Company: Great Transfers Ltd
Registered office: REGUS, 450 Bath Road, Longford, Heathrow, UB7 0EB
Contact (data protection & privacy): info@greattransfers.uk

This Privacy Policy explains how Great Transfers Ltd (“we”, “us”, “our”) collects, uses, shares and protects personal information when you use our website, make bookings, use our app or otherwise interact with our services in the UK. It also explains your rights and how to exercise them.

1. Who is the data controller?

Great Transfers Ltd is the data controller for the personal data described in this policy. If you need to contact us about privacy matters (access, correction, deletion, complaints), use the contact details above.

2. Information we collect

We collect information you give to us and information we obtain automatically when you use our site, apps or service. We typically collect the following categories of information:

• Identity & contact: name, email, phone number, billing address, pickup/drop-off addresses.
• Booking & trip details: pickup/drop-off locations and times, vehicle type, number of passengers, fare and journey details.
• Payment & billing: payment method details processed by our payment provider (we do not store full card numbers on our systems if using a third-party payment processor).
• Communications: messages, emails, and call recordings (where recorded for quality, training or safety), chat transcripts.
• Device & usage data: IP address, device type, browser, pages visited, cookies and analytics data.
• Location & GPS: where you share live location or we collect journey GPS data to provide the service.
• Security & verification: identity checks, fraud prevention information, and any documents you provide (e.g., for dispute resolution).

3. How we use your personal data (and the lawful basis)

We process personal data only where we have a lawful basis to do so. The main purposes and lawful bases include:

• To provide bookings and deliver transport services — necessary to perform a contract with you (booking, dispatching drivers, route planning).
• To communicate with you about bookings, receipts, changes or customer service — necessary for contract performance and our legitimate interests (keeping you informed).
• Payment processing and fraud prevention — necessary to fulfil the contract and comply with legal obligations (anti-fraud, anti-money laundering).
• To comply with legal and regulatory obligations, for example when required by licensing authorities or law enforcement.
• To improve our services, analytics and security — legitimate interests (service improvement, preventing fraud, securing systems).
• For marketing (email/SMS offers), where you have given consent or where lawful grounds apply; you can opt out at any time.

4. Cookies and similar technologies

We use cookies and similar technologies to run the website, remember your preferences, provide analytics and (with your consent) personalise marketing. For non-essential cookies we will ask for your consent and provide a cookie control tool.

5. Sharing your information

We may share personal data with:

• Drivers and dispatch systems, so they can collect and deliver you.
• Payment processors and banks, to take payment and prevent fraud.
• Service providers such as mapping/GPS providers, SMS/email gateways, customer support platforms and analytics providers.
• Regulators or law enforcement, where required by law.
• Affiliates or acquirers if the business is sold or reorganised. Any buyers will be bound by confidentiality and data protection obligations.

Where transfers occur outside the UK/EEA we will put in place appropriate safeguards (for example, standard contractual clauses) as required by law.

6. How long we keep personal data

We retain personal data only as long as necessary for the purposes set out above, to comply with legal obligations and to resolve disputes. Business and accounting records are typically retained for statutory periods — normally 6 years from the end of the relevant financial year (or longer if required).

7. Security

We implement appropriate technical and organisational measures to protect personal data. Access to data is restricted on a need-to-know basis. While we take reasonable measures, no system can be guaranteed 100% secure. If we become aware of a personal data breach, we will follow our incident response plan and notify the Information Commissioner’s Office where required, normally within 72 hours.

8. Your rights

Under UK data protection law you have rights in relation to your personal data, including:

• The right to be informed about how we use your data.
• The right of access to the personal data we hold about you.
• The right to rectification of inaccurate data.
• The right to erasure (in certain circumstances).
• The right to restrict processing and to object to processing (including direct marketing).
• The right to data portability, where applicable.
• Rights relating to automated decision-making and profiling.

To exercise these rights contact info@greattransfers.uk. You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with our response.

9. Children

Our services are not intended for children under 18. We do not knowingly collect personal data from children. If you are under 18, please do not use our services without parental/guardian consent.

10. Third-party websites and links

Our website may contain links to third-party websites. This policy does not apply to third-party sites — check the privacy policies of any site you visit.

11. Automated decision-making and profiling

We may use automated systems for operational tasks (for example fraud checks). If automated decision-making has a significant effect on you, we will explain this and provide ways to challenge or request human intervention.

12. Changes to this policy

We may update this policy from time to time. When we make significant changes we will update the “Last updated” date and, where appropriate, notify users.

13. How to contact us

For privacy enquiries, to exercise your rights, or to request copies of information we hold:
Email: info@greattransfers.uk
Post: Great Transfers Ltd, REGUS, 450 Bath Road, Longford, Heathrow, UB7 0EB

If you remain dissatisfied after contacting us you can complain to the Information Commissioner’s Office (ICO).