Privacy Policy

Last Updated: October 1, 2026

1. Introduction

At Doleb, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and mobile application (collectively, the "Service").

The data controller is Nader & Co Ltd, a private limited company registered in England and Wales (company number 16735761), whose registered office is at Silverstream House, 45 Fitzroy Street, London, W1T 6EB, United Kingdom. For any question about your data, you can contact us at hello@doleb.app.

2. Information We Collect

Personal Information: When you register for an account, we collect your name, phone number, email address, and other information you provide during the registration process.

Usage Data: We collect data about how you interact with our Service, including searches, tickets purchased, and ride history.

Location Data: When you use map or tracking features, we may process location data to show nearby buses and routes, subject to your device permissions.

Payment Data: When you pay for a ticket, payment is processed by our payment provider. We do not store your full card details on our servers.

Device Information: We may collect information about your device, including IP address, operating system, browser type, and device identifiers.

Your name, phone number, and email address are needed to create an account and buy tickets. If you do not provide them, we cannot provide the Service to you.

3. How We Use Your Information and Legal Bases

We process your personal data for the following purposes, each with its lawful basis under the UK GDPR:

  • Provide, maintain, and improve the Service, including booking, tickets, and live tracking (basis: performance of our contract with you)
  • Process transactions and manage your tickets (basis: performance of the contract)
  • Show nearby buses and your position on the map (basis: your consent, which you can withdraw at any time in your device settings)
  • Send you service-related communications (basis: performance of the contract or our legitimate interest in keeping you informed about your rides)
  • Analyze usage to improve the Service (basis: your consent or our legitimate interest in improving the Service)
  • Ensure security and prevent fraud and unauthorized access (basis: our legitimate interest and legal obligations)

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

4. Data Sharing and Sub-processors

We do not sell your personal information. We share data only with trusted service providers (sub-processors) who process it on our behalf, and with the bus operators you travel with, including:

  • Website hosting (Render)
  • Database and backend infrastructure (Supabase)
  • Payment processing
  • Maps and location services
  • Transactional emails and SMS
  • The bus operator running your ride, which receives the information needed to validate your ticket

We may also disclose information to legal authorities when required by law or to protect our rights.

Some of these recipients are located outside the United Kingdom, including in the United States and Lebanon. Where a country is not covered by UK adequacy regulations, transfers are governed by appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can request a copy of these safeguards by contacting us.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, or alteration.

However, no method of transmission over the Internet or electronic storage is fully secure, and we cannot guarantee absolute security.

6. Data Retention

We keep your personal data only as long as necessary for the purposes described above:

  • Account and ride data: for the lifetime of your account, then deleted or anonymized within 12 months after account closure.
  • Billing records: 6 years from the end of the financial year they relate to, as required by UK accounting and tax law.
  • Technical logs: up to 12 months.

7. Cookies

This website uses a single cookie, which remembers your language choice and is strictly necessary. We do not use analytics or advertising cookies on this website; if we introduce them, we will ask for your consent first.

8. Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal information
  • Correct inaccurate or incomplete information
  • Request deletion of your personal information
  • Restrict our processing of your information
  • Request portability of your information
  • Withdraw consent at any time, where processing is based on consent

Right to object: You can object at any time to processing based on our legitimate interests, and you can always object to the use of your data for direct marketing.

To exercise these rights, contact us at hello@doleb.app. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113. If you live outside the United Kingdom, you may also contact the data protection authority in your country.

9. Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without parental consent.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@doleb.app.

Doleb bus tracking on your phone