Having read this policy, if you want to change the way in which we use your data or if you have a question about how your personal information is used please contact the Data Controller for customer information at Stagecoach Services Limited using the methods below:
Phone: 0161 880 5000
Postal address: One Stockport Exchange, 20 Railway Road, Stockport, SK1 3SW
Our ICO Registration Number for Stagecoach Services is: Z6391021 You can find more information on the ICO website.
We collect personal information about you in several ways:
We also collect your personal information from other organisations and sources, for example when you contact us through a social media company such as Facebook, Twitter, LinkedIn or Instagram. Before providing information to us via these channels you should check these companies’ privacy policies and settings to understand how they use your personal information.
When you fill in a form or purchase tickets we only require you to supply the information that we need to provide the service you have requested. We will normally ask you to provide us with:
We don’t collect date of birth information, unless such information is necessary for the performance of a contract. We recognise that young people use our services and are legally able to provide consent after the age of 13 years. If you are using our travel services and are aged between 13 and 16 years of age we recommend that you read our terms and conditions. When you buy a ticket or travel with us, we will let you know if you need to provide further information and which information is optional.
When you visit our website, app or register to use our on-bus WI-FI services, we may collect the following information automatically:
In our communications with you by email or other electronic means, we automatically collect data relating to:
This helps us build a better picture of whether our marketing is effective
When you complete a survey, we may collect additional personal information for customer profiling and monitoring purposes, including (but not limited to): age bands, gender, employment status, postcode and email address.
Whilst we mainly use the personal information that you provide to us, we may sometimes use other public sources of information about our customers and enquirers where you have given your permission for your data to be shared. We do this to help us understand more about our customers, to ensure that our public messages are relevant and to make sure that the marketing information we send you, with your consent, is also relevant. We take great care in sourcing this information but if you prefer us not to use your data in this way then please let us know by contacting firstname.lastname@example.org.
We employ CCTV on our buses in order to:
You have the right to make a Subject Access Request for CCTV images of yourself and to ask for a copy of them. Please direct any such request to email@example.com. To protect the rights of other individuals whose images may also be captured by the same images, we reserve the right to redact images.
We reserve the right to withhold information where permissible by the applicable data protection legislation, and we will only retain CCTV images for a reasonable period or as long as is required by law. In certain circumstances, we may need to disclose CCTV images for legal reasons. When this is done, there is a requirement for an organisation that has received the images to adhere to the relevant data protection legislation.
Under UK data protection law, we must have a valid basis for using your personal information and we may not collect store or use information other than as described in this policy. There are four ways we may have a valid basis for using your personal information:
A full description of the different types of personal information we process, the purpose of the processing and the legal basis for the processing is shown below:
Scroll table horizontally to view table content
|Our use of your data||Legal basis for processing|
|To carry out our contract with you to provide you with products and services including purchase and issue of tickets, transportation, journey planning and travel advice||Necessary for the performance of our contract with you or to take steps to enter into that contract|
|To notify you of any changes to our service||Necessary for the performance of our contract with you or to take steps to enter into that contract|
|To provide you with marketing information via email, post or other electronic means about goods and services we believe may be of interest to you||You have given us your consent or we rely on legitimate interest|
|To understand the effectiveness of the online advertising we show you and to deliver relevant advertising to you via our website||Our use of your data is necessary for our legitimate interests in ensuring that the service we provide to you is relevant|
|To make recommendations via our website or app regarding goods and services we believe may be of interest to you||Our use of your data is necessary for our legitimate interests in ensuring that the service we provide to you is administered effectively|
|To ensure that the content on our website and app is presented to you and your computer as effectively as possible so that you can find the correct tickets for your journey||Our use of your data is necessary for our legitimate interests in ensuring that the service we provide to you is administered effectively|
|To create statistical information, market research, analysis and customer group profiles to better manage and run our business||Our use of your data is necessary for our legitimate interests in ensuring that the service we provide to you is administered effectively|
|To monitor our website and app to ensure that they are functioning correctly and that you receive the correct advice and best value tickets for your journey|
|To allow you to use the interactive features of our website and app in planning your journey and purchasing tickets|
|To verify and protect your personal information when using our website or app or purchasing tickets|
|To provide data to public authorities where legally required.||We have a legal obligation to use your personal information where lawfully requested or required to do so by public authorities|
We only use your personal information for marketing where you have given us permission to do so or you have provided permission to other organisations to allow us to market to you.
