Privacy policy

Who we are

Nollby Taxi is run by Nollby Group OÜ, a private limited company registered in Estonia. The same company runs Nollby Mat and Nollby Service. It is the controller of your personal data: it decides how your data is used and is responsible for it.

Nollby Taxi today

Nollby Taxi has not launched yet. Today you can only join the waitlist on this website. The rider and driver apps are closed: nobody can sign in, book or drive, and they collect no new data. This policy covers the waitlist, and the data the apps saved before they closed.

What joining the waitlist means

Joining is free and does not commit you to anything. It is not a booking, an account or a contract for rides. When the apps open, they will have their own terms, and we will show them to you before you use the app. You can leave the waitlist at any time by writing to hej@nollby.com.

What we collect when you join the waitlist

Only what you type in the form, plus a few details about how you joined:

• Drivers: your name, email, mobile number and the area you drive in.
• Riders: your email and the area you ride in, and your name if you give it.
• Businesses: the company name, your name, email, area and type of business, and a mobile number if you give it.
• Everyone: the language you joined in, when you joined, your personal invite code, the code of the person whose link you used (if any) and the campaign tags in the link you came from (such as utm_source).
• Optional questions: if you answer them after joining, we also keep your answers and anything you write in the free-text box. Drivers are asked which apps they drive for, their fares per month, how much they drive, which plan and fee suit them, and whether they have a taxi licence and permit. Riders are asked what rides they take and how often, and businesses how many rides they need a month.

Your browser keeps the invite code and campaign tags of the link you arrived on (in local storage, not a cookie), so they can be sent with your sign-up. Clearing this site’s data in your browser removes them. We use no analytics tools and no advertising cookies.

Why we use it, and our legal basis

We use your waitlist details only for Nollby Taxi:

• To run the waitlist: your place in the queue, your invite link and the confirmation email we send when you join.
• To tell you about the launch in your area, by email, or by phone if you gave us your number.
• To plan the launch: where to start and which prices and plans to offer, from the number of sign-ups per area and your answers to the optional questions.

Our legal basis for these is your consent: the box you tick when you join. You can withdraw it at any time by writing to hej@nollby.com, and we then delete your sign-up. That does not affect what we did before.

We also use your IP address, and signals from your browser when the bot check is on, to keep the form free from bots and repeated attempts. Our legal basis for that is our legitimate interest in a service that works and is safe.

Who sees your details

Only the Nollby team, in our own admin tools. Every export of the waitlist is logged. We get an email about each new sign-up with the details you gave, so we can follow up.

If someone opens your invite link, the page shows your first name, for example “Sara invited you”. We never sell your details or share them with advertisers. The providers below process them for us.

Our providers

These companies process data for us, only on our instructions and under their data processing terms:

• Cloudflare (Cloudflare, Inc., USA): hosts this website, our server and our database. The database is stored in Cloudflare’s EU jurisdiction, so it stays in the EU. Your visit is handled at the Cloudflare data centre nearest you, which sees your IP address and browser details. Cloudflare also counts attempts per IP address to stop abuse, and keeps technical logs of requests and errors for us.
• Cloudflare Turnstile (Cloudflare, Inc., USA): when the check is switched on, it makes sure a person, not a bot, fills in the form. It gets your IP address and signals from your browser, and sets no advertising cookies.
• Resend (Plus Five Five, Inc., USA): sends our emails: your confirmation email, and our own notice of each sign-up, which contains the details you gave. It processes them in the USA.
• Vonage (USA): sends SMS sign-in codes. Today it only gets the mobile numbers of the Nollby team when we sign in to our admin, never the numbers on the waitlist. If you signed in to the rider or driver app before it closed, Vonage got your number then.

Because these are US companies, your data may be processed in the USA. Cloudflare and Resend are certified under the EU–US Data Privacy Framework, and their data processing terms also include the EU’s standard contractual clauses. For any transfer the Framework does not cover, we rely on the standard contractual clauses. Write to hej@nollby.com for a copy of these safeguards.

If you used the app before it closed

Until 29 October 2026 the rider and driver apps were open for testing. If you signed in then, we still have what the apps saved:

• Account: your mobile number, name and language, your sign-ins and, if the account was blocked, when and why.
• Bookings: pickup, destination, time, price, the passenger’s name and number, notes, ratings and price offers.
• Drivers: name, number, car, plate, taxi licence and permit numbers, plan and area. A driver who was online when the apps closed may still have the last position the app sent.
• Your driver: the driver you saved, and whose QR card or link brought you to Nollby Taxi.
• Alerts and safety: ride-alert subscriptions for your browser’s push service (Google, Apple or Mozilla), and any press of the emergency button, with the car’s last position, which we were also sent by email.

The apps save nothing new while they are closed. Write to hej@nollby.com and we will delete your account.

How long we keep it

• Waitlist: until you ask us to delete it or withdraw your consent. Nothing deletes it automatically yet.
• Data from the apps: until you ask us to delete it. Positions during a trip are deleted two hours after the trip ends, and a shared trip link stops working an hour after the trip.
• SMS sign-in codes: we keep only a scrambled (hashed) form of each code, with the number it went to. Codes older than two days are deleted each time a new code is sent.

Your rights

You have the right to see the data we hold about you and get a copy, to have it corrected or deleted, to restrict or object to how we use it, to get it in a format you can take elsewhere, and to withdraw your consent at any time. Write to hej@nollby.com or call +46 72 013 14 76. We answer within a month, and may ask you to confirm it is you, for example by writing from the email address you joined with.

Complaints

If you think we handle your data wrongly, tell us first so we can put it right. You can also complain to a data protection authority. Our lead authority is Estonia’s Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), because the company is based in Estonia. You can also complain in the country where you live or work: in Sweden that is IMY, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).

Changes

We will update this policy before the apps open. The date at the top shows when it last changed.