Legal
Privacy notice
What AB Airport Transfers does with your personal data, why we are allowed to do it, how long we hold it, and what you can ask us to do about it. Written to meet the UK General Data Protection Regulation and the Data Protection Act 2018.
Last updated 12 August 2026
1. Who is responsible for your data
AB Airport Transfers is the data controller for the information described here. You can reach us at:
Gurney Benham CloseColchester
Essex CO2 9AG
info@abairporttransfers.co.uk
01206 701701
The full registered name of the controller and its ICO registration reference will be published here once confirmed.
2. What we collect, and what for
Almost all of it comes from you, when you book or when you contact us. We do not buy personal data from anyone.
- Your name
- So the driver knows who to collect and the booking can be found when you call about it.
- Your phone number and email address
- To confirm the booking, to reach you on the day, and to reply to you.
- Pickup and drop-off addresses
- To carry out the journey and to price it.
- The date and time of the journey, and the times it actually ran
- To dispatch a vehicle, and because the operator licence requires a record of every booking.
- Number of passengers and amount of luggage
- To send a vehicle that fits.
- Your flight number, if you give us one
- To match the pickup to the flight you are actually on.
- Anything you write in a notes or message box
- To arrange the journey the way you asked. Please only put in what is relevant.
- A record of the booking, and of any complaint about it
- To answer questions later, to handle complaints, and to satisfy the licensing authority.
3. Our lawful bases
- Performance of a contract, Article 6(1)(b). Everything needed to quote for, arrange and carry out your journey.
- Legal obligation, Article 6(1)(c). Keeping a record of every booking, which a licensed private hire operator must do and must produce to the council on request, and keeping financial records for tax.
- Legitimate interests, Article 6(1)(f). Passenger and driver safety, returning lost property, investigating complaints, preventing fraud and abuse of the booking system, and keeping the site secure. We have weighed these against your interests and think they are proportionate; if you disagree, you can object.
- Consent, Article 6(1)(a). Only where we ask for it. We do not currently send marketing, and we will not start without asking you first.
4. Accessibility and health information
If you tell us that a passenger uses a wheelchair, needs help to the door, travels with an assistance dog, or has any other requirement connected to health or disability, that is special category data under Article 9 of the UK GDPR. It gets stronger protection than the rest of your booking, and we treat it that way even when it arrives in a free-text note.
- We rely on your explicit consent, Article 9(2)(a). Telling us is always your choice — but telling us is how we send the right vehicle and the right driver.
- Access is restricted to the people who need it to arrange your journey. The rest of the office does not see it.
- Access to it is logged, so it can be checked who looked at it and when.
- We pass the driver only what they need to collect you properly, and no more.
- You can withdraw your consent at any time by calling the office. We will remove the note, though that may mean we can no longer plan around the requirement.
5. Who else sees it
- The driver on your journey, who gets your name, the pickup and destination, and a contact number.
- Another licensed operator, if we ask one to cover your journey. They receive the same minimum.
- Our payment provider, which processes card payments. Card details are handled by the provider.
- Suppliers who run our systems on our behalf — website hosting, the booking database, email delivery — under contracts that only let them act on our instructions.
- Colchester City Council licensing officers and the police, where the law requires us to produce booking records or where there is a safety or criminal matter.
We do not sell your data, and we do not share it for anyone else’s marketing.
6. How long we keep it
Booking records: at least 12 months. This is not our preference, it is a condition of holding a private hire operator licence. An operator has to record every booking it accepts and be able to produce those records to authorised council officers. Because the basis is a legal obligation, we cannot delete a booking record on request while that obligation lasts.
Financial records: six years, plus the current year, as tax law requires.
Complaints: kept for as long as needed to resolve the complaint and to show the licensing authority how it was handled.
Enquiries that never became a journey: deleted once the enquiry is closed and no longer needed.
The precise retention period set by our licence conditions is being confirmed with the council and will be stated here exactly once it is.
7. Keeping it safe
Access to booking data is limited to staff who need it for their work. Systems are protected by individual accounts rather than shared logins, data is encrypted in transit, and access to special category notes is restricted and logged as described above. We do not store your full card number.
We intend to keep all of this data within the UK or the European Economic Area. If a supplier we use stores it elsewhere, we will name that supplier here and set out the safeguards that apply.
8. Your rights
You can:
- Ask what we hold about you, and get a copy of it.
- Have anything inaccurate corrected.
- Ask us to erase data, where we are not required to keep it.
- Ask us to restrict what we do with it while a question about it is resolved.
- Object to us using it on the basis of our legitimate interests.
- Receive the data you gave us in a portable form.
- Withdraw consent at any time, where consent is what we relied on.
To use any of them, call 01206 701701 or email info@abairporttransfers.co.uk. It is free. We will answer within one month, which is the period the law allows us; if a request is complex we may extend that and will tell you why. We may need to check who you are before we release anything.
Where we are legally required to keep a booking record, we will explain that rather than quietly ignoring an erasure request.
9. Automated decisions
We do not make decisions about you by automated means alone, and we do not profile you. Fares are looked up from a published price list, not calculated from anything about you.
10. Complaining
Come to us first — see our complaints procedure. If you are not satisfied, you can complain to the Information Commissioner’s Office, which is the UK supervisory authority for data protection.
ico.org.uk/make-a-complaint · helpline 0303 123 1113
Complaining to the ICO does not affect any other legal right you have.
11. Cookies
This site sets only what is strictly necessary to work. There is no analytics and no advertising. The detail is on the cookies page.
Still being confirmed
A privacy notice that describes systems the business does not actually use is worse than no notice at all. These points are being checked and will be filled in here.
- The registered trading entity that acts as data controller, and its ICO registration reference.
- Which payment provider is used, and exactly what it returns to us after a payment.
- Whether calls to the office are recorded, and if so for how long recordings are kept.
- Whether vehicles carry dashcams or in-car cameras, and who can view that footage.
- The exact retention period set by the Colchester City Council operator licence conditions.
- The named person responsible for data protection questions.
Want to ask about your data?
Call the office, or send a message and say what you would like to know.