Privacy Policy

We are committed to protecting the privacy of our customers and ensuring that personal data is handled responsibly, securely, and transparently. This Privacy Policy explains how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are
The data controller is Airport Transfer Cars Ltd, trading as 247 Airport Transfer Company No: 07871727 , ICO Registration No: Z3112701

What Information We Collect
We may collect and process the following information about you when you make a booking or use our services:

• Name, address, and contact details (telephone number, email).
• Journey details (pick-up and drop-off locations, times, flight/port details).
• Payment details (processed securely by our payment provider – we do not store full card details).
• Communications with us (emails, calls, complaints).

We do not collect special category (“sensitive”) personal data unless you provide it voluntarily and explicitly (e.g., accessibility requirements).

How We Use Your Information
We use your personal data to:

– Process and manage your booking.
– Provide transport and related services.
– Manage payments, invoices, and accounting records.
– Handle enquiries, feedback, and complaints.
– Improve the safety and quality of our services.
– Send marketing communications where you have given your consent (you may withdraw consent at any time).

Lawful Basis for Processing
The main lawful basis we rely on is:

– Performance of a contract (Article 6(1)(b) UK GDPR): to provide you with the service you have booked.
Other lawful bases include:
– Legal obligation (Article 6(1)(c)): for tax, accounting, and regulatory
purposes.
– Consent (Article 6(1)(a)): for marketing communications.

International Data Transfers

Some of our administrative staff, including those who provide call handling and booking support, are located outside the UK. This means that when you contact us by phone or email, your personal data (such as your name, journey details, and call recordings where applicable) may be accessed from outside the UK.

We ensure that equivalent safeguards are in place through the UK International Data Transfer Agreement (IDTA) and Standard Contractual Clauses (SCCs), so that your data remains fully protected in line with UK GDPR. All bookings and journey confirmations are managed and controlled by our licensed London operating centre.
Our booking and dispatch software provider operates servers within the European Economic Area under GDPR-compliant contracts.

How We Store and Protect Your Data

We take appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security reviews. We do not store full payment card details. We keep your data only as long as necessary for the purpose it was collected – usually up to 6 years for bookings and invoices (in line with UK tax requirements).

Sharing Your Information
We will only share your information with:

• Our drivers and subcontractors to complete your journey.
• Payment providers, banks, and financial institutions (for payments and fraud
  prevention).
• Regulators, law enforcement, or government bodies, where legally required.
  We do not sell your personal data to third parties.

Your Rights
You have the right to:

• Access your personal data.
• Request correction of inaccurate data.
• Request deletion where it is no longer needed.
• Restrict or object to processing in certain circumstances.
• Withdraw consent (where processing is based on consent).
• Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

How to Contact Us

If you have any questions about this Privacy Policy or how we process your data, please contact us:
Airport Transfer Cars Ltd
Unit 32, Lumina Way, Enfield, EN1 1FS
Email: [email protected]
Phone: 02088860026