Privacy Policy
Data controller
Shungite Taxis is the data controller for the purposes of the General Data Protection Regulation 2016/679 and Data Protection Act 2018.
Personal data collected
During the booking process, we may collect the name, telephone number, address and destination address of our passengers.
Methods of collection of personal data
We collect our passengers' personal data during the journey booking process. Personal data is collected during telephone bookings, text bookings or in-person bookings.
Purposes of collection of personal data
We collect personal data for the purposes of fulfilling single and repeat customer bookings. We may process personal data for marketing purposes when sending promotional offers and information to consenting customers.
Sharing of personal data
We may share limited customer data with trusted affiliate hackney carriage drivers for the purposes of completing customer bookings.
Information received from third parties
We may receive personal data from licensed hackney carriage drivers or private hire vehicle operators in the event that they request that we complete a personal booking on their behalf.
Length of retention of personal data
We retain customer's' personal data for a minimum of 6 years from the date of obtaining the personal data, for the purposes of pursuit or defence of potential legal claims.
Cookies
We currently use no cookies on our website.
Security of personal data
We store personal data on secure servers and electronic devices which are backed up regularly. All paper based personal data is stored securely. Our security arrangements are under continual review for potential improvement.
Your rights
Withdrawal of consent
You may at any time withdraw your consent for our processing of your personal data which you previously consented to. In such circumstances we will cease processing your personal data. However, if we consider our continued processing of your personal data is necessary for our compliance with a legal obligation, or for the establishment, exercise or defence of legal claims, we shall provide a written response explaining our reasoning.
Subject access
You have a right to access your personal data we hold. You may access your personal data we hold by making a written request. We shall provide a copy of requested personal data usually within 28 days of receipt of the request. Where we are unable to provide a copy of requested personal data within 28 days, we will within the said period, provide written notification of our reasons for our inability to provide the personal data within 28 days, and where applicable, provide a reasonable date by which the data will be supplied as requested. We provide requested personal data free of charge unless a request for the same information was previously made.
Rectification
You have the right to rectification of personal data retained which infringes the law of the European Union or United Kingdom, or where you have withdrawn consent for processing. Your right may be exercised by providing us with a written request for rectification. Upon receipt of such a request, we shall reply within a reasonable time frame either confirming the correction of the personal data. If our continued retention of the non-rectified personal data is considered necessary for our compliance with a legal obligation, or for the establishment, exercise or defence of legal claims, we shall provide a written response explaining our reasoning.
Objections to processing
You may object to our processing of personal data by providing us with written notification of your objections. If, following receipt of an objection, we are unable to cease the processing for compliance with a legal obligation, or for the establishment, exercise or defence of legal claims, we shall provide a written response explaining our reasoning.
Right to be forgotten
You have a "right to be forgotten" where our retention of personal data infringes European Union or United Kingdom law. In such circumstances you may request that your personal data is permanently removed from our systems. We shall comply with such requests unless we consider retention of the personal data necessary for compliance with a legal obligation, or for the establishment, exercise or defence of legal claims. Where we consider retention of personal data necessary, we shall explain our reasoning in a written response.
Data portability
Where possible, and upon your express request, we may transfer your personal data we hold to another organisation.
Automated decision making
You have the right not to be subject to decision based solely on automated processing. We make no decisions based on automated processes.
Complaints
In the event that you are unhappy with the manner of our processing of your data, you may file a complaint with the Information Commissioner's Office ("the ICO") at: www.ico.org.uk.
Contact us
If you wish to exercise your rights set out above, or submit a privacy query, please contact us by post at:
Shungite Taxis, ADDRESS.
Shungite Taxis
7 June 2023