Privacy Policy

Effective date: 3 September 2025

This Privacy Policy explains how Picks Travel Ltd (“we”, “us”, “our”) collects and uses your personal information when you use www.pickstravel.co.uk, make a booking, or contact us. It also explains your rights under the UK GDPR and Data Protection Act 2018.

1. Information we collect

1.1 Data you give us

Name, email, phone number
Address (pickup/drop-off and billing)
Booking and travel details (flight numbers, luggage, preferences)
Payment details (processed securely via our payment providers)

1.2 Data we collect automatically

IP address, browser type, device information
Pages visited and time spent on our website
Technical logs for security and fraud prevention

1.3 Sensitive information

We do not intentionally collect sensitive categories of personal data. If you share accessibility needs (e.g., wheelchair-accessible vehicle request), this is used solely to deliver the booking.

2. How we use your data

To confirm, manage and carry out your booking
To send important updates (e.g., driver details, delays)
To improve our services and website performance
To handle payments, prevent fraud and keep our systems secure
To meet legal and regulatory obligations

We do not sell your personal data. We only share it when required to provide our service or comply with the law.

3. Legal basis

Contract: we need your data to provide the service you book
Legitimate interests: running and protecting our business (balanced against your rights)
Consent: for optional features such as cookies or marketing
Legal obligation: where we must comply with the law (e.g., licensing, tax)

5. Data retention

We keep your booking data only as long as needed for your journey and to meet tax, accounting or legal requirements. Usage data is generally kept for a shorter period unless needed for security.

6. Cookies & analytics

Our website uses cookies to function and to measure visits. You can manage cookies through your browser or our cookie banner. For details, see our Cookies Policy.

7. Data security

We use secure servers, encryption, access controls and staff training to protect your information. While no system is 100% secure, we work hard to safeguard your data.

8. Your rights

Under UK GDPR you have the right to:

Access a copy of your data
Correct inaccurate or incomplete data
Request erasure (“right to be forgotten”)
Restrict or object to processing
Request data portability
Withdraw consent at any time (where processing is based on consent)

To exercise your rights, email [email protected]. We may need to confirm your identity. If you are unhappy, you can complain to the ICO: www.ico.org.uk.

9. Data transfers

If we transfer data outside the UK, we use safeguards such as ICO-approved contractual clauses to protect your rights.

10. Children’s privacy

Our services are not aimed at under-18s, and we do not knowingly collect their data. If you believe we have, contact us to delete it.

11. Updates

We may update this Privacy Policy. Any changes will be posted here with a new effective date.