R&R Airport Transfer – Privacy Policy (UK GDPR Compliant)

1. Who We Are

R&R Airport Transfer is a private hire operator providing pre-booked transport services in London.

For the purposes of data protection law, R&R Airport Transfer is the “data controller” of your personal data under the UK GDPR and the Data Protection Act 2018.

2. What Data We Collect

We may collect and process the following personal data:

  • Identity Data: name

  • Contact Data: phone number, email address

  • Booking Data: pickup/drop-off locations, journey details, flight number

  • Payment Data: payment method (we do NOT store full card details)

  • Communication Data: messages, enquiries, complaints

We only collect data necessary to provide our services.

3. How We Use Your Data

We use your personal data to:

  • Process and manage bookings

  • Allocate drivers and vehicles

  • Monitor flights for airport pickups

  • Communicate with you about your journey

  • Handle payments and refunds

  • Respond to enquiries or complaints

  • Comply with legal and licensing obligations (e.g. TfL record-keeping)

4. Legal Basis for Processing

We process your data under the following lawful bases:

  • Contractual necessity – to fulfil your booking

  • Legal obligation – to comply with licensing and regulatory requirements

  • Legitimate interests – to operate and improve our services

5. Sharing Your Data

We may share your data with:

  • Licensed drivers working under our operator licence

  • Payment providers

  • IT and booking system providers

  • Regulatory authorities (e.g. TfL) if required

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only as long as necessary:

  • Booking records: typically up to 12 months (or longer if legally required)

  • Financial records: up to 6 years (for HMRC compliance)

7. Data Security

We take appropriate technical and organisational measures to protect your data, including:

  • Secure booking systems

  • Restricted access to personal data

  • Encryption where applicable

8. Your Rights (Under UK GDPR)

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Request data portability

To exercise your rights, contact us using the details below.

You also have the right to lodge a complaint with the Information Commissioner's Office.

9. Cookies & Website Data (if applicable)

If you use our website, we may collect limited data via cookies to improve user experience.
You can control cookie settings through your browser.

10. Third-Party Links

Our website or communications may include links to third-party services. We are not responsible for their privacy practices.

11. Contact Us

For any data protection queries or requests:

R&R Airport Transfer
Email: bookings@rrairporttransfers.co.uk

12. Changes to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be available upon request or on our website.