We do not aim to collect personally indentifiable information from non-registered users.
We do store cookies and local data on your computer. This allows us to:
We do not include third-party pixels or content such as social media buttons which would allow third parties to track you.
If you choose to support the site by opting into our ads programme however, you may be asked to opt into direct and third party tracking in order to allow us to provide you with relevant advertising.
If you register with the site, we will store and process the information you provide. This may include personal information such as name and location, as well as contact information (email, phone number, push notification key etc). If you are a railway industry employee and you choose to tell us who your employer is, we will store that information. Additionally we will store information such as site preferences and favourite pages where you set them. We do not collect or process sensitive categories of data such as race or sexual orientation.
Where we contact you we may gather and store your responses to the communication, including whether you viewed the message, and whether you clicked on any links that were included in the message.
When you use the site, in addition to the information we store for non-registered users, we will also store an identifier for your account. This will allow you to log in more easily, and also allow us to store information about your usage of the site, so that we can personalise your experience and gather more detailed information about how our users use the site. If you do not wish us to track your usage of the site, please update your preference in the user settings section of the site.
In addition to the information we store about you as a registed user, we or our payment partners may store information about our financial transactions with you, and any card or bank details you provide to us in order to take payment.
Full card information will be collected directly by our payment partner and handled in compliance with PCI (Payments Card Industry) standards.
We may contact you using your preferred contact methods for the following reasons:
We may process and aggregate information. We do this for the following reasons:
The data is securely stored with our cloud service providers. All providers are either located in the EEA or meet Safe Harbour Requirements. Access to the data is only granted to employees as required to perform duties as outlined in the "What we Do With the Data" section above.
At your request we will delete or anonymise any personal data we have gathered on solely on the basis of your consent. It may be necessary to disable or delete your account with us to complete this action.
If we hold data for other reasons, such as a legal or contractual obligation (as outlined in the GDPR section below), we will retain this information for as long as we have an ongoing basis for holding the information. Once this period has elapsed we will delete or anonymise the data as appropriate.
The lawful bases we rely on for processing this information are:
Under data protection law, you have rights including:
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at firstname.lastname@example.org if you wish to make a request.
You can also complain to the ICO if you are unhappy with how we have used your data. The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113