Privacy Policy

Name: HYFLY Taxis
Address: Brooks Road, Cambridge, CB1 3HR, GB
Telephone: 01223 737300
Price range: ££

Introduction

Our company is committed to protecting the privacy and personal data of our customers, drivers, and employees. This policy explains how we collect, store, use, and protect personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data We Collect

We collect personal data necessary for operating our taxi services, including but not limited to:

Customers / Passengers:

Name, address, phone number, email.
Payment details (card information, if applicable)
Journey history (pickup/drop-off locations, dates, times)
Special requirements (accessibility needs, etc.)

Drivers:

Name, contact information, date of birth
Driving license, ID and DBS checks
Vehicle details
Bank account information for payments

Employees / Staff:

Name, contact details, employment records
Bank and tax information
Training and performance records

How We Use Your Data

We use personal data for purposes including:

Booking and managing journeys.
Processing payments
Ensuring passenger and driver safety
Monitoring service quality
Legal compliance and regulatory reporting
Employment and payroll administration
Marketing (only if consent is provided)

Legal Basis for Processing

We process personal data under the following legal bases:

Contractual necessity: to provide taxi services and fulfill bookings
Legal obligation: to comply with licensing, tax, and safety regulations
Legitimate interests: for business operations, service improvement, and fraud prevention
Consent: for marketing communications or optional services

Transparency and Communication

Provide passengers with a clear privacy notice explaining:

What personal data is collected
How it will be used
Who it will be shared with
How long it will be retained
Passenger rights regarding their data
Make privacy information easily accessible (website, apps, in-car leaflets).

Data Sharing

We may share your personal data with:

Regulatory authorities (TFL, HMRC) when legally required
Payment processors for transaction handling
Insurance providers for safety and liability purposes
IT service providers supporting our operations

We do not sell any data to third parties.

Data Retention

We retain personal data only as long as necessary for business, legal, or regulatory purposes:

Journey and payment records (for accounting and compliance)
Driver records and employment files: [minimum 6 years after termination]
Marketing data: until consent is withdrawn

Your Rights

Under UK GDPR, all have the right to:

Access their personal data
Rectify incorrect or incomplete data
Request erasure (where legally permissible)
Restrict processing
Object to processing for marketing purposes
Receive the data in a portable format
Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be sent to our office/admin team.

Data Retention and Deletion

Retain passenger data only as long as necessary for business, legal, or regulatory purposes.
Implement a data deletion policy for records past retention periods.
Ensure deleted data is completely removed from digital and physical records.

Data Security

We implement appropriate technical and organisational measures to protect personal data against:

Accidental or unlawful destruction
Loss, alteration, or unauthorized disclosure
Unlawful processing

This includes encrypted storage, secure payment systems, and restricted access to sensitive information.

Compliance and Audit

Conduct regular audits to ensure policies and procedures meet UK GDPR and TFL requirements.
Keep detailed records of data processing activities, as required by TFL and ICO.

Cookies and Online Data

Our website may use cookies and analytics tools to improve service and user experience. We will provide clear notice and allow all to manage cookie preferences.

Changes to This Policy

We may update this policy periodically. All changes will be published on our website, and significant changes will be communicated directly to our customers and staff where appropriate.