cities and countries, dates, budget, notes and photos.
  • Signed-in members: listing contact details (name, email and phone), member profiles with their published jobs and ratings, and messages sent to them. During launch, every signed-in member has this access.
  • Reviews are shown to members without the reviewer’s name. Our administrators can see who wrote a review, to deal with abuse. Details you write in a review may still identify you.
  • Our administrators can see the data they need to approve listings, handle reports and moderate accounts.

5. Service providers

We use these providers to run Car-Take. They process data on our instructions:

  • Supabase: database, sign-in, photo storage and server functions.
  • Netlify: website hosting.
  • Stripe: membership payments, only if paid plans start. Stripe also acts as an independent controller for its own fraud prevention and legal duties.
  • Brevo: sending account and notification emails.
  • Cloudflare Turnstile: the “Verify you are human” check on the sign-in and sign-up forms, to keep out bots. Cloudflare sees your IP address and some technical details about your browser for this check only; it does not use them for advertising or tracking.
  • Photon (by Komoot): city suggestions. Your browser sends the text you type into city fields straight to this service, which also sees your IP address. We do not send your name or account details with it.
  • Wikimedia Commons: some sample listings show photos hosted by Wikimedia. When you view them, your browser loads the image from Wikimedia, which sees your IP address under its own privacy policy.

Some of these providers may process data outside the European Economic Area, for example in the United States. Where they do, we rely on the safeguards those providers offer for such transfers, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. Cookies and storage in your browser

Car-Take does not use cookies. It stores only the following in your browser, all needed for the site to work, so we do not ask for consent:

  • Language (returnRouteLanguage, local storage): the language you picked. Kept until you change it or clear your browser data.
  • Sign-in session (sb-…-auth-token, local storage): keeps you signed in. Removed when you sign out.
  • Menu display (cartake-header-presentation-v1, session storage): avoids the menu flickering between pages. Ignored after 2 minutes and removed when you close the tab.

The sign-in and sign-up forms also load Cloudflare Turnstile, the bot check described in section 5. It is needed to protect accounts and is not used for tracking.

We do not use analytics, advertising or tracking of any kind. If that changes, we will ask for your consent first.

7. How long we keep data

  • Account, listing, message and review data is kept while your account is open. When you use Delete my account on your profile page, it is deleted straight away; if you ask us by email instead, we do it within 30 days. The exceptions are below.
  • Billing records are kept for as long as tax and accounting law requires.
  • Reports and moderation records are kept for as long as needed to keep the platform safe and to deal with legal claims.
  • Saved searches are kept until you remove them or delete your account.
  • Queued notification emails are deleted after 7 days.
  • Backups are overwritten in the normal course.

8. Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. To use any of these rights, email . We will reply within one month.

You can also complain to a data protection authority. In Bulgaria this is the Commission for Personal Data Protection (cpdp.bg). You can also complain to the authority in the EU country where you live or work.

9. Security

Connections to Car-Take use HTTPS. Passwords are stored only in hashed form. Database rules limit each member to the data they are allowed to see. No system is perfectly secure, so please use a strong password that you do not use anywhere else.

10. Children

Car-Take is not intended for anyone under 18, and we do not knowingly collect their data.

11. Changes to this policy

We will post changes on this page and update the date at the top. For material changes, we will also tell you by email.