BOOK NOW BY CALLING 01708 722222
Data Controller: Mayflower Travel
Phone: 01708 722222
Email: info@mayflowertravel.uk
If you have any questions about this policy or how we use your data, contact us using the details above.
We may collect and process the following categories of personal data:
A. Booking and journey information
Name, phone number and (where provided) email address
Pick-up and destination address
Booking date/time, passenger count, luggage notes and journey notes
Any messages you send us about the booking
B. Payment information
Payment status and references
If you pay by card link, card payments are handled by a third-party payment provider. We do not store full card details on our website or systems (the provider processes your card details securely).
C. Communications
Calls, emails, texts/WhatsApp or contact form messages you send to us
Any operational notes needed to manage the booking
D. Website usage data (cookies)
Basic technical information (e.g., IP address, device/browser information)
Analytics information (if enabled) to help us understand how our website is used
(See “Cookies” below.)
E. Special category data (only if you choose to provide it)
Sometimes customers provide information that could be classed as “special category” data (for example, health or accessibility needs). We only use this information to provide the service you request and we minimise what we collect.
We use your personal data to:
Take and manage bookings (including changes and cancellations)
Dispatch vehicles and provide the journey you requested
Contact you about pick-up times, delays, lost property, or booking queries
Take payment (or manage account billing where agreed)
Maintain safety, service quality, and operational records
Comply with legal obligations (for example, licensing, insurance, tax/accounting, and responding to lawful requests)
Under UK GDPR, we rely on the following lawful bases:
Contract: to take bookings and provide the transport service you requested
Legitimate interests: to run and improve our business (e.g., service administration, preventing misuse, dealing with complaints)
Legal obligation: where we must comply with laws and regulatory requirements
Consent: where you actively ask us to use certain information (e.g., specific health/accessibility notes). You can withdraw consent at any time.
We use Autocab (GPC Computer Software Limited) as our booking management and dispatch system. This means booking details you provide may be processed within Autocab so we can allocate a driver, manage the booking, and operate the service efficiently.
Autocab acts as a service provider / data processor for us. We only permit processors to handle personal data for defined purposes and in line with our instructions, and we expect appropriate security measures to be in place.
We may share personal data with:
Drivers assigned to your booking (typically your name, pick-up, destination, and booking notes required to complete the job)
Autocab (as our booking/dispatch platform provider)
Payment providers (if you pay by card link)
Professional advisers (e.g., accountants, insurers, solicitors) where necessary
Regulators / public authorities / law enforcement where we are legally required to do so, or where it is necessary to protect rights, safety, or prevent fraud
We do not sell your personal data.
Some service providers (including technology providers) may process or store personal data outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are used (for example, transfers to countries deemed “adequate” or use of standard contractual clauses).
We keep personal data only for as long as necessary for the purposes set out above. Typical retention periods may include:
Booking and account records: kept for operational and accounting purposes, usually up to 6 years (aligned to common UK record-keeping needs)
Enquiries and messages: kept as long as needed to resolve the query or manage service quality
Retention may be longer if required to deal with complaints, disputes, or legal/regulatory matters.
We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure. This includes limiting access to those who need it to perform their duties and using reputable service providers for booking and payment processing.
You have rights under UK data protection law, including:
Access to your personal data
Correction of inaccurate data
Erasure (in certain circumstances)
Restriction of processing (in certain circumstances)
Data portability (in certain circumstances)
Objection to processing (in certain circumstances)
Withdraw consent (where consent is the basis)
To exercise your rights, contact us using the details in section 1.
You also have the right to complain to the Information Commissioner’s Office (ICO). The ICO provides guidance on what a privacy notice should include and how to raise concerns.
Our website may use cookies and similar technologies to:
Make the website work properly
Remember preferences (where enabled)
Measure website traffic and performance (where analytics are enabled)
You can control cookies through your browser settings. If you run analytics or marketing cookies, you should also publish a separate Cookie Policy and implement a compliant cookie banner.
Our website may include links to third-party websites (for example, booking or payment pages). We are not responsible for the privacy practices of those sites. Please review their privacy policies when you leave our website.
We may update this Privacy Policy from time to time. The latest version will always be published on this page with an updated “Last updated” date.