Data protection

Privacy policy

This policy explains how KareLynk collects and uses personal data when handling escort applications, driver onboarding applications, service requests, partner registrations and related operational records.

Data user and contact details

Data user: KareLynk Limited. Contact address: Pylon Tower Tsuen Wan. To request access to or correction of personal data, email contact@karelynk.com.

Data we collect

We collect contact details, journey and support needs, escort experience and availability, preliminary information about organisations or transport operations, and other information you choose to provide, as needed for an application, expression of interest or service arrangement. Forms identify required and optional fields. Without required information, we may be unable to review an application, assess a request, follow up on an expression of interest or make arrangements. Driver onboarding also collects a driver photograph, vehicle details and, as required for the declared service, evidence of driving qualifications, vehicle licences and the latest licensing notification, vehicle registration, insurance, permission to use the vehicle, operating permits and equipment. Applications do not require an identity-card copy or a separate entry of the full identity-card number. Identity is checked against original documents or existing identity-verification records, with necessary verification records retained.

How we use data

Data is used only to process applications, assess service needs or partnership interests, prepare quotations, arrange and deliver services, contact the relevant people, handle payments and invoices, retain consent and necessary audit records, analyse sanitised source information, protect forms and the platform, and meet applicable legal or operational responsibilities. Driver onboarding data is also used for manual review, contacting applicants for further documents, managing onboarding eligibility, and retaining necessary consent and review records. Submitting these forms alone does not result in data being used for direct marketing.

Who can access data

Only authorised KareLynk operations staff who need the information for their work may access it. To deliver a confirmed service, we provide only the minimum necessary information to the assigned escort or service partner. Driver onboarding applications and documents are available within the system only to the applicant and authorised operations reviewers; they are not disclosed to general customers or in general fleet listings. Cloud hosting, database, form-security and other contracted service providers may also process data under contractual terms, specified purposes and applicable retention arrangements.

Retention and deletion

Incomplete or unaccepted service requests are generally retained for 90 days; rejected or withdrawn escort applications for 180 days; partner registrations for 12 months after the last activity; customer, escort and service records for 24 months after the last service; payment, refund, receipt, invoice and accounting records for 7 years; routine system logs for 30 days; and security and audit records for 12 months. Retention of driver onboarding applications and documents is assessed separately according to review, eligibility-management and necessary audit needs. Withdrawal, rejection, deactivation or replacement of documents does not mean immediate deletion. When data is no longer needed, we delete or irreversibly de-identify it. Records subject to an investigation, dispute, statutory retention obligation or legal hold may be retained until the relevant matter concludes.

Protecting data

We use permission controls, protected server operations, database access policies, audit records and other reasonable measures to reduce unauthorised access, alteration or disclosure. No online transmission or storage method can guarantee absolute security.

Access, correction and other requests

You may request access to or correction of the personal data we hold about you, and may request deletion or withdrawal of consent. We first verify the requester's identity and handle the request according to applicable responsibilities and the circumstances of the case. Submit requests through the contact page and avoid disclosing sensitive information in public channels.