A booking needs a name, a mobile number, two addresses and a time. Most of what a website usually takes on top of that is simply absent here, and this page says which parts and why.
Last reviewed 8 August 2026
Who holds your information
OSPIPO is a sole trader business operated by Parag Sharma under ABN 87 148 128 771, authorised as a NSW Point to Point Transport Booking Service Provider under BSP-462516 and based in Sydney. The person who drives is the person who answers the phone and the person who holds the booking records.
This policy is written to the Australian Privacy Principles under the Privacy Act 1988 (Cth). It covers every booking, whether it was made on this website, by phone, by WhatsApp, by email or through the published MCP connector.
What a booking collects
Your name, a contactable mobile number, and an email address if you give one. The pickup and drop-off addresses, the date and time, the number of passengers, what luggage is coming and any note you add about the trip.
A flight number, where you give one, so the pickup can move with the aircraft instead of with the timetable. Nothing else about the flight is retrieved, and nothing that identifies you is sent to the flight tracker.
No card details are collected at booking. There is no deposit, no card field, no account and no password, so there are no credentials here to be lost.
What is collected when you pay
Payment happens in the car at the end of the journey, which makes it the one piece of financial information collected after the service rather than before it. The transaction is handled by our payment processor on a reader in the car.
What reaches OSPIPO is the last four digits and a payment reference. That much is kept deliberately, because a tax invoice and a set of books have to reconcile against something. Your full card details are held by the payment processor under its own PCI-DSS obligations and are never held by OSPIPO.
What this website loads, and what it does not
Google Analytics runs on this site to count visits and bookings. Your IP address is anonymised, ad personalisation is switched off, and the tag refuses to report from any domain but this one. There are no third-party marketing pixels, no session recording anywhere on the site and no recording at all on the booking form.
Google's advertising features are enabled on the property, which is what lets the reports say roughly where visitors come from and whether the same person returned on another device. Ad personalisation stays off, so nothing collected here is used to target advertising at you, and OSPIPO runs no advertising to target you with. This means some of what is collected is handled by Google outside Australia, under Google's own terms rather than ours.
Typefaces are served from this domain, so reading a page here sends no request to a font provider for the privilege of seeing the words. Google Analytics is the only script here that is not ours.
There is no CAPTCHA on any form. Spam is handled with a hidden field and a timing check, which costs you nothing and asks you to identify no traffic lights.
Google Analytics sets a cookie to tell a returning visit from a new one, and your browser keeps your last quote on your own device so a repeat trip does not start from nothing. Neither is needed to book: blocking every cookie only means the form starts empty each time you return.
Australia does not require a consent banner to run analytics, and this site does not put one in front of you. It gives you the switch instead. Turning analytics off here stops the tag before it loads on every later page, on this device.
Analytics are on for this browser.
The choice is remembered on this device only. Clearing your browser data clears it too.
Who else sees it
Nothing is sold, rented, traded or handed to a marketing list, a data broker or a rideshare platform. There is no commercial arrangement of any kind under which your details leave this business.
Six parties can see some part of a booking, each for one reason:
The payment processor, for the transaction and the tax invoice, and for nothing else.
The flight tracking service, which receives a flight number and never your name or your number.
The website host, which serves the pages and receives the booking form when you send it.
The booking-notification service that carries a new booking to the chauffeur's phone, which receives the booking itself so he can act on it.
Anthropic, which runs the model behind the on-site concierge, and therefore sees what you type into it. Do not type anything there you would not put in a text message.
The NSW Point to Point Transport Commissioner or another authority, where the law requires records to be produced.
Where it is kept, and for how long
Booking records are held in Australia and are transmitted over TLS. The public pages of this website are served from a content delivery network with points of presence outside Australia; those are copies of pages that carry no personal information about anybody.
Records are kept for seven years, which is what taxation law and NSW point-to-point record-keeping require of a booking service provider, and then deleted. Nothing is retained beyond that for marketing, because there is no marketing to retain it for.
Your rights, and how to use them
You can ask what is held about you, ask for it to be corrected, and ask for it to be deleted where no record-keeping obligation requires it to be kept. You can also ask that everything about a booking come to you in writing rather than by phone.
Send a privacy request to bookings@ospipo.com.au or call +61 435 162 311. It is acknowledged within 2 business days like any other message and answered within 30 days, which is the outside limit the Australian Privacy Principles allow rather than a target being aimed at.
If the answer does not satisfy you, the Office of the Australian Information Commissioner takes privacy complaints at oaic.gov.au and can act entirely independently of us.
Changes to this policy
The review date at the top of this page is the date this text last changed. A material change is sent directly to anyone holding a live booking rather than published quietly and left to be discovered.
Questions
Before you ask.
A name, a contactable mobile, 2 addresses, a date and a time, plus an email address if you offer one. The number of passengers, what luggage is coming and any note you add go with it, and a flight number where you give one, so the pickup can follow the aircraft rather than the timetable. No card details are collected at booking: no card field, no account, no password, and therefore no credentials here to lose.
6 parties, each for exactly one reason. The payment processor, for the transaction and the tax invoice. The flight tracking service, which gets a flight number and never your name. The website host, the notification service that carries the job to the chauffeur's phone, and Anthropic, which runs the model behind the on-site concierge and therefore sees what you type into it. A regulator, where the law requires records. Nothing is sold, rented or traded.
7 years, then deleted. Taxation law and NSW point-to-point record-keeping both require that of a booking service provider, so it is an obligation rather than a preference. Records are held in Australia and transmitted over TLS in the meantime. Nothing is retained past that point for marketing, because OSPIPO runs no marketing to retain it for, and booking once does not add you to a list.
Exactly 1 script here is not ours, and it is Google Analytics, counting visits and bookings with your IP address anonymised and ad personalisation switched off. There are no marketing pixels, no session recording anywhere on the site and no recording at all on the booking form. A switch on this page stops the tag before it loads on every later page on that device, and typefaces are served from this domain rather than fetched from a font provider.
Payment happens in the car at the end of the journey, by card or cash, which makes it the only financial information collected after the service rather than before it. What reaches OSPIPO is the last 4 digits and a payment reference, kept because a tax invoice and a set of books have to reconcile against something. Your full card details stay with the payment processor under its own PCI-DSS obligations.
Email bookings@ospipo.com.au or call +61 435 162 311 and ask. You can ask what is held, ask for it to be corrected, and ask for it to be deleted where no record-keeping obligation requires it kept. A request is acknowledged within 2 business days and answered within 30 days at the outside, which is the ceiling the Australian Privacy Principles set rather than the aim. The OAIC takes privacy complaints independently at oaic.gov.au.
No question matches that. Try a shorter word, or ask the concierge.
Concierge
Tell me where you are going and when. I will give you the fixed fare, then take the booking — no card, no
account.