Privacy Policy

Express Airport Cars is the data controller responsible for your personal data. We are a TfL Licensed Private Hire Operator (PCO Licence No. 008740101) based in London, United Kingdom.

If you have any questions about this privacy policy or our data practices, please contact us:

• Email: bookings@expressairportcars.co.uk
• Phone: 0203 865 1942
• Website: www.gotoairport.taxi

We collect and process the following categories of personal data:

Customer Data

• Full name
• Email address
• Phone number
• Pickup and drop-off addresses
• Flight details (number, airline, terminal)
• Booking dates and times
• Number of passengers and luggage requirements
• Special requests (child seats, accessibility needs)
• Payment information (processed securely by Stripe — we do not store card numbers)

Driver Data

• Full name and contact details
• TfL Private Hire driver licence details
• DBS (Disclosure and Barring Service) certificate
• Vehicle registration and insurance documents
• PCO vehicle licence
• Right to work documentation

Technical Data

• IP address
• Browser type and version
• Device information
• Pages visited and interaction data
• Cookies and similar technologies (see our Cookie Policy)

We process your personal data under the following lawful bases as defined by UK GDPR:

• Contract performance (Article 6(1)(b)): To fulfil your booking, process payments, and provide the transport service you have requested.
• Legal obligation (Article 6(1)(c)): To comply with TfL licensing requirements, tax regulations, and other applicable UK laws.
• Legitimate interests (Article 6(1)(f)): To improve our services, prevent fraud, and ensure the safety and security of our passengers and drivers.
• Consent (Article 6(1)(a)): For marketing communications and non-essential cookies. You may withdraw consent at any time.

We use your personal data to:

• Process and fulfil your booking
• Calculate pricing and route information
• Match you with an available driver
• Send booking confirmations, reminders, and receipts
• Monitor flight status for airport pickups
• Process payments and refunds via Stripe
• Communicate with you about your journey
• Respond to complaints and customer service enquiries
• Comply with TfL regulatory requirements
• Improve our website and services through analytics
• Detect and prevent fraud

We share your personal data only where necessary with the following third parties:

• Drivers: Your name, phone number, pickup/drop-off addresses, and flight details are shared with your assigned driver to complete the journey.
• Stripe: Payment data is processed by Stripe Inc., which acts as a data processor. Stripe is PCI DSS Level 1 certified. We do not store your card details on our servers.
• Google Maps Platform: Pickup and drop-off addresses are sent to Google for route calculation and distance pricing. Google processes this data under their own privacy policy.
• Email service provider (Postmark): Your email address is shared for sending transactional emails (confirmations, reminders, receipts).
• Transport for London (TfL): We may be required to share booking and driver records with TfL as part of our operator licence obligations.
• Law enforcement: We may disclose data if required by law or in response to a valid legal request.

We do not sell your personal data to any third party. We do not share your data for third-party marketing purposes.

We retain your personal data only for as long as necessary:

• Booking records: 7 years from the date of the journey, as required by HMRC for tax and accounting purposes.
• Driver documents:Retained for the duration of the driver's engagement with us, plus 1 year after the relationship ends, unless a longer retention period is required by law.
• Payment records: Retained by Stripe in accordance with their data retention policies and PCI DSS requirements.
• Marketing consent: Until you withdraw consent or unsubscribe.
• Website analytics: Aggregated and anonymised data may be retained indefinitely.

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
• Right to data portability: Request your data in a structured, commonly used, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to restrict processing: Request the restriction of processing in certain circumstances.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at bookings@expressairportcars.co.uk. We will respond to your request within one month.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure payment processing via PCI DSS Level 1 certified Stripe
• Access controls and authentication for all systems
• Regular security reviews and monitoring
• Secure storage of driver documents using encrypted cloud storage

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at bookings@expressairportcars.co.uk.