Data and purposes
Kakodo is operated by Follow Labs Limited, the controller of personal data. We process information needed to operate the website, respond to enquiries, prevent abuse and improve the service.
Visits involve processing IP addresses, browser and device information, pages, requests and technical logs. Your browser may store your language, cookie choice, a technical identifier for the search queue and your ride management session. Error reports are stored with your comment, journey information and technical identifier.
Our processing grounds are performance of the contract for the functions you request, legitimate interests in security, handling enquiries and improving the service, legal obligations, and consent where required. Optional disclosure of a driver's contacts relies on their permission, which they can withdraw by changing the contact method or contacting us.
Shared ride data
We store the driver's name, email, ride details and selected contact information. Their name and ride description are visible to visitors. The email used to manage adverts is not shown to passengers. If contact disclosure is selected, a telephone number or messenger username is released on a visitor's separate request to discuss the ride. In email request mode, the driver's contacts are not disclosed.
A passenger's name, contacts, seat count and message are processed to forward a request to the driver of the selected ride who accepts email requests. The application does not record request content in its database, queue, logs or browser storage; the data passes temporarily through the server and email provider Brevo. The email and its service data may be retained by email providers and the driver under their own rules. We do not control those copies. The form does not request the passenger's email.
Cookies and analytics
Necessary cookies and local storage support language, preferences and ride management. When analytics is enabled, PostHog processes page views, actions, journey parameters, errors, device information and approximate location on the home page, map, articles and carrier pages. Session recording is disabled; events from /shared-ride pages are not sent to this analytics service.
Your banner choice determines whether analytics remembers your browser across visits. Allowing enables cookies, local storage and a profile for that browser. If you decline or have not answered, analytics continues with an identifier held in page memory, without a persistent analytics identifier. You can change this through the Cookies link in the footer.
Recipients
The service uses hosting and technical infrastructure, Brevo for email, Cloudflare Turnstile to protect contact disclosure, and PostHog EU for analytics. They receive the data needed for their respective tasks; Cloudflare also receives the IP address during a Turnstile check. Participants' contacts are shared with each other only through the chosen contact flow. We do not sell personal data. Disclosure may also be necessary to comply with lawful requests or protect rights.
Providers and recipients may be outside your country. International transfers are subject to applicable data protection requirements, including safeguards where required. You may ask us for information about recipients and applicable safeguards.
Retention and security
Driver, advert and enquiry data is retained while necessary for the stated purposes: until a justified user request for deletion or earlier deletion by us when it is no longer needed. There is no single period for all data; we consider advert activity, responding to enquiries, security and legal requirements. A ride ending or being closed does not itself delete its record.
You can request deletion by email, or through the interface where that function is available. Some data may be retained where necessary for legal obligations or establishing and defending legal claims. Backup copies are removed through scheduled replacement; deletion from the live database does not immediately erase every backup copy.
We use reasonable technical and organisational safeguards, restrict access and limit bulk contact retrieval. We cannot guarantee complete protection against leaks, copying or misuse by a recipient.
Your rights and contact
Subject to applicable law, you may request access, correction, deletion, restriction and portability, object to processing and withdraw consent without affecting the lawfulness of prior processing. Write to the email below; we may verify your identity to protect your data. We normally respond within one month, with lawful extensions for complex cases.
You may complain to a competent data protection authority, including the UK Information Commissioner's Office (ico.org.uk). Policy changes are published here with a new date; significant changes will be communicated separately where required by law.
Website operator and data controller
Follow Labs Limited
Registered in England and Wales. Company No. 17069541.
Registered office: 27 Old Gloucester St, London, United Kingdom, WC1N 3AX
Questions, complaints and data requests: office@kakodo.online