This Privacy Policy explains how Salisbury Airport Transfers collects and uses personal data.
1. Data Controller
Salisbury Airport Transfers
Salisbury, Wiltshire, United Kingdom.
For privacy enquiries, contact us via the Contact Us page on
www.salisburyairporttransfers.co.uk
2. What We Collect
• Identity and contact details (name, phone number, email).
• Booking details (pickup/drop-off locations, dates/times, flight number where provided).
• Payment confirmation details (we do not store full card details; payments are processed by our payment provider).
• Website technical data (IP address, browser type, device data) for security and analytics.
3. Why We Use Your Data
• To provide and manage bookings and customer support.
• To prevent fraud and protect the safety of customers and drivers.
• To meet legal obligations (including licensing, accounting and record keeping).
• To improve our website and services using aggregated analytics.
4. Lawful Bases
We process personal data under one or more lawful bases, including performance of a contract, legal obligation, and legitimate interests (for example fraud prevention and service improvement).
5. Sharing Your Data
• With drivers/service providers to fulfil your Booking (including subcontracted providers where used).
• With payment and IT providers who support our operations (under appropriate contractual protections).
• With authorities where required by law or for the prevention/detection of crime.
6. Data Retention
We retain booking and related records only for as long as necessary for operational, legal, licensing, and accounting purposes. Typical retention is up to 3 years for customer booking records unless a longer period is required by law or for dispute resolution.
7. Your Rights
• Access, rectification, erasure (where applicable), restriction, and data portability.
• Right to object to processing based on legitimate interests (where applicable).
• Right to complain to the UK Information Commissioner’s Office (ICO).
8. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.