Where you’ve given us permission to do so, we use some of your personal information for marketing. For example, we may use information like name, address, location and past journeys to ensure we make our marketing relevant, accurate, and measure its effectiveness.
By using the information you provide we are able to contact you with specific marketing messages about special offers and promotions, travel tips and latest news and, depending on the permission you have given us or another organisation this may be by post, email, telephone, SMS, social media or other electronic means.
If you have given us your consent to use your personal information for marketing, you have the right to withdraw your consent at any time by contacting our Data Controller by email firstname.lastname@example.org , clicking the “unsubscribe” link in our marketing emails or replying STOP to a text message. You can also log into your account on our website or app at anytime to update your marketing opt-in permissions.
Stagecoach Bus may share your information within Stagecoach Group PLC. We do not share or sell your personal information to any other company for marketing purposes.
Third-party companies will be required to use your personal information in accordance with the Data Protection legislation currently in force. We may also use information in aggregate, where personally identifiable information is removed, for marketing and strategic development to improve and support our business.
Where we use trusted suppliers to help us deliver our service to you, we allow the supplier concerned limited access to the personal data they need to provide their service. A list of just some of the service suppliers are listed below:
We also use trusted suppliers to help us with marketing:
All personal information sent to our trusted suppliers is transferred securely. In all cases we require these companies to comply strictly with our instructions and they are not allowed to use your information for their own business purposes. We also require these companies to have sufficient organisational and technical measures in place to ensure the security of your personal information.
We may use suppliers who operate outside of the country of which you are a resident, for example in the United States. These countries may not offer the same legal protection of your personal information as the UK. If we use one of these organisations, we take appropriate steps to ensure that they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to this transfer, storing or processing of your personal information at our approved locations outside the EEA. If you would like to know more about the ways in which we safeguard your personal information, please get in touch using the contact details in this policy.
Under some circumstances we may be required to disclose or share your information without your consent, for example if we are required by the police, the courts or for other legal reasons.
You provide us with details of what we ‘can do’ with your data and have the right to manage your choices as detailed in How we use your personal information for marketing.
You have the following rights:
An automated fraud assessment may take place to make a decision whether to accept or decline your purchase. You have the right to contest the decision, to express your point of view, and to require a human review of the decision. You can exercise this right by contacting us using the contact details provided.
You have the right to request a copy of the information that we hold about you, this is known as a Subject Access Request (SAR). We will provide this to you free of charge once we have confirmed your identity within 30 days of receipt of your request.
If you would like a copy of some or all of your personal information, please complete a Data Subject Access Form and send it to the Data Controller.
Please complete this Subject Access Request Form, and send via email or post to the addresses below:
Phone: 0161 880 5000
Postal Address: One Stockport Exchange, 20 Railway Road, Stockport, SK1 3SW
Unless you specify otherwise we will provide your information electronically.
If we do hold information about you we will:
We have a legal obligation to keep the personal information we collect accurate and up to date. You have the right to ask us to correct any inaccuracies in the personal information we hold about you and to restrict the use of your information until it has been corrected.
The simplest way to keep your data accurate is to log in into your Stagecoach Bus account to update your information or change marketing preferences.
We also keep your information accurate by:
We have specific rectification, restriction, objection and erasure policies in place to make sure we respond effectively to your request to correct data and to respond to erasure requests.
We use administrative, electronic and physical security measures to ensure the information we collect about you is protected from access by unauthorised persons and protected against unlawful processing, accidental loss, destruction and damage.
By using our website and/or services, you acknowledge and agree that, except to the extent required by the Data Protection laws, we shall not be responsible for any unauthorised use, distribution, damage or destruction of personal data. We will only retain your information for a reasonable period or as long as is required by law.
Of the data we process outside of any contract we retain the data for no longer than is necessary. Where there is a legal requirement to retain data for longer than Stagecoach Bus requires, we will do so. Where reasonably practicable data is minimised so not to be identifiable to the data subject unless required by law or is subject to a Subject Access Request.
We keep your personal information where we have:
If you have a complaint about the information we hold or how we use that information, please contact our Data Controller email@example.com who will deal with your request promptly. If you are not satisfied with the way your complaint was handled, you can refer your complaint to UK Information Commissioner’s Office.
We link our website directly to other sites. This privacy notice does not cover the links within our site linking to other websites and organisations. We encourage you to read the privacy statements on the other websites you visit.
We keep our privacy notice under regular review. This privacy notice was last updated on 18.05.18