Draft for legal review. This page has been prepared as a working draft, intended to reflect UK GDPR practice, and has not yet been reviewed by a qualified solicitor or data protection professional. It should not be relied on as final legal advice or as a complete statement of your rights, and may be updated once that review is complete.
Last updated: 3 September 2026
1. Who we are
Eagle Airport Transfers Ltd ("Eagle", "we", "us", "our") is the data controller for the personal information described in this policy. We are a licensed private hire operator based at Unit 16 Selby Business Park, Selby YO8 8LZ, licensed by North Yorkshire Council.
You can contact us about this policy, or about your personal information, by phone or WhatsApp on 07481 849151, or by email at contact@eagleairporttransfers.com.
2. What information we collect
When you get a quote, make a booking, or contact us, we may collect:
- Contact details — your name, telephone number and email address.
- Journey details — pickup address, drop-off address, date and time, return journey details, number of passengers, and luggage requirements.
- Flight details — your flight number and airport, where you give it to us, so we can track your flight for airport pickups.
- Booking and payment records — details of journeys booked and fares agreed, and confirmation of payment (we do not store full card details ourselves — any card payment is handled by our payment provider).
- Communications — messages you send us by WhatsApp, phone, email or our website contact form, so we can respond to you and keep a record of what was agreed.
We collect this information directly from you, when you use the quote tool or contact form on our website, message or call us, or book a journey.
3. Why we use your information, and our lawful basis
Under UK GDPR, we rely on the following lawful bases:
- Performance of a contract — to accept and carry out your booking, plan your journey, monitor your flight, and communicate with you about it.
- Legitimate interests — to respond to enquiries that don't yet result in a booking, to keep records for accounting and insurance purposes, and to improve our service. We consider these interests are balanced fairly against your right to privacy.
- Legal obligation — to keep certain business and financial records as required by law (for example, for tax purposes).
We do not use your information for automated decision-making or profiling, and we do not sell your personal information to anyone.
4. How long we keep your information
We keep booking and journey records, and related correspondence, for as long as needed to fulfil the booking and to meet our legal and accounting obligations — generally up to 6 years after the end of the tax year in which a journey took place, in line with UK record-keeping requirements. Enquiries that do not lead to a booking are normally kept for a shorter period and then deleted.
5. Who we share your information with
We do not sell or rent your personal information. We share it only where necessary, with:
- Google Maps / Google Places — when you start typing a pickup address on our website, the address text you type is sent to Google's Places Autocomplete service to suggest matching addresses. See Google's Privacy Policy.
- WhatsApp (Meta) — when you book or confirm a journey with us over WhatsApp, your message and journey details are handled by WhatsApp under Meta's own privacy terms. See WhatsApp's Privacy Policy.
- Google Forms — when you submit our website contact form, a copy of the details you enter is also logged to a Google Form we use internally as a booking record and backup. See Google's Privacy Policy.
- Our drivers — who need your name, contact number, and journey and flight details to carry out your booking.
- Our accountant and any professional advisers, where needed for accounting, tax or legal purposes.
- Any authority we are legally required to share information with, such as HMRC or our licensing authority, North Yorkshire Council.
We do not transfer your personal information outside the UK ourselves; where a third-party service listed above (such as Google or WhatsApp) processes data internationally, that transfer is governed by that provider's own safeguards and privacy policy.
6. Your rights
Under UK GDPR, you have the right to:
- Ask us for a copy of the personal information we hold about you (right of access).
- Ask us to correct inaccurate or incomplete information (right to rectification).
- Ask us to delete your information, where we no longer need it or you withdraw consent (right to erasure).
- Ask us to restrict how we use your information in certain circumstances (right to restriction).
- Object to our use of your information where we rely on legitimate interests (right to object).
- Ask us to provide your information in a portable format, where technically feasible (right to data portability).
- Withdraw consent at any time, where we rely on consent (this does not affect anything already done based on consent given before it was withdrawn).
To exercise any of these rights, contact us using the details in section 1. We will respond within one month, as required by UK GDPR.
7. How to complain
If you are unhappy with how we have handled your personal information, please contact us first so we can try to put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):
Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
8. Security
We take reasonable technical and organisational steps to keep your personal information secure and to protect it against unauthorised access, loss, or misuse, including limiting who within our business can access booking records.
9. Changes to this policy
We may update this policy from time to time, for example to reflect changes in the law or in the services we use. The current version is always available on this page.
See also our Terms & Conditions.
