Privacy Policy

Last updated: 15 October 2026. This page describes how One Transfer Pty Ltd (ABN 14 703 163 642) handles personal information collected through this website. It is written to describe what the site actually does, not what a template says it might.

What the Booking Form Collects

The quote form on our home page asks for your name, phone number, email address if you choose to give it, pickup and drop-off locations, travel date and time, passenger count, luggage count, and whether you need a child seat. There is a free-text box where most people add a flight number or a note about the trip.

This website does not collect payment card details anywhere. If a booking later needs payment, that is arranged separately and not through this site.

Where Your Enquiry Goes

Form submissions are sent to our own booking endpoint at api.one-transfer.com, which runs on Cloudflare. Your enquiry is stored in our booking database hosted in Sydney, Australia, and a notification is emailed to our bookings inbox. We do not store your card details at any point.

We keep a limited record of each enquiry so that we can recognise returning customers and answer questions about past bookings. We do not store your IP address; we store a one-way, salted fingerprint of it instead, which we use only to detect automated abuse of the form.

If you would rather not use the form, you can reach us on the phone number or WhatsApp link shown on every page and give the same details directly.

When You Book With Us

Once we send you a quote, the trip is kept as a booking record in the same database in Sydney. The record holds your name, phone number, email address if you gave one on the form or wrote to us by email, pickup and drop-off, date and time, flight number, passenger count, the price we quoted and whether it has been paid. Only our own staff can open it, through an internal system that asks for a one-time sign-in code each time.

We use software to watch our bookings inbox so that a quote without a reply or an unpaid invoice does not slip through. It records the date, subject, type, amount and payment status of those emails and any phone number written in them, and keeps them with your booking record. Records that share a phone number are shown together. It does not keep the text of your messages; those stay in our mailbox. When an invoice includes a payment link, the same software checks the card payment page provided by our bank to see whether it has been paid. Your card details are entered on that page and never reach us.

Confirmed trips appear in our team calendar on Google Calendar with the pickup time, pickup and drop-off, your name and the chauffeur, so the team is reminded before each trip. The chauffeur assigned to your trip receives the details needed to do the job (your name and phone number, pickup and drop-off, time, flight number and any notes) by WhatsApp, and may add the trip to their own phone calendar.

Analytics

We use Google Analytics 4 to understand which pages people read and which pages lead to enquiries. It records pages viewed, approximate location derived from your IP address, device and browser type, and whether you clicked a phone, email or WhatsApp link or submitted the booking form. We do not send your name, phone number or addresses to Google. Google Analytics sets cookies in your browser.

Advertising

We advertise on Google Ads. The same Google tag that handles analytics also reports when a click on one of our ads leads to a booking request, so we can tell which ads are worth paying for. This uses cookies set by Google and can be used by Google for remarketing, which means our ads may follow you to other sites for a while. We do not send your name, phone number or addresses to Google Ads. If you would rather not be measured this way, Google's own ad settings page lets you switch personalised advertising off, and blocking cookies in your browser stops it as well.

Fonts and Other Requests

Typefaces are loaded from Google Fonts, which means your browser makes a request to Google servers and your IP address is visible to them. If you follow a WhatsApp link, the conversation happens on WhatsApp under Meta's own terms and privacy policy, not ours.

Error Reports

If part of this site stops working in your browser, or the booking form cannot send your request, your browser sends a short technical report to our booking endpoint at api.one-transfer.com so we can fix the problem quickly. The report contains the type of error, the page address, your browser type and, for a failed request, the error code the endpoint returned. It never contains anything you typed into the form. Reports are kept on Cloudflare and deleted automatically after eight days.

Cookies

This site sets cookies from Google for two purposes: analytics, and measuring whether an ad click led to a booking request. Both are described above. Nothing else on this page tracks you. You can block or clear cookies in your browser settings; the site works normally without them.

How Long We Keep It

Records of journeys we actually carried out are kept for seven years. That is the period Australian tax and business record-keeping rules expect, and it also lets us answer a question about an old invoice.

The booking record, the email details and the calendar entries described above follow the same periods.

Enquiries that never turned into a booking are kept for twelve months and then deleted. Messages you send us on WhatsApp about a confirmed booking are treated as part of that booking record and follow the same seven year period.

If you would like your enquiry deleted sooner, email info@one-transfer.com and we will do it, unless we are required to keep it for the tax period above.

Access, Correction and Complaints

You can ask what information we hold about you, ask us to correct it, or ask us to delete it. Email info@one-transfer.com or call +61 489 066 066. If you are not satisfied with how we handle a privacy question, you can raise it with the Office of the Australian Information Commissioner.

Changes

If this policy changes, the date at the top of this page changes with it. We do not notify visitors individually.