Privacy Policy

Privacy and Data Policy

Data Controller

Bumalift is operated by Incredible Web Limited, acting as both the Data Controller and the Data Processor. Bumalift strongly values the privacy of its users and is committed to protect your personal data (i.e. information that identifies you) as though it were our own. If you have any questions about how we protect your privacy, get in touch here:


One of your rights under EU law - the GDPR - is that you must be informed when your personal data - also known as personal information - is processed (collected, used, stored) by any organisation. You also have the right to know the details and purpose of that processing.

This Privacy Policy describes our practices related to the processing of personal including the data collected through our website and mobile application.

What kind of information do we collect?

Bumalift collects information from its users when they register including name, surname, email and date of birth. We utilise this information in order to be able to provide you with the match making service which allows you to set up carpool schedules with other individuals on the platform. Your profile information is only shared on the mobile application with other individuals. When you have scheduled Route, upon your confirmation, we track your location so as to be able to verify that your route is on track, on schedule and finally complete. We will not track your location in the background and whilst you are not participating in a scheduled route. 

Where do we store your data?

Your data is safely stored on cloud servers located in Europe so as to make sure that they meet the European GDPR requirements. Your personal data is safely stored and secured. Any communication between our server and our systems takes place over the Secure HyperText Transfer Protocol (Https) ensuring that the data is properly encrypted. On top of that, your data is also protected using custom OAuth 2.0 protocols making sure that only authorised applications are allowed to communicate with our servers. Access between the servers and the database is also whitelisted and utilises advanced security mechanisms.

Aggregated Statistics

Bumalift may collect anonymous statistics about the behavior of visitors to its websites and mobile applications. For instance, Bumalift may monitor the most popular routes. Bumalift may display this information publicly or provide it to others. However, Bumalift does not disclose personally-identifying information nor information about specific users.


A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Bumalift uses cookies to help identify and track visitors, their usage of Bumalfit websites, and their website access preferences. Bumalift visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using Bumalift websites, with the drawback that certain features of the website may not function properly without the aid of cookies.

Business Transfer

If Bumalift, or substantially all of its assets, were acquired, or in the unlikely event that Bumalift goes out of business or enters bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Bumalift may continue to use your personal information as set forth in this policy.

Personal Information

Bumalift discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organisations that (i) need to know that information in order to process it on Bumalift's behalf or to provide services available at Bumalift websites, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organisations may be located outside of Malta but in the European Union; by using Bumalift and its web and mobile applications, you consent to the transfer of such information to them. Bumalift will not rent or sell potentially personally-identifying and personally-identifying information to anyone without your explicit consent. Other than to its employees, contractors and affiliated organisations, as described above, Bumalift discloses potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental request, or when Bumalift believes in good faith that disclosure is reasonably necessary to protect the property or rights of Bumalift, third parties or the public at large. If you are a registered user of Bumalift and have supplied your email address, Bumalift may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with Bumalift. We primarily use our various product blogs to communicate this type of information, so we expect to keep this type of email to a minimum. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. Bumalift takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally-identifying and personally-identifying information.

If there is ever a breach of our system, we will notify you as soon as possible



If you would like Bumalift to delete your personal, please get in touch and we will walk you through the process. 


Contact Information

If there are any questions regarding this privacy policy you may contact us using the information below.

Incredible Web Ltd.
Edelweiss, 14, Triq San Glormu
Bugibba, Bugibba SPB1191

Last Edited on 2018-05-24