From inquiry to payment, all operations in one platform made to make your business thrive! Be part of a global ecosystem that enables your business to work far more efficient using newest technology.
Last updated: August 1, 2026
This Data Processing Agreement (the "DPA") forms part of the Terms and Conditions (the "Legal Terms") between LimoExpress llc ("Processor," "Company," "we," "us," or "our") and the organisation that registers for or uses the Services ("Controller," "Customer," or "you").
This DPA applies where and to the extent that LimoExpress processes Personal Data on behalf of the Customer in connection with the Services. By accepting the Legal Terms and this DPA during registration, or by using the Services, you agree to be bound by this DPA.
If there is a conflict between this DPA and the Legal Terms regarding the processing of Personal Data, this DPA will control.
You can contact us by phone at +1 601 884 6561, email at [email protected], or by mail to 1111B S Governors Ave STE, Dover 19904, Delaware, United States of America.
Capitalised terms not defined in this DPA have the meaning given in the Legal Terms or applicable data protection law. In this DPA:
For Personal Data that the Customer uploads to, stores in, or otherwise processes through the Services (for example, driver, passenger, reservation, vehicle, and invoicing data), the Customer acts as the Controller and LimoExpress acts as the Processor.
For Personal Data that LimoExpress processes for its own purposes as an independent controller (for example, account administration, billing of the Customer, website analytics, marketing to the Customer, and security of LimoExpress systems), such processing is described in our Privacy Policy and is not governed by this DPA, except where this DPA expressly states otherwise.
3.1 Subject matter. The provision of the Services to the Customer, including dispatch, ride management, fleet operations, reservations, invoicing, customer management, integrations, and related platform features.
3.2 Duration. Processing continues for the term of the Customer’s use of the Services and for any retention period required under the Legal Terms, this DPA, or Applicable Data Protection Law.
3.3 Nature and purpose of processing. LimoExpress processes Personal Data as necessary to provide, maintain, secure, support, and improve the Services; to perform Customer instructions; and to comply with applicable law.
3.4 Categories of data subjects. Depending on how the Customer uses the Services, data subjects may include:
3.5 Categories of Personal Data. Depending on the Customer’s configuration and use of the Services, Personal Data may include:
3.6 Special categories of data. The Services are not intended for processing special categories of Personal Data (sensitive data). The Customer shall not intentionally submit such data to the Services unless the parties have agreed otherwise in writing and appropriate safeguards are in place.
LimoExpress shall process Personal Data only on documented instructions from the Customer, unless required to do so by Applicable Data Protection Law. In that case, LimoExpress will inform the Customer of that legal requirement before processing, unless the law prohibits such notice.
The Customer’s instructions are deemed to include:
If LimoExpress believes an instruction infringes Applicable Data Protection Law, it will promptly inform the Customer.
LimoExpress shall ensure that persons authorised to process Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality, and that access to Personal Data is limited to personnel who need such access to perform the Services.
Taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing, LimoExpress shall implement appropriate technical and organisational measures to protect Personal Data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
Such measures may include, as appropriate:
No method of transmission or storage is completely secure. The Customer is responsible for configuring the Services securely, managing user access within its organisation, and keeping account credentials confidential.
The Customer authorises LimoExpress to engage Sub-processors to process Personal Data as needed to provide the Services. LimoExpress shall impose data protection obligations on Sub-processors that are no less protective than those in this DPA, to the extent applicable to the services provided by the Sub-processor.
Depending on the Customer’s use of the Services, Sub-processors or third-party processing may include providers used for:
Where the Customer enables an optional integration (for example LimoExpress GPT / OpenAI), the Customer instructs LimoExpress to share the relevant data with that provider, and further processing by that provider may be outside LimoExpress’s control to the extent described in the Privacy Policy and the integration settings.
LimoExpress remains responsible to the Customer for the performance of Sub-processor obligations under this DPA relating to Personal Data.
Upon written request, LimoExpress will provide information about current Sub-processors relevant to the Customer’s use of the Services. If the Customer reasonably objects to a new Sub-processor on data protection grounds, the parties will discuss in good faith. If no resolution is reached, the Customer may discontinue the affected Service feature or terminate the affected Services in accordance with the Legal Terms.
