Privacy policy

1. Who we are

Devon Airport Transfers is based in Devon, UK. We are the data controller for the personal information we collect through this website.

Contact: bookings@devonairporttransfers.co.uk

2. What data we collect

We collect the following personal data when you make or enquire about a booking:

• Full name
• Email address
• Phone number
• Pickup and drop-off addresses (including postcodes)
• Flight number and arrival time (for airport arrivals)
• Journey date and time
• Passenger and luggage counts
• Any special requests or notes you provide
• Payment information — processed securely by Stripe. We do not store full card numbers on our systems.

We may also collect limited technical data (IP address, browser type, pages visited) via server logs and analytics tools to help us improve the website.

3. How we use your data

We use your personal data to:

• Process and confirm your booking
• Send you booking confirmation and journey reminders by email
• Notify our driver of your journey details
• Contact you if there is a problem with your booking
• Process refunds where applicable
• Comply with our legal obligations

We will only send you marketing emails if you have explicitly opted in. You can unsubscribe at any time using the link in any email we send.

4. Legal basis for processing

Under UK GDPR, we process your personal data on the following bases:

• Contract performance — processing your booking and providing your transfer.
• Legitimate interests — improving our service, fraud prevention, and security.
• Legal obligation — retaining financial records as required by law.
• Consent — optional marketing emails and non-essential cookies (you may withdraw consent at any time).

5. Who we share data with

We share your data only where necessary:

• Drivers — your name, phone number, pickup address, destination, and any relevant journey notes.
• Stripe — payment processing. Stripe's privacy policy applies to data they hold: stripe.com/gb/privacy.
• Resend — transactional email delivery.
• Supabase — secure cloud database hosting.

We do not sell your personal data to third parties.

6. Cookies

We use two types of cookies:

• Essential cookies — necessary for the website to function (e.g. session state during booking). These are set regardless of your cookie preference.
• Analytics cookies — help us understand how visitors use the site so we can improve it. These are only set if you click “Accept all” on the cookie banner.

We also store a small amount of data in your browser's local storage to pre-fill your details on future visits (name, email, phone, postcode). This data stays on your device and is never transmitted to any third party.

You can change your cookie preference at any time by clearing your browser storage or refreshing the page to see the cookie banner again.

7. Data retention

We retain booking records for 7 years in line with HMRC requirements for financial records. After this period, personal data is deleted or anonymised. Data relating to enquiries that did not result in a booking is deleted after 12 months.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (subject to legal retention requirements)
• Restrict or object to how we process your data
• Data portability — receive your data in a machine-readable format
• Withdraw consent for optional processing (e.g. marketing emails) at any time

To exercise any of these rights, email us at bookings@devonairporttransfers.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Data security

We take reasonable steps to protect your data including encrypted connections (HTTPS), access controls on our database, and using reputable third-party processors (Stripe, Supabase). No method of transmission over the internet is 100% secure, but we apply industry-standard protections.

10. Changes to this policy

We may update this privacy policy from time to time. The current version is always posted on this page with the date it was last updated. For material changes, we will notify customers by email where we hold your address.