Privacy Policy

Sky Dunstable Cars Ltd (Companies House registration no. 11102879) is the data controller for the personal data described in this policy. If you have any questions or wish to exercise your rights, you can contact us using the details below:

• Address: 48b High St S, Dunstable LU6 3HD, United Kingdom
• Phone: 0333 111 6060
• Email: hello@skydunstablecars.co.uk

When you contact us through our website, by phone or by email to enquire about or book a journey, we collect only what we need to respond and provide the service:

• Contact & booking details: your name, phone number, email address, and the journey details you give us (such as pick-up and drop-off, dates, times and any accessibility or passenger requirements), so we can quote for and arrange your transport.
• Correspondence: a record of your enquiries and our replies, so we can manage your booking and provide a good service.

We use this information to respond to enquiries, provide quotes, arrange and deliver journeys, and keep the records we are required to keep as a licensed operator.

Our contracted drivers and Passenger Assistants use a separate, staff-only operations app. That app is not available to the public. Through it we collect:

• Account & contact details: name, mobile number and email address, to identify staff, assign routes and contact them about work.
• SMS sign-in codes: a one-time code sent by SMS to log in securely. We store only a temporary, expiring, hashed record of the code.
• Location: collected only while a staff member is clocked on to a route, including in the background during that shift, to monitor service delivery, safety and estimated arrival times. Location is not collected off shift.
• Incident media: photos, video and audio captured when reporting an incident or vehicle defect, used to record and manage the event.
• Compliance documents: documents uploaded (e.g. licence, DBS, insurance) to meet our contractual and legal safeguarding obligations.
• Signatures: electronic signatures (e.g. terms & conditions, vehicle checks) as a record of acknowledgement.
• Push notification tokens: a device token so we can send route assignments and operational alerts.

Our website and staff app do not collect personal data directly from children. For our home-to-school and SEN services, passenger information (including relevant special educational needs and safeguarding information) is provided by, and processed under our contracts with, the relevant local authorities and schools. Staff can only see the passenger information that is operationally necessary to carry out a route safely.

We process personal data on the basis of: taking steps to enter into and perform a contract with you (to quote for, arrange and deliver journeys, and to assign and manage work); our legitimate interests in running a safe, reliable transport service and responding to enquiries; our legal obligations as a licensed operator; and, in the event of an incident, protecting the vital interests of individuals.

• We use your data only to quote for, arrange, deliver and manage our transport services.
• We do not sell your data and we do not show advertising in our app.
• We share data with trusted service providers strictly to run our services, for example our SMS provider (to send staff sign-in codes) and Apple/Google push notification services (to deliver alerts).
• We may share data with the relevant local authority or regulator where required to fulfil a contract or legal obligation.

Our website uses only the cookies and similar technologies necessary for it to function and to keep it secure. We do not use our website to build advertising profiles about you.

We keep personal data only for as long as necessary for the purposes above and to meet our contractual and legal record-keeping obligations, after which it is securely deleted. Enquiries that do not result in a booking are kept only for a reasonable period. Sign-in codes expire and are removed shortly after use.

Data is transmitted over encrypted connections and stored on secured infrastructure with access restricted to authorised personnel. Sign-in codes are stored only as a hashed, expiring value.

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data where applicable;
• restrict or object to certain processing;
• request a copy of your data (data portability); and
• withdraw consent where we rely on it (for staff, by staying off shift for location data).

To exercise any of these rights, email us at hello@skydunstablecars.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We may update this policy from time to time. The "last updated" date above reflects the most recent version.

Sky Dunstable Cars Ltd

• 48b High St S, Dunstable LU6 3HD, United Kingdom
• 0333 111 6060
• hello@skydunstablecars.co.uk