Privacy Notice | Ravensley

Who is responsible

Ravensley is a trading name of Tarlow, Oxford OX4 4SA. That company is the controller of the personal data described here, under the UK General Data Protection Regulation and the Data Protection Act 2018. For anything in this notice, write to bookings@ravensley.co.uk.

What we collect

When you price a journey: the collection and destination addresses, the date and time, and how long you need the car. You can price a journey without telling us who you are.
When you book: your name, home or billing address, mobile number and email address; the passenger’s name if it is not you; a flight number, the number of passengers and cases, and any notes you add; and, if the journey is on a company account, the company’s name and address.
Payment: card details are entered on Stripe’s own page and go straight to Stripe. We never see or store your full card number. Stripe tells us whether a payment succeeded.
Correspondence: anything you send us by email.
Technical data: our hosting provider keeps short-lived server logs, including IP addresses, to keep the site secure and to stop abuse of the booking form.

Why we use it, and on what basis

To price, book and carry out your journey and to contact you about it: this is necessary to perform our contract with you, or to take steps you have asked for before entering into one.
To keep the records a licensed private hire operator must keep, and for tax and accounting: this is a legal obligation.
To keep the site secure and prevent fraud: our legitimate interest in protecting our clients and our business.

We do not use your details for marketing, and we never sell them.

Who else sees it

Your chauffeur sees what is needed to carry out the journey: the passenger’s name, the addresses and times, a contact number and your notes. Beyond that, we share data only with service providers who process it on our instructions, under contract:

Stripe, which processes payments and refunds;
our website hosting provider;
our email delivery provider, which sends confirmations and receipts;
Google, which provides the address suggestions in the booking form.

We may also disclose data where the law requires it, for example to a licensing authority or the police.

International transfers

Some of these providers process data outside the United Kingdom, including in the United States. Where they do, the transfer is covered by UK adequacy regulations or by the safeguards the law requires, such as the International Data Transfer Agreement.

How long we keep it

Booking records are kept for as long as private hire licensing rules require, and accounting records for six years. Correspondence that is not part of a booking is deleted once it is no longer needed. Server logs are kept for a short period only.

Cookies and storage

This site sets no advertising or analytics cookies. The booking form remembers your journey in your browser’s session storage so that it is still there if you come back from the payment page; it is cleared when you close the tab. Stripe sets its own cookies on its payment page to prevent fraud.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected, to have it erased or its use restricted, to object to our use of it, and to have it transferred to you or to someone else. Some rights are limited where we must keep a record by law. Write to bookings@ravensley.co.uk and we will reply within one month.

If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If we change this notice we will publish the new version here with a new date. Our terms of carriage explain how bookings work.

What we do with your details