The Services are hosted in Switzerland. Personal Data may be transferred to and processed in Switzerland and in other countries where LimoExpress or its Sub-processors operate.
Where Personal Data is transferred from the EEA, UK, or Switzerland to a country that does not provide an adequate level of protection under Applicable Data Protection Law, LimoExpress will implement an appropriate transfer mechanism, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum / IDTA, or another lawful transfer tool, as applicable.
By using the Services, the Customer acknowledges that Personal Data may be transferred to Switzerland and other jurisdictions as necessary to provide the Services, subject to the safeguards described in this DPA and the Privacy Policy.
Taking into account the nature of the processing and the information available to LimoExpress, LimoExpress shall provide reasonable assistance to the Customer in:
If LimoExpress receives a data subject request relating to Personal Data processed on behalf of the Customer, LimoExpress will, where reasonably identifiable as relating to that Customer, forward the request to the Customer and will not respond substantively except on the Customer’s documented instructions or as required by law.
The Customer is primarily responsible for responding to data subject requests concerning Personal Data under its control.
LimoExpress shall notify the Customer without undue delay after becoming aware of a Personal Data breach affecting Personal Data processed on behalf of the Customer. The notification will include information reasonably available to LimoExpress to help the Customer meet its own notification obligations, including where possible the nature of the breach, likely consequences, and measures taken or proposed to address it.
LimoExpress will take reasonable steps to mitigate the effects of the breach and to prevent recurrence, and will cooperate with the Customer as reasonably required.
Upon termination or expiry of the Services, or upon the Customer’s written request, LimoExpress shall, at the Customer’s choice and to the extent technically feasible, delete or return Personal Data processed on behalf of the Customer, and delete existing copies, unless Applicable Data Protection Law or another legal obligation requires retention.
Where deletion from backup or archival systems is not immediately practicable, LimoExpress will isolate such Personal Data from further active processing until deletion is possible in accordance with its backup retention cycles.
LimoExpress shall make available to the Customer information reasonably necessary to demonstrate compliance with this DPA and Applicable Data Protection Law in relation to the processing carried out on the Customer’s behalf.
Where information provided by LimoExpress is not sufficient, the Customer may request an audit, no more than once per twelve (12) month period (unless required by a supervisory authority or following a Personal Data breach), upon reasonable written notice, during normal business hours, and in a manner that does not unreasonably disrupt LimoExpress operations or compromise the security or confidentiality of other customers’ data. Audits may be performed by the Customer or an independent auditor bound by confidentiality, subject to reasonable security and scheduling requirements.
The Customer warrants and undertakes that:
Each party’s liability arising out of or in connection with this DPA is subject to the limitations and exclusions of liability set out in the Legal Terms, except to the extent such limitations are prohibited by Applicable Data Protection Law.
This DPA takes effect when the Customer accepts it (including by accepting the Legal Terms that incorporate this DPA, or by checking the acceptance box at registration) and continues for as long as LimoExpress processes Personal Data on behalf of the Customer.
Provisions that by their nature should survive termination (including confidentiality, return or deletion of data, and liability provisions) will survive termination of this DPA.
LimoExpress may update this DPA from time to time by posting an updated version and updating the "Last updated" date. Material changes will apply as described in the Legal Terms regarding updates to supplemental terms. Continued use of the Services after the effective date of an updated DPA constitutes acceptance of the updated DPA, unless Applicable Data Protection Law requires a different process.
Except where Applicable Data Protection Law requires otherwise, this DPA is governed by the same governing law and dispute resolution provisions as the Legal Terms (laws of Montenegro; courts of Montenegro), without prejudice to mandatory rights of data subjects or supervisory authorities under Applicable Data Protection Law.
For questions about this DPA or data protection matters relating to processor activities, contact:
LimoExpress llc
1111B S Governors Ave STE
Dover 19904, Delaware
United States of America
Phone: +1 601 884 6561
Email: [email protected]
Related documents: