1. Commonwealth of Massachusetts 201 CMR 17.00 Compliance
The Commonwealth of Massachusetts enforces one of the strictest data privacy and cybersecurity mandates in the nation: 201 CMR 17.00: Standards for the Protection of Personal Information of Residents of the Commonwealth. SN Limo Service has implemented a comprehensive, Written Information Security Program (WISP) establishing administrative, technical, and physical safeguards:
- Mandatory Encryption in Transit: All personal information, travel records, contact details, and payment credentials transmitted over public networks or the Internet are encrypted using industry-standard 256-bit Transport Layer Security (TLS 1.3 / HTTPS).
- Access Control & Need-to-Know Privilege: Access to customer names, mobile telephone numbers, and trip manifests is restricted strictly to active dispatch personnel and assigned chauffeurs for trip fulfillment.
- Server Security Hardening: All underlying server directories storing trip requests are locked down with administrative access control, automated firewall inspection, and strict denial of directory indexing (HTTP 403 Forbidden).
- Massachusetts Breach Notification Mandate (M.G.L. c. 93H): In the improbable event of an unauthorized security incident involving personal data, SN Limo Service complies with statutory notice requirements to affected residents, the Massachusetts Office of Consumer Affairs and Business Regulation (OCABR), and the Attorney General's Office.
2. Payment Card Industry (PCI-DSS v4.0) Payment Security
Payment security is of the utmost priority. Under PCI-DSS v4.0 standards:
- Offloaded Payment Architecture: All credit card entry fields and authorizations are hosted directly on Level 1 PCI-DSS certified banking infrastructure (Limo Anywhere and integrated merchant card processors).
- No Card Storage on Web Servers: SN Limo Service does not store, retain, or possess unencrypted credit card numbers, CVV security codes, expiration dates, or bank account PINs on
snlimoservice.usweb servers. - Tokenized Transactions: Payment records and repeat corporate authorizations use encrypted tokenization, preventing any interception or reconstruction of original cardholder credentials.
3. Personal Information We Collect
In accordance with data minimization principles, we collect only the necessary information required to quote, confirm, dispatch, and fulfill private chauffeured transportation:
- Contact Information: Client name, telephone number, mobile number (for SMS flight and dispatch alerts), and email address (for ride confirmations and itemized receipts).
- Itinerary Details: Pickup address, drop-off destination, requested date and time, airline carrier, flight number, passenger count, luggage count, and special accessibility or child seat requirements.
- Corporate Account Data: Company name, billing department contact, account invoicing email, and authorized administrative booking agents.
- Technical Metadata: Anonymized server logs, IP addresses, browser user-agent, and timestamp information captured solely to diagnose server performance and protect against automated bot attacks.
- Data We NEVER Collect: We never request or collect Social Security numbers (SSN), driver's license numbers, biometric identifiers, or medical history.
4. How We Use Collected Information
Your information is used strictly for legitimate commercial livery operational purposes:
- Dispatching professional chauffeurs and vehicles to your exact location.
- Tracking incoming flight radar arrivals into Boston Logan Airport to ensure timely baggage claim greeting.
- Transmitting automated SMS dispatch updates (e.g., "Your chauffeur is on location in vehicle #14").
- Delivering itemized PDF receipts, invoices, and accounting records.
- Complying with Massachusetts DPU livery record-retention laws and Massport audit requirements.
5. Information Sharing & Third-Party Disclosures
We do NOT sell, rent, lease, or trade customer information to third-party data brokers, advertising networks, or lead generators. Information is disclosed only to verified service providers under strict confidentiality agreements:
- Limo Anywhere / Dispatch Infrastructure: Secure cloud-based enterprise livery dispatch system used to schedule and manage rides.
- Google Maps & Geocoding APIs: Real-time mapping services used solely to calculate route mileage, highway traffic, and pickup coordinates.
- Telecommunications Carriers: Secure SMS and email gateways for delivery of booking confirmations.
- Law Enforcement & Legal Compliance: In the rare instance required by a lawful subpoena, court order, or official Massachusetts state police investigation.
6. Children's Online Privacy Protection Act (COPPA)
Our website and chauffeured services are intended exclusively for adults aged 18 and older, corporate travel managers, and authorized guardians. We do not knowingly collect personal information from children under 13 years of age. Transportation of unaccompanied minors requires prior written parental/guardian authorization.
7. Client Rights under Massachusetts Law
Massachusetts residents have the right to request access to the personal records maintained in their customer profile, request correction of erroneous contact details, or request that their contact information be deactivated from our dispatch records (subject to statutory commercial tax and livery audit retention rules). To exercise these rights, email info@snlimoservice.us.
8. Updates to this Policy
Any revisions to this Privacy Policy will be posted to this page with an updated effective date. Continued use of our booking portal constitutes acceptance of the published policy.
9. Contact Our Privacy & Data Security Team
For questions regarding our 201 CMR 17.00 data security plan or payment safeguards, contact:
- SN Limo Service — Privacy Officer
- Direct Phone: (781) 775-4744
- Email: info@snlimoservice.us
- Operating Office: Norwell, MA 02061 • Boston, MA