METRO Links Mobile App Privacy Policy

Introduction

At Rock Region METRO, your privacy is a priority. This Privacy Policy outlines how we collect, use, and safeguard your personal information through our digital platforms, including Rock Region METRO’s website and third-party payment systems. By using our services, you agree to the terms of this Privacy Policy.

We encourage you to read this policy carefully to understand what data we collect, how it’s used, and the choices available to you.

Information We Collect

We collect personal and transactional information through the Rock Region METRO website and its integrated systems when you interact with our services.

1. Personally Identifiable Information

Personally Identifiable Information includes data that directly identifies you or can be used to identify you. For employees, this includes but is not limited to:

• Name (required)
• Job title
• Address
• Date of Birth
• Gender
• Phone Number
• Email Address
• Driver Number
• Password (encrypted and not visible to anyone)
• Driving License (CDL) and Issue & Expiration Dates
• Multiple Pay Rates
• Certificates or other licenses
• FMLA Requested Dates
• Veteran Status
• Account Notes (if applicable)
• Photograph (optional)
• Vehicle ID
• Route Number
• Block Number
• Dispatcher ID

For clients, this includes but is not limited to:

• Name
• METRO Identification Number
• Date of Birth
• Gender
• Address
• Telephone number

2. Non-Personally Identifiable Information

This includes technical and usage data to improve your experience:

• Device Identifiers (e.g., cookies or browser fingerprinting)
• Device Information (e.g., operating system, browser type)
• IP Address and Log Data
• Usage and Tracking Information (used internally or by third-party analytics tools)

How We Use Your Information

We use the information we collect to provide, manage, and improve our transit services and digital platforms. Personally Identifiable Information is used solely for the purposes for which it was provided. This includes, but is not limited to, tracking driver hours, managing trips, tracking vehicle and driver performance, responding to inquiries, and communicating with customers about transactions or account status. Additionally, we may use this information to personalize your experience and fulfill legal, regulatory, or security obligations.

Non-Personally Identifiable Information is used to enhance the overall user experience, improve website and system functionality, and conduct statistical analysis that helps us optimize our services and better understand user behavior. All information is handled with care and in accordance with applicable privacy standards.

How We Protect Your Information

We take the security of your personal information seriously and implement robust measures to protect it from unauthorized access, misuse, or disclosure. Your data is stored behind secure networks and is only accessible by authorized personnel who are required to maintain its confidentiality. In addition, we employ industry-standard security protocols to safeguard all personal and payment information. This includes PCI-compliant payment processing through Masabi, which ensures that all transactions meet strict credit card security standards. Sensitive data is encrypted both in transit and at rest, and our systems operate on secure servers with access controls in place to prevent unauthorized use. These comprehensive security practices help ensure that your information remains protected throughout your interaction with our services.

Use of Cookies

A cookie is a small file stored on your device that allows us to identify your device during future visits. Cookies help us analyze traffic patterns and personalize your experience. While cookies do not collect Personally Identifiable Information, they may collect data such as IP addresses or browser information. You can manage your cookie preferences through your browser settings. Some features of our website may require cookies to function properly.

Do Not Track

Your browser may allow you to send a “Do Not Track” signal to websites. However, as a standard industry protocol for “Do Not Track” requests has not yet been established, we do not disable tracking technology that may be active on the service in response to any “do not track” requests that we receive from your browser or device.

Third-Party Disclosure

We do not sell or trade your Personally Identifiable Information. We may share it only with trusted service providers (e.g., Masabi, Chase Paymentech) who help us operate our services and are contractually obligated to keep your information secure to comply with legal obligations or protect rights, safety, or property

Third-Party Links

Our website may contain links to other websites. Please note that we are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies separately.

Disclosures Required by Law

Certain information collected by METRO is subject to disclosure under the Arkansas Freedom of Information Act of 1967. This includes records that are maintained by the public transit authority and may be held by third-party vendors. Disclosure of such information may be made pursuant to a request made under Freedom of Information Law or court order, if such information is not protected by federal, or state, or local law.

Children’s Privacy

The Children’s Online Privacy Protection Act (“COPPA”) imposes certain requirements on operators of websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age. If Rock Region METRO has actual knowledge that we have collected Personally Identifiable Information online from children under the age of 13, Rock Region METRO will make all reasonable efforts to obtain parental or legal consent before any further use of the Personally Identifiable Information occurs. When Company obtains parental or legal guardian consent, Company will maintain reasonable procedures to protect the confidentiality, security, and integrity of the Personally Identifiable Information collected from children under the age of 13.

When Company does not obtain parental or legal guardian consent to use Personally Identifiable Information for children under the age of 13, Company will no longer maintain the Personally Identifiable Information in any retrievable form.

Changes to Privacy Policy

Rock Region METRO reserves the right to update or change this Privacy Policy. Any updates will be posted on this page, and we will make efforts to notify users of significant changes.

Last Updated: August 2025