- Home
- Privacy policy
Privacy policy
Your data, used for your journey and nothing else.
This policy explains what personal information Get London Transfer collects when you book or enquire, why we need it, who sees it, how long we keep it and how to exercise your rights under UK data protection law. It's written to be understood without a lawyer.
1. Who is responsible for your data
Get London Transfer Ltd, trading as Get London Transfer, is the data controller for the personal information described in this policy. We are registered in England and Wales (company number 16243331) with our registered office at 179-181 Lower Richmond Road, Richmond TW9 4LN.
For anything to do with your data, email support@getlondontransfer.co.uk with "Privacy" in the subject line, or write to us at the address above.
2. What we collect
| Information | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, phone number, email address | You, when you book or enquire |
| Journey details | Pick-up and drop-off addresses, date and time, flight or ship details, number of passengers and bags, vehicle chosen, child seats requested, notes you add | You |
| Payment details | Amount paid, payment method, the last four digits of a card, transaction reference. We never receive or store your full card number — card and PayPal payments are handled by Stripe and PayPal on their own secure pages. | You, Stripe, PayPal |
| Communications | What you tell us by phone, WhatsApp, email or the booking form, including complaints and feedback | You |
| Accessibility or health information | Only if you tell us — for example that a passenger uses a wheelchair or needs help from door to door | You, and only used to arrange the journey |
| Business account details | Company name, invoicing address, the names of authorised bookers | You or your employer |
| Technical information | IP address, browser type, the pages you visit on our site, and the session cookie our booking form uses | Your device, automatically |
3. Why we use it and our legal basis
| Purpose | Legal basis under UK GDPR |
|---|---|
| Providing the journey you booked: confirming it, dispatching a driver, tracking your flight, contacting you on the day, taking payment and sending receipts | Performance of a contract with you |
| Keeping a record of every booking, including passenger name and journey details, as private hire licensing rules require | Legal obligation |
| Keeping accounting and tax records | Legal obligation |
| Answering enquiries, changes, complaints and lost-property requests | Performance of a contract, and our legitimate interest in running the business properly |
| Inviting you to review your journey after travel | Our legitimate interest in understanding the service we provide; you can ignore the invitation |
| Preventing fraud, protecting drivers and passengers, and defending legal claims | Our legitimate interests, and legal obligation where it applies |
| Arranging assistance for a passenger with accessibility or health needs | Your explicit consent, given when you tell us |
| Sending you offers or news about our services | Your consent, which you can withdraw at any time |
| Understanding how our website is used so we can improve it | Our legitimate interests; see section 8 on cookies |
4. Who we share it with
We share your information only with people and organisations who need it to provide your journey or to run the business, and only what they need:
- Your driver, and where relevant the licensed partner operator supplying the driver: the lead passenger's name, phone number, pick-up and drop-off details, flight or ship details, passenger and luggage numbers, and any notes needed for the journey. Drivers do not receive your email address or payment details.
- Payment providers: Stripe and PayPal, who process card and PayPal payments under their own privacy policies.
- Service providers we rely on: our web hosting and email providers, and WhatsApp (operated by Meta) if you choose to message us there.
- Professional advisers: accountants, insurers and legal advisers, where a claim or a legal obligation requires it.
- Regulators and authorities: Transport for London or another licensing authority, the police or a court, where we are legally required to or where it is necessary to investigate an incident.
We do not sell your information, and we never share it with anyone for their own marketing.
5. Where your data goes
Our own systems are hosted in the United Kingdom and the European Economic Area. Some providers we use, such as Stripe, PayPal and Meta, process data in the United States and elsewhere. Where information leaves the UK we rely on the safeguards recognised under UK data protection law — the UK's adequacy regulations, the International Data Transfer Agreement or the UK addendum to the EU standard contractual clauses — so your information stays protected to a UK standard.
6. How long we keep it
| Information | How long | Why |
|---|---|---|
| Booking records (name, journey, driver, vehicle) | At least 12 months from the journey | Private hire licensing rules require operators to keep booking records for 12 months |
| Payment and invoice records | 6 years from the end of the financial year | UK tax and accounting law |
| Enquiries that don't become bookings | 12 months | So we can pick up the conversation if you come back |
| Complaints and incident records | 6 years | The period in which a legal claim could be brought |
| Accessibility or health information | Deleted after the journey unless you ask us to keep it for future bookings | We keep it no longer than we need it |
| Marketing consent | Until you withdraw it | So we can prove you consented, and stop when you ask |
When we no longer need information, we delete it or anonymise it so it can no longer identify you.
7. How we keep it secure
Our website and booking system are served over an encrypted connection (HTTPS). Booking records are stored on access-controlled systems that only our team can reach. Card details never touch our servers. Drivers are given only the information needed for the journey, and only when the journey is assigned. Access to booking records is limited to the people who need it to provide the service, and we review that access regularly. No system is perfectly secure, but if we ever discover a breach affecting your information we will tell you and the ICO as the law requires.
8. Cookies
Our booking pages set a session cookie (named PHPSESSID) that keeps your booking together while you complete it. It is essential to the service, contains no personal information, and expires when you close your browser.
We may use privacy-respecting analytics to count visits and see which pages are read; these do not identify you personally. We do not use advertising cookies, and we do not track you across other websites. You can block or delete cookies in your browser settings; blocking the session cookie will stop the booking form from working.
9. Your rights
Under UK data protection law you have the right to:
- Access the personal information we hold about you and receive a copy;
- Correct anything that is inaccurate or incomplete;
- Erase your information, where we no longer have a legal reason to keep it (we can't delete booking or financial records before the retention periods above);
- Restrict how we use it while a query is resolved;
- Object to processing based on our legitimate interests, and to any direct marketing;
- Port the information you gave us to another provider in a machine-readable format;
- Withdraw consent at any time where consent is the basis we rely on.
To use any of these rights, email support@getlondontransfer.co.uk. We will respond within one month, and we don't charge unless a request is clearly unfounded or excessive. We may ask you to confirm your identity before releasing information.
10. Marketing
We only send marketing emails or messages if you have asked for them. Every one includes an unsubscribe link, and you can also stop them by emailing us. A review invitation after your journey and messages about a booking you have made are service messages, not marketing.
11. Children
Our services are booked by adults. We don't knowingly collect information from anyone under 18 except as passenger details provided by the adult making the booking (for example a child's age so we can fit the right seat).
12. Other websites
Our site links to other websites — Trustpilot, Google, Stripe, PayPal, WhatsApp, Transport for London. Their privacy practices are their own, and this policy doesn't cover them.
13. Changes to this policy
We will update this policy if what we do with your information changes. The date at the top tells you when it was last revised, and we will draw significant changes to your attention on the website.
14. How to complain
If you are unhappy with how we have handled your information, please tell us first at support@getlondontransfer.co.uk so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
Questions about your data?
Email us with "Privacy" in the subject line and a member of the team will reply within one month — usually much sooner.