Privacy Policy

Last updated: July 4, 2026

This policy explains what information Goja (gojatravel.com) collects, how we use it, and who we share it with. By using Goja, you agree to this policy.

1. Information We Collect

  • Contact & identity details — your name, email address, phone number, and nationality.
  • Driving details — whether you hold an International Driving Permit (IDP) and any licence-related information you choose to provide.
  • Booking history — the vehicles, shops, dates, and status of your bookings.
  • Payment information — payments are processed by Stripe. Goja receives confirmation of payment and the amount, but never stores your full card number or CVC on our systems.
  • Account & session data — if you sign in, basic account information and a session cookie used to keep you logged in.

2. How We Use Your Information

  • To process and manage your bookings.
  • To send you booking confirmations and status updates via email, LINE, or WhatsApp.
  • To share the details a shop needs to prepare your vehicle — your name, booking dates, and contact details — with the specific partner shop for that booking.
  • To provide customer support and, where needed, help resolve disputes.
  • To meet legal, tax, and accounting obligations.

3. Sharing With Third Parties

We share only the information necessary for the services below, and we never sell your personal data:

  • Partner shops — only the minimum booking details needed to prepare your vehicle: your name, pick-up and return dates, and contact details (phone/email). We do not send shops your full passport number or any payment/card details. Note that a shop may separately ask you for additional documents at pick-up (for example, photographing your passport or licence as their own deposit) — that is a separate step handled directly between you and the shop, not information Goja shares.
  • Stripe — to securely process your online payment and any refunds.
  • Supabase — our database, authentication, and file storage provider, which hosts your booking and account data on our behalf.
  • Resend — to deliver transactional emails (for example, booking confirmations).
  • LINE — to deliver notifications if you interact with us over LINE.
  • Sentry — error monitoring, which may receive technical data such as your IP address and browser information when an error occurs. Session replay is not enabled, and we do not send default personally identifying information to Sentry.
  • Map providers (Google Maps, OpenStreetMap) — to display shop locations and directions.

4. Data Retention

We keep your information for as long as needed to provide our service and manage your bookings, and for any longer period required by applicable tax, accounting, or legal obligations. When it is no longer needed, we delete or anonymise it.

5. Your Rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us via WhatsApp or LINE. Please have your Booking ID or account email ready so we can verify your request.

6. Cookies

Goja uses only essential cookies — primarily to keep you signed in and to keep your session secure. We do not use third-party advertising, marketing, or product-analytics tracking cookies. Operational error monitoring via Sentry (see Section 3) is not advertising or analytics tracking. Some pages load resources from Google (fonts and maps); these are used to display the site and are not used by Goja to track you.

When a map loads on a page, the Google Maps SDK may collect some data (such as your IP address) under Google's own privacy policy, even though Goja itself does not track you.

7. Security

Payment card details are handled entirely by Stripe, a PCI-DSS compliant payment processor — Goja never stores your card number. We rely on reputable providers (Stripe, Supabase) and reasonable technical measures to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data.

8. Children & Minors

Goja is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18.

9. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes, and the “Last updated” date above always reflects the latest version.

10. Contact Us

Questions about your privacy or this policy? Contact us on WhatsApp or LINE — we reply as quickly as we can, usually within a few hours. See also our Rental Terms & Conditions and Cancellation & Refund Policy.

Goja reserves the right to update this policy. The date above reflects the current version.