Privacy
notice.
How Byne’s Intercounty Bus Station collects, protects and retains passenger personal data across our Liberia and Australia operating entities.
1. Data Minimisation
We collect only the personal data strictly necessary to reserve a seat, verify payment, issue a ticket, maintain accurate passenger manifests and communicate service updates:
- Passenger Identity: Full name, passenger category (Adult/Child/Senior), and optional accessibility assistance notes.
- Booking Contact: Mobile phone number and email address for SMS/Email ticket delivery and two-factor booking lookup verification.
- Payment Metadata: Provider transaction reference, currency, amount and verification timestamp. Raw card details are never collected or stored.
- Opaque QR Tokens: Boarding QR codes contain only an opaque cryptographic token (
QR_OPAQUE_...)—never passenger names or phone numbers.
2. Liberia & Australia Regulatory Frameworks
Byne’s operates across two jurisdictions and does not assume a single legal regime applies to both:
- Liberia Operations (Monrovia HQ): Governed by applicable Liberian data protection, consumer protection, electronic transaction and Ministry of Transport passenger manifest rules.
- Australia Presence (Canberra HQ): Assessed under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including APP 8 cross-border disclosure safeguards.
3. Retention & Security Controls
All network traffic is encrypted via TLS 1.2+. Privileged staff access requires Multi-Factor Authentication (MFA) and server-side RBAC, with every lookup or change recorded in an append-only audit log. Accounting and transaction records are retained for the statutory financial period, after which optional personal data is anonymised.