Privacy Policy

Introduction

The terms "Croydon Car," "us," or "we" refer to the website owner, whose registered office is [Your Company Address]. We gather and store only the essential information needed to provide the services you've requested, such as processing your order. Additionally, we may use this data for auditing, research, and analysis to enhance our technologies and services. The term "you" refers to the user or visitor of our website. To complete your transfer, we may share selected information with third parties. We may revise this policy periodically by posting a new version on our website. Please review this page occasionally to ensure you are satisfied with any changes.

How We Collect and Use Your Personal Data

In this section, we detail:

• The types of personal data we may process;
• The reasons for processing personal data;
• The legal grounds for this processing;
• When we share your personal data with others;
• The measures we take to protect your personal data.

Analytics Data

We may gather and process data about your use of our website ("analytics data"). This may include your IP address, approximate location, browser type and version, operating system, referral source, visit duration, and navigation paths, as well as your email address and information about the frequency and pattern of your visits. We collect this data via Google Analytics. The legal basis for processing this data is our legitimate interest in improving our website and service.

Customer Data

We collect and process information related to customer profiles ("Customer Data"). This includes your full name, email address, phone number, and billing address, which you provide during the booking process. The legal basis for processing this data is contract performance, specifically to communicate reliably with you regarding your bookings and to organize and provide the requested service. Some of this data may be shared with third-party services as part of transaction information or analytics data.

Journey Data

We may collect and process personal data related to journeys or transfers ("Journey Data"). This includes the head passenger's name, passenger mobile number, journey route, flight/service numbers, and travel dates and times. The legal basis for processing this data is contract performance. Some journey data may be shared with third parties, such as independent taxi drivers, to fulfill your transfer. Where possible, we limit this sharing to non-identifiable information.

Transaction Data

We may collect and process data related to payments made through our website or customer service agents ("Transaction Data"). This includes card number, expiry date, and security code, as well as billing address and cardholder's name. We also process additional data to conduct background checks to reduce fraudulent activity, which may include your email address and phone numbers. Transaction data is handled but not stored by us and is passed to a third-party service, SagePay. The legal basis for processing this data is contract performance.

Correspondence Data

We may process information contained in or relating to any communication with us ("correspondence data"). This includes email content, online chat transcripts, call recordings, and associated metadata. Correspondence data may be processed for communication purposes. We avoid collecting transaction data in correspondence data and delete any such records if captured. The legal basis for this processing is contract performance, specifically to organize and supply the purchased services.

Legal Claims

We may process your personal data if necessary for the defense of legal claims in court or other legal proceedings. The legal basis for this is to protect and assert our legal rights, the rights of our customers, or the rights of others.

Legal Obligations

descrWe may process any of your personal data if necessary to comply with a legal obligation to which we are subject or to protect your interests or the interests of another person.

Retaining and Deleting Personal Data

This section outlines our data retention policies, designed to ensure compliance with our legal obligations regarding the retention and deletion of personal data and to minimize risks to our customers. Personal data processed for any purpose will not be kept longer than necessary to fulfill the purchased service and our or a third party's legal obligations. 

We will retain and delete your personal data as follows:

Analytics Data

• Google Analytics retains data related to visits to our website indefinitely. The data collected is non-identifiable.
• Identifiable analytics data is stored for up to one month following a website visit and then deleted from our systems.

Customer Data

Customer Data is retained for six years from the end of the last tax period following the completion of all booked journeys. This period restarts if additional services are purchased. This retention ensures compliance with the Finance Act 1988, Schedule 18, Part 3, Section 21(2).

Journey Data

Journey Data is retained for up to one year following the completion of the journey, per our legal obligations as a registered Private Hire Operator, and then deleted from our systems.

Transaction Data

Some Transaction Data is retained for six years from the end of the last company financial year they relate to, in line with our legal obligations as a limited company. After this period, the data is deleted from our systems.

Correspondence Data

Correspondence Data is retained for up to 18 months following its collection. Transactional correspondences are retained for six years to comply with the Finance Act 1988, Schedule 18, Part 3, Section 21(2).

Legal Claims

We may retain your personal data if necessary for defending legal claims in court or other legal proceedings.

Legal Obligations

We may retain your personal data if necessary for compliance with a legal obligation to which we are subject or to protect your vital interests or those of another person.

Your Rights

You have the right to access, correct, or request the deletion of any personal information we hold about you. We are required to provide or remove this information free of charge within 30 days, subject to certain limitations:

• There may be legal reasons we cannot delete the data.
• The data may be essential for providing the service, and its removal could result in service cancellation, subject to our usual cancellation fees/procedure.
• You will need to provide proof of identity, such as two forms of ID (e.g., passport, driving license, or a utility bill showing your address), via email or post with your request.
• If the request is complex, the rectification period can be extended by up to two months.
• You have the right to lodge a complaint with a supervisory authority.
• You have the right to withdraw consent to our use of your data, though this may result in service cancellation and applicable charges.

For any requests or questions regarding your personal data, please contact us at Contact Us.