Data Protection and Privacy (UK GDPR) The Company complies with the UK General Data Protection Regulation (UK GDPR) and th e Data Protection Act 2018. 

Personal information (name, phone number, location data) is used solely for booking mana gement, safety, and TfL regulatory recordkeeping.

 Data is not shared with third parties except where necessary to fulfil bookings (e.g., TfL‑lice nsed subcontractors). 

Records are retained for the minimum period required by TfL (typically 12 months) and sec urely deleted thereafter. 

Passengers may request access, correction, or erasure of their data by contacting the Company.