Privacy Policy

Last updated: July 25, 2026

What MedicalRide has put in place

These are factual controls and transparency measures currently used by MedicalRide.org. They do not replace the full notices on this page.

• Clear operator identity

  MedicalRide.org is operated by Tipmunk SASU, with public controller and contact details listed in the Legal Notice and Privacy Policy.

  Legal Notice
• Directory platform boundary

  MedicalRide presents a directory and request platform. Independent providers remain responsible for transportation services, vehicles, drivers, licensing, insurance, pricing, and ride completion.

  Terms
• Consent and privacy choices

  Analytics and advertising storage default to denied, limited cookieless measurement remains consent-aware, Global Privacy Control is honored where applicable, and key consent choices are recorded.

  Privacy Choices
• Rights request workflow

  People can request access, correction, deletion, portability, consent withdrawal, and California privacy choices through a dedicated intake form.

  Data Rights
• Retention and deletion controls

  MedicalRide publishes baseline retention categories and uses review, legal-hold, and approval steps before eligible deletion or redaction runs.

  Retention
• Vendor transparency

  The vendor register lists core provider categories, data categories, transfer evidence, BAA availability, and public legal evidence links.

  Subprocessors
• Security and audit controls

  Admin/session controls, role-based permissions, rate limits, same-origin checks, and sensitive-access audit logs support privacy operations.

  Security
• Organization agreement evidence

  Organizations can accept directory-platform terms through an electronic agreement flow that records authority, accepted text, and request context.

  Organization agreement

Controller

MedicalRide.org is operated by Tipmunk SASU, a French société par actions simplifiée unipersonnelle (SASU), share capital €1, registered with the Paris Trade and Companies Register under number 107 697 385, with registered office at 47 rue Vivienne, 75002 Paris, France. Tipmunk SASU is the controller for MedicalRide platform operations unless a separate written agreement states otherwise.

Privacy contact: support@medicalride.org.

Information we collect

Depending on how a person uses MedicalRide, we may collect:

• Customer, passenger, caregiver, facility, coordinator, and provider contact information
• Pickup, destination, date, time, appointment, return-trip, and route information
• Mobility, wheelchair, stretcher, bariatric, transfer, stairs, access, equipment, oxygen, companion, and assistance information
• Notes voluntarily submitted about a ride or passenger
• Provider company, ownership-contact, service-area, vehicle, capability, pricing, availability, licensing, insurance, website, payment, and operational information
• Request, quote, booking, callback, cancellation, refund, complaint, support, and outcome records
• Payment status, transaction identifiers, authorization status, and limited payment metadata supplied by payment processors
• Email, text, telephone, and platform communications
• Account, authentication, security, device, browser, IP address, cookie, log, and analytics information
• Publicly available business information used to create, review, correct, or maintain directory listings
• Other information a user voluntarily provides

MedicalRide does not store full card numbers where payment processors handle card data.

Why we use information

We may use personal information to:

• Receive and structure ride requests
• Match, route, quote, coordinate, confirm, and support transportation requests
• Enable directory search, calls, callbacks, website visits, and provider contact
• Communicate with customers, passengers, caregivers, facilities, coordinators, and providers
• Process or support payments, authorizations, refunds, invoices, memberships, and disputes
• Operate provider accounts, profiles, listings, memberships, and dashboards
• Review service areas, capabilities, availability, information quality, responsiveness, complaints, fraud, and platform eligibility
• Protect safety, security, users, providers, payments, and platform integrity
• Maintain records, enforce terms, resolve disputes, and comply with law
• Measure and improve platform performance
• Send marketing communications only where permitted and subject to available opt-out rights

Legal bases

Where the GDPR applies, processing may be based on performance of a contract or steps requested before entering a contract, legitimate interests in operating and protecting the platform, compliance with legal obligations, consent where consent is required, establishment, exercise, or defense of legal claims, or protection of vital interests in exceptional circumstances.

