Trip-Ledger LLC
Privacy Policy
Effective November 5, 2026 · Direct (private-pay) bookings at book.trip-ledger.com
1. What we collect
Only what we need to arrange your transportation: the booker’s and passenger’s names and phone numbers, an optional email, pickup and drop-off addresses, trip date and times, and mobility needs (for example wheelchair, stretcher, oxygen, stairs, a companion). We do not ask for or store medical records, diagnoses, insurance details, or Social Security numbers. Card payments are handled by Stripe — Trip-Ledger never sees or stores your full card number.
2. How we use it
To quote, schedule, and operate your trip; to communicate with you about it; to process payments and refunds; to keep required transportation records; and to meet safety and legal obligations. We do not sell your trip or contact information or use those details for third-party advertising.
3. Who we share it with
The assigned transportation provider and driver receive the trip details they need to perform your ride (passenger name, addresses, times, mobility needs). Our service vendors process data on our behalf under contract: Stripe (payments) and Amazon Web Services (secure hosting). We disclose information if the law requires it. Optional server-side ad measurement is described below.
4. Calls, texts, and emails
By submitting a booking you agree that Trip-Ledger may call, text, or email the contact details you provided about your trips (confirmations, driver details, schedule changes, receipts). These are service messages, not marketing. You can opt out of texts by replying STOP or of any channel by calling us — we honor opt-outs promptly. We keep a record of when and how you gave consent.
5. How long we keep it
Trip records are retained for up to ten years to meet transportation record-keeping and audit obligations. Customer profile details (saved contacts and addresses) are kept while you remain a customer; you may ask us to delete profile information that is not part of a required trip record.
6. How we protect it
Data is encrypted in transit and at rest, access is role-restricted and logged, and our systems are monitored. Trip details are visible only to staff and the provider assigned to your trip.
7. Your choices and rights
You can ask what information we hold about you, correct it, or request deletion (subject to the retention rules above) by calling (804) 773-1462. We will verify your identity before acting on a request. Our services are not directed to children under 18 booking on their own behalf.
8. Healthcare facilities
Trips arranged by healthcare facilities through the Trip-Ledger facility portal are governed by our agreements with those facilities, including HIPAA business-associate obligations where applicable. This policy covers direct bookings made by individuals.
9. Optional server-side ad measurement
If you choose Allow measurement, we use a first-party cookie shared between trip-ledger.com and book.trip-ledger.com to remember your choice and, when available, a Google ad-click identifier. Your choice is remembered for up to 180 days. The click identifier expires after 30 days. An allow choice stored with a click identifier expires with that identifier, so we may ask for your choice again sooner.
After our server successfully saves your quote request, it may send Google the ad-click identifier, the time the request was received, and a separate random event identifier. The message also identifies our Google Ads account and conversion action, marks the event as a website lead, records measurement consent, and assigns a zero monetary value in USD. This counts a lead; it does not report a fare or revenue. Google can connect your ad click to a quote request from Trip-Ledger.
We do not load a Google tracking script in your browser or send Google pageviews, browsing history, page URLs, referrers, your IP address or browser information, names, email addresses, telephone numbers, booking references, pickup or destination addresses, travel dates or times, mobility or health needs, or payment details. We do not send userData fields or enable enhanced conversions or personalized advertising.
Pending measurement events are encrypted on our server. Their identifiers expire within the same 30-day click window and are removed by routine cleanup; the event payload is cleared sooner after Google confirms processing. Use Ad measurement preferences to decline or withdraw consent. Declining does not affect booking. Withdrawal stops future measurement and cancels unsent events; it cannot remove information already received by Google. We honor Global Privacy Control and Do Not Track. Read how Google uses information.
10. Changes & contact
We’ll post any changes to this policy on this page with a new effective date. Questions: call (804) 773-1462. Trip-Ledger LLC, serving Richmond and the surrounding areas.