Privacy Policy

THE LONDON WAY GROUP LTD is a company registered in England and Wales, company number 17208989, with its registered office at 9 Alwyn Court, 6 Garnet Place, West Drayton, UB7 7GG. Our operating centre, and the address to write to us at, is Room G.20, 450 Bath Road, Longford, Heathrow, UB7 0EB, United Kingdom.

That is where bookings are administered rather than a place customers visit. We are a service-area business and travel to you.

You can reach us about anything in this policy by email at info@thelondonwaytransfer.com, or by telephone on +44 20 4534 7313.

We are registered with the Information Commissioner's Office as a data controller under registration number ZC185380.

When you use the quote form on this website, you give us details about the journey you want:

• Pickup location, and any additional stop you add
• Destination
• Date and time of travel, and the return date and time if you are booking a return
• Number of passengers and pieces of luggage
• Flight number, if you choose to give one
• Preferred vehicle, if you choose one
• Anything you write in the special requirements field

Pickup and destination addresses are personal information, and combined with a date they can reveal when a property will be empty. We treat them accordingly.

If you go on to confirm a booking, we also ask for the details we need in order to arrange it and to reach you on the day:

• Your name
• Your email address
• A telephone number your driver can reach you on

If you contact us by WhatsApp, email or telephone, we receive whatever you choose to tell us — typically your name, your contact details and the details of your journey.

We never see your card. Where payment is taken online it is taken on Stripe's own secure page, and your card number, expiry date and security code are entered there and go to Stripe — not to this website and not to us. Special requirements are a free-text field: please tell us what we need in order to carry you safely, but do not send us medical information or other sensitive details you would rather we did not hold.

We use your information to quote for a journey, to arrange and carry out that journey, to take payment for it, to communicate with you about it, and to keep the records private hire operators are required to keep.

“Performance of a contract”

Quoting for, arranging and carrying out your journey, taking payment for it, and dealing with you about it before and afterwards.

“Legal obligation”

Records required of private hire operators under their operator licence, and records required for tax and accounting.

“Legitimate interests”

Keeping our records accurate, dealing with complaints and disputes, preventing fraud, and keeping this website secure and working. We consider these interests are not overridden by your rights.

“Consent”

Anything you have separately agreed to, such as optional analytics cookies. You can withdraw consent at any time.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

Booking on this website happens in two steps, and they are different in a way worth stating plainly.

“Step one — your journey”

The journey form sends nothing to us on its own. What you type stays in your browser and is placed into the web address of the quote page, so the page can show your journey back to you. We do not receive it and we do not store it at this stage. Closing the tab discards it.

“Step two — your details”

When you fill in your name, email and telephone number and press the button to confirm, your details and your journey are sent to us. This is the point at which we receive and record them. Nothing is sent before you press it.

You can also stop after step one and simply message or telephone us instead, in which case we receive only what you choose to tell us.

Because the journey details appear in the web address of the quote page, that address will be saved in your own browser history, and anyone you forward the link to will see those details. Your name, email address and telephone number are deliberately kept out of the web address for that reason. Take the same care with the link that you would with any message containing your address.

We share your information only where it is needed to carry out your journey or to run the business:

“The driver carrying you”

The pickup and destination, the time, your name and a contact number, and anything relevant you have told us about the journey. A driver receives what they need to collect you and nothing more.

“WhatsApp (Meta Platforms)”

If you contact us using the WhatsApp buttons on this site, your message — including any journey details filled in for you — is sent through WhatsApp and handled under Meta's own privacy terms, not ours. Meta processes data outside the UK. If you would rather not use WhatsApp, email or telephone us instead.

“Supabase (our booking records)”

Confirmed bookings are stored in a database run for us by Supabase, hosted in the United Kingdom or the European Union. Supabase holds the records on our instructions and does not use them for anything of its own. This is where your journey, your name and your contact details live once you have booked.

“Stripe (payments)”

Where you pay online, the payment is taken by Stripe on its own secure page. You enter your card details there, not here: we never see or hold your card number, expiry date or security code. Stripe tells us only your booking reference, the amount and whether the payment succeeded. Stripe acts as a data controller in its own right for the payment itself and handles it under its own privacy policy.

“Our email provider”

Email you send us, and the booking confirmations we send you, are handled by our email provider in the ordinary course of delivering and storing those messages. We use email to confirm and manage your journey. We do not send marketing email.

“Our website host”

This website is served by a hosting provider that processes technical information such as your IP address in order to deliver pages and keep the site secure.

“Professional advisers and authorities”

Our accountants, insurers or legal advisers where necessary, and Transport for London, the police or another authority where we are required by law to provide information.

Where a provider is outside the UK, transfers are made under the safeguards permitted by UK data protection law, such as an adequacy decision or standard contractual clauses.

This website does not currently set analytics or advertising cookies. Analytics is built in but switched off, and no measurement identifier is configured, so no analytics script is loaded and no analytics cookie is created.

If we switch analytics on, it will start in a denied state and will only set cookies after you have agreed. We will ask you at that point, and will update this policy and our cookie policy first.

Cookies that are strictly necessary for the site to function may be set without consent, as the law permits.

We keep personal information only as long as we need it for the purpose it was collected, and for as long as the law requires. Our periods are:

“Booking and journey records”

12 months from the date the booking was accepted. This is the period Transport for London requires private hire operators to keep booking records for.

“Complaints”

12 months from the date the complaint was recorded, again as required under private hire operator licensing.

“Lost property records”

12 months from the date the item was recorded.

“Enquiries that do not become bookings”

3 months, then deleted. There is no legal requirement to keep these, so we hold them only long enough to answer you and to follow up if you come back to us.

“Financial records”

6 years, as HM Revenue & Customs requires for tax and accounting.

When information is no longer needed, we delete it or make it anonymous.

Under UK data protection law you have the right to:

• Ask what personal information we hold about you, and receive a copy
• Have inaccurate information corrected
• Ask us to delete information where there is no good reason for us to keep it
• Ask us to restrict how we use your information while a concern is resolved
• Object to processing we carry out on the basis of legitimate interests
• Receive information you gave us in a portable format, or have it sent to another provider
• Withdraw consent at any time, where we relied on consent

To exercise any of these rights, email us at info@thelondonwaytransfer.com. We will respond within one month. There is no charge, and we may ask you to confirm your identity before we act on a request.

This website is served over an encrypted connection. We limit access to personal information to those who need it to do their job, and we require our providers to keep it secure.

No system can be guaranteed completely secure. If a breach occurs that is likely to put your rights at risk, we will tell you and the Information Commissioner's Office as the law requires.

This website is not directed at children, and we do not knowingly collect information from a child. Children travel with us as passengers, and where a booking includes a child we hold only what is needed to carry them safely, such as the number of passengers and any child seat requested.

If you are unhappy with how we have handled your information, please tell us first at info@thelondonwaytransfer.com so that we can try to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.

We update this policy when what we do with personal information changes. The date at the top shows when this version was published, and we recommend checking it when you book.