Ride information may reveal health, disability, or mobility information. MedicalRide aims to avoid collecting unnecessary clinical details and to use sensitive ride details only as reasonably needed for transportation coordination, support, safety, records, or legal purposes. Additional legal bases or agreements may apply when MedicalRide works with a health care organization or other regulated entity.

Sharing

We may share information with:

• Independent transportation providers that need information to evaluate, quote, schedule, accept, perform, or support a request
• Payment processors and financial-service vendors
• Messaging, telephone, email, hosting, security, analytics, customer-support, and technical-service vendors
• Professional advisers, insurers, auditors, and authorities where necessary
• A buyer, successor, affiliate, or transaction participant in a merger, financing, restructuring, asset transfer, or sale, subject to appropriate safeguards
• Other parties at the user's direction or with consent
• Authorities or other parties when required by law or reasonably necessary to protect rights, safety, security, or prevent fraud

MedicalRide does not sell personal information in the ordinary meaning of exchanging it for money.

Before a provider accepts or is selected, MedicalRide may limit or stage direct contact details where practical. After a callback request, quote selection, provider acceptance, or other applicable step, MedicalRide may share the information reasonably needed to coordinate the ride. A request may be shared with more than one provider when the applicable workflow involves comparison, availability checking, quote collection, backup coverage, or broader routing.

The main vendor categories are listed on the Subprocessors and Vendor Register.

Independent providers

Independent providers are separate businesses responsible for their own use, security, retention, and legal handling of information they receive. MedicalRide requires providers to use customer and passenger information only for the relevant request, transportation, payment, support, legal, or safety purpose and not for unrelated marketing or sale.

MedicalRide is not responsible for a provider's independent privacy practices where applicable law permits that responsibility to be limited.

International transfers

MedicalRide operates from France and may use providers and vendors in the United States, Canada, and other countries. Where required, international transfers may rely on applicable legal mechanisms and safeguards.

Retention

MedicalRide retains information only as long as reasonably needed for the purposes described, including request coordination, account administration, payment and tax records, safety, fraud prevention, disputes, legal claims, and legal obligations. We do not promise automatic deletion after a fixed period unless a specific workflow or written notice says so. The current baseline retention categories are published in the Data Retention Schedule.

Security

MedicalRide uses reasonable technical and organizational measures intended to protect information, such as access controls, encrypted transport where supported, payment processors for card handling, authentication controls, operational logs, and restricted internal access. No system can guarantee absolute security. Additional safeguards are summarized on the Security Measures page.

User choices and rights

Depending on location, a person may have rights to access personal information, correct inaccurate information, request deletion, restrict or object to processing, receive portable information, withdraw consent where processing relies on consent, object to direct marketing, or lodge a complaint with a competent data-protection authority.

Requests may be submitted through the Data Rights Request form or sent to support@medicalride.org. MedicalRide may verify identity and authority before acting. EU/EEA users may lodge a complaint with the CNIL or another competent supervisory authority. Rights may be limited by applicable exceptions, legal obligations, fraud prevention, safety, payment, recordkeeping, or legal-claim requirements.

Cookies and analytics

MedicalRide may use essential cookies and similar technologies needed for security, sessions, forms, preferences, and platform operation. Analytics, advertising, or other non-essential technologies must be described and consented to where required. Visitors can manage non-essential tags, do-not-sell-or-share choices, and sensitive-data-use choices on the Privacy Choices page.

Children

MedicalRide is intended for adults arranging transportation for themselves or others. It is not directed to children for independent use. Information about a minor should be submitted only by an authorized parent, guardian, caregiver, facility, or other responsible adult and only as needed for the transportation request.

Changes

MedicalRide may update this Policy to reflect legal, operational, security, vendor, or service changes. The updated date will be shown on the page. Material changes will be communicated where required.

Contact

Privacy questions and requests: support@medicalride.org. Postal address: Tipmunk SASU, 47 rue Vivienne, 75002 Paris, France.