Airports
Popular routes
Our Customer and Passenger privacy notice explains exactly what we collect and how we use it, including your rights under the new Data Protection law changes that came into effect on 25 May 2018.
This privacy notice applies to you if you are or were a customer or passenger of National Express Limited.
In addition, we may process and store your personal data if you have made a booking through a third party agent.
This privacy notice explains:
We take your privacy very seriously and are committed to abiding by the Data Protection Laws which protect your privacy.
This privacy notice may change from time to time and the most up-to-date version will always be available on our website. It is your responsibility to read this privacy notice and check our website for the current version.
National Express Limited, trading as National Express, is the controller of your personal data.
Our representative for the purposes of this privacy notice is the National Express UK Data Protection Officer, who can be contacted using the contact details provided at the end of this notice.
If you are in the EEA, our subsidiary National Express Bus & Coach Services Limited is our representative in the EEA and can be contacted using the contact details provided at the end of this notice.
Payment card transactions through the Website or App
Distribusion are the Data Controller of this data. They act as a data processor for the other datasets that you provide throughout your transaction. Please find a link to their privacy notice.
For transactions at our coach station sites and/or through onboard ticketing devices, National Express Limited acts as the Data Controller for this data.
The data controller of your personal data would include financial institutions and payment service providers.
Please note that full debit card and credit card information is not processed by us as it is passed through to a PCI-DSS compliant third party payment provider in accordance with good industry practice;
Where we act as a Data Controller payment card data will be held in line with our retention period (of six years) and we cannot delete this data through a Right to Erasure request, as we have a legal obligation to hold this data in line with our regulatory obligations. As such even if we process a Right to Erasure of other datasets this will remain.
We collect the following types of personal data about you:
your name and title;
your home address, including postcode and country of residence;
your contact information, including telephone number and email address;
your date of birth;
if you register to use our website or apps, your email address and password;
your transaction or payment information;
if you are disabled or have special needs, information about your disability, special needs or mobility requirements, or where you are arranging transport for someone else information about their disability, special needs or mobility requirements;
your marketing preferences;
your image, where it is captured by CCTV or other visual recording equipment on our owned or occupied sites, such as, coach stations and/or on the passenger carrying vehicles used to provide our passenger travel services;
your voice, where this is captured by CCTV or any other audio recording equipment at our owned or managed premises, such as, coach stations and/or on the passenger carrying vehicles used to provide our passenger travel services and/or where captured in recorded telephone conversations with you;
any other personal data that you provide to us when you visit our website, use our apps, or when you communicate with us; and
Data when travelling outside the UK, including passport data and border control information.
In addition, each time you visit our website or use our apps we may automatically collect the following information:
technical data, including:
IP address;
browser type and version;
time zone setting and location; and
operating system and platform;
transaction data, including:
the full Uniform Resource Locators (URLs) clickstream to, through and from our website or apps (including date and time);
tickets and/or journeys you viewed or searched for; and
time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page.
Please see our cookie policy by clicking here for more information about how we use cookies.
We collect your personal data in a variety of ways, including:
by you:
creating an account with us;
searching for products and/or services and/or purchasing products and/or services from our website or apps;
purchasing products and/or services through any of our other sales channels, including our apps and third party ticket agents;
submitting your personal data on our website or apps, for example, via the ‘Contact Us’ page;
providing your personal data to us when communicating with us in any manner, for example, when you:
speak to one of our representatives in person at a travel shop or on-board one of our passenger carrying vehicles; and
contact us by letter, email, text message, telephone call or on social media (whether this be through private direct messaging, tagging us in a post, referring to our brand)
Please do not share personal data in the course of your social media posts in connection with our business (please use private messaging)
Please do not share your passport to the business unless it is requested concerning international travel.
we may use integrated partners to assist us, for example the management of our social media channels;
consenting to receive certain information from us, such as marketing emails and other promotional material about seat sales, offers, exclusive deals and travel ideas;
entering one of our competitions or participating in post journey, market research and other surveys that we organise or conduct; and
submitting information when registering or using our on-board Wi-Fi
by us:
making visual and/or audio recordings at our owned or occupied sites, including at our coach stations and on the passenger carrying vehicles used to provide our travel services;
recording telephone conversations with our customer contact centre representatives; and
gathering statistical information around email opening and clicks.
