BOOK NOW BY CALLING 01708 722222

Privacy Policy

1) Who we are

Data Controller: Mayflower Travel
Phone: 01708 722222
Email: info@mayflowertravel.uk

 

If you have any questions about this policy or how we use your data, contact us using the details above.

 

2) What personal data we collect

We may collect and process the following categories of personal data:

 

A. Booking and journey information

  • Name, phone number and (where provided) email address

  • Pick-up and destination address

  • Booking date/time, passenger count, luggage notes and journey notes

  • Any messages you send us about the booking

  •  

B. Payment information

  • Payment status and references

  • If you pay by card link, card payments are handled by a third-party payment provider. We do not store full card details on our website or systems (the provider processes your card details securely).

  •  

C. Communications

  • Calls, emails, texts/WhatsApp or contact form messages you send to us

  • Any operational notes needed to manage the booking

  •  

D. Website usage data (cookies)

  • Basic technical information (e.g., IP address, device/browser information)

  • Analytics information (if enabled) to help us understand how our website is used
    (See “Cookies” below.)

  •  

E. Special category data (only if you choose to provide it)
Sometimes customers provide information that could be classed as “special category” data (for example, health or accessibility needs). We only use this information to provide the service you request and we minimise what we collect.

 

3) How we use your data

We use your personal data to:

  • Take and manage bookings (including changes and cancellations)

  • Dispatch vehicles and provide the journey you requested

  • Contact you about pick-up times, delays, lost property, or booking queries

  • Take payment (or manage account billing where agreed)

  • Maintain safety, service quality, and operational records

  • Comply with legal obligations (for example, licensing, insurance, tax/accounting, and responding to lawful requests)

  •  

4) Our lawful bases for processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract: to take bookings and provide the transport service you requested

  • Legitimate interests: to run and improve our business (e.g., service administration, preventing misuse, dealing with complaints)

  • Legal obligation: where we must comply with laws and regulatory requirements

  • Consent: where you actively ask us to use certain information (e.g., specific health/accessibility notes). You can withdraw consent at any time.

  •  

5) Autocab (booking and dispatch system)

We use Autocab (GPC Computer Software Limited) as our booking management and dispatch system. This means booking details you provide may be processed within Autocab so we can allocate a driver, manage the booking, and operate the service efficiently.

Autocab acts as a service provider / data processor for us. We only permit processors to handle personal data for defined purposes and in line with our instructions, and we expect appropriate security measures to be in place.

 

6) Who we share your data with

We may share personal data with:

  • Drivers assigned to your booking (typically your name, pick-up, destination, and booking notes required to complete the job)

  • Autocab (as our booking/dispatch platform provider)

  • Payment providers (if you pay by card link)

  • Professional advisers (e.g., accountants, insurers, solicitors) where necessary

  • Regulators / public authorities / law enforcement where we are legally required to do so, or where it is necessary to protect rights, safety, or prevent fraud

We do not sell your personal data.

 

7) International transfers

Some service providers (including technology providers) may process or store personal data outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are used (for example, transfers to countries deemed “adequate” or use of standard contractual clauses).

 

8) How long we keep your data

We keep personal data only for as long as necessary for the purposes set out above. Typical retention periods may include:

  • Booking and account records: kept for operational and accounting purposes, usually up to 6 years (aligned to common UK record-keeping needs)

  • Enquiries and messages: kept as long as needed to resolve the query or manage service quality

Retention may be longer if required to deal with complaints, disputes, or legal/regulatory matters.

 

9) Keeping your data secure

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure. This includes limiting access to those who need it to perform their duties and using reputable service providers for booking and payment processing.

 

10) Your data protection rights

You have rights under UK data protection law, including:

  • Access to your personal data

  • Correction of inaccurate data

  • Erasure (in certain circumstances)

  • Restriction of processing (in certain circumstances)

  • Data portability (in certain circumstances)

  • Objection to processing (in certain circumstances)

  • Withdraw consent (where consent is the basis)

To exercise your rights, contact us using the details in section 1.

You also have the right to complain to the Information Commissioner’s Office (ICO). The ICO provides guidance on what a privacy notice should include and how to raise concerns.

 

11) Cookies

Our website may use cookies and similar technologies to:

  • Make the website work properly

  • Remember preferences (where enabled)

  • Measure website traffic and performance (where analytics are enabled)

You can control cookies through your browser settings. If you run analytics or marketing cookies, you should also publish a separate Cookie Policy and implement a compliant cookie banner.

 

12) Third-party links

Our website may include links to third-party websites (for example, booking or payment pages). We are not responsible for the privacy practices of those sites. Please review their privacy policies when you leave our website.

 

13) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with an updated “Last updated” date.