LiftShare.ie — AI Colleague Matching for Irish Commuters

Privacy Notice

Last updated: July 2025

Data Controller: Quantum Touch Limited, Ireland

1. What This Notice Covers

This Privacy Notice explains how Lifeshare.ie collects, uses, stores, and protects your personal data in accordance with the GDPR and the Data Protection Act 2018 (Ireland).

2. Data We Collect

Registration Data

Full name, email address, phone number, password (bcrypt-hashed)

Route Data

Route corridor, travel times, direction, seats. We do not store your exact home address.

Employer Data

Employer name (from your email domain), business park, verification status

Usage Data

Match history, contact actions, disclaimer acknowledgements, reports

3. How We Use Your Data

Purpose	Lawful Basis
Account creation	Contract (Art. 6(1)(b))
Route matching	Contract (Art. 6(1)(b))
Employer verification	Legitimate interest (Art. 6(1)(f))
Contact handoff	Consent (Art. 6(1)(a))
Safety reporting	Legal obligation (Art. 6(1)(c))
Platform security	Legitimate interest (Art. 6(1)(f))

4. Data Minimisation

Route locations stored as corridors, not exact addresses
We do not contact your employer or share your registration
Message content between users is never stored
Passwords are bcrypt-hashed — we cannot retrieve them

5. Data Sharing

We do not sell your data. We do not share data for marketing. We may share data with other users (name, employer, route — never your email), law enforcement if required, and our EU-based hosting provider (Contabo, Germany).

6. Data Retention

Active accounts: retained while active
Route data: deleted 90 days after last activity
Safety reports: 7 years (legal hold)
Deleted accounts: purged within 30 days

7. Your Rights

Under GDPR you have the right to: access, rectify, erase, restrict, port, and object to processing of your data. Contact: privacy@lifeshare.ie

8. Security

We use bcrypt hashing, HTTPS (Let's Encrypt), rate limiting, and restricted database access.

9. International Transfers

Data is stored in Germany (EU). No transfers outside the EEA.

10. Complaints

Data Protection Commission (Ireland): www.dataprotection.ie · +353 (0)1 765 0100 · 21 Fitzwilliam Square South, Dublin 2