We may also receive your personal data if you use any of the other websites operated by other National Express Group companies or from third parties, such as companies that market and sell our products and/or services on our behalf or from any person who has bought our products and services for you or contacted us on your behalf.
We use your personal data for the following purposes and describe below the legal basis on which we process your personal data:
| Purpose | Legal basis | Explanation |
|
|
|
|
|
|
|
|
|
Where we process your personal data on the basis of your consent, you may withdraw that consent at any time.
Where you have provided consent for us to send you marketing communications, you may withdraw that consent at any time, either by updating your marketing preferences in your account with us (if you have one) or by clicking on the “unsubscribe” link in any marketing communications we send you.
Where you have consented to the use of cookies, you may withdraw that consent at any time by changing your cookie settings as explained in our cookie policy.
We have no legal obligation to collect personal data about you, but we need to collect some personal data in order to provide you with our products and services, collect payment for such products and services and deal with any questions or complaints you have about them.
You have no legal obligation to provide your personal data to us, but we may not be able to provide you with our products and services or deal with your questions or complaints if you do not provide us with your personal data.
We may share your personal data with:
Where we share your personal data with business partners for the purpose of providing products and services to you, it may be essential to do this to fulfil a contract with you. Where this applies, the relevant business partner is the controller of your personal data that we provide to them and their privacy notices or policies apply to how they handle your personal data. We do not accept any responsibility or liability for such third parties or their handling of your personal data. Please check the relevant third party’s privacy notice before you submit any personal data to them.
In addition, if you follow a link to any of the websites of advertisers and affiliates on our websites, these third party websites may have their own privacy notices or policies. We do not accept any responsibility or liability for these notices or policies or the third parties’ handling of your personal data. Please check the relevant third party’s privacy notice before you submit any personal data to them.
There may be occasions where it is necessary to transfer your personal data to a country outside of the United Kingdom (“UK”). It is possible that the country concerned may not be deemed to provide a similar level of protection for individuals’ rights in relation to their personal data as in the UK.
Where we transfer your personal data to other National Express Group companies and/or third parties who process your personal data on our behalf in countries outside the UK, we ensure a similar degree of protection is afforded to it by implementing one of the following safeguards:
Please contact the National Express UK Data Protection Officer if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting or reporting requirements in respect of our relationship with you.
Where we process your personal data to fulfil:
Where we process your personal data based on:
You have a number of rights under Data Protection Laws in relation to your personal data. These include the right, subject to exceptions, to:
You also have the right in some circumstances to receive a copy of your personal data in a portable format. This right is limited to personal data you have provided to us and is processed on the basis of your contract with us and/or your consent. It does not cover personal data that we process on other grounds.
If you wish to exercise any of these rights and/or request a portable copy of the data that you have provided and is processed on these bases, please contact the National Express UK Data Protection Officer.
If you have any questions or complaints about how we process your personal data, or otherwise about the matters set out in this privacy notice, please contact the National Express UK Data Protection Officer at:
Address: Data Protection Officer (DPO), National Express, National Express House, Birmingham Coach Station, Mill Lane, Digbeth, Birmingham B5 6DD
or
Email address: data.protection@nationalexpress.com
The UK Data Protection Law requires you to first complain to the Data Controller's DPO.
After raising your complaint with the Data Controller, you have the right to complain to the UK Information Commissioner's Office about how we use your personal data. You can contact them on their helpline: 0303 123 1113 or website at https://ico.org.uk/.
If you are in the EEA, our subsidiary National Express Bus & Coach Services Limited is our representative in the EEA and can be contacted at eurep.nx@nationalexpress.com.
