Our commitment to your privacy
We’re serious about protecting your personal data, and we commit to comply at all times with the latest General Data Protection Regulations. This Privacy Notice explains:
• From where we secured your personal data;
• The personal data that we collect;
• Your personal data rights;
• Your right to object to our processing your personal data and withdrawing consent;
• How and when we use that personal data;
• Whether we share your personal data with anyone else;
• For how long will we keep your personal data;
• How you can access your personal data
If you have any questions or queries about this notice, please contact us on 01553 611955, or by emailing us at firstname.lastname@example.org. You can write to us too at Coastal Red Ltd t/a Lynx, Acer Road, Saddlebow Industrial Estate, King’s Lynn, Norfolk, PE34 3HN.
Personal data that we collect
The personal data that we collect may include your name, address, date of birth, email address, telephone number, preferences, IP address (the number that uniquely identifies a specific computer), Twitter username. We collected your personal data from you when you purchased one of our products e.g. a scholars bus pass, or when you subscribed to our mailing list for news updates and/or travel disruption alerts. We always ensure that we have a lawful basis for processing the personal data that we collect. In this case the lawful basis for processing is to perform the contract / purchase terms and conditions between us and you in order to fulfil the order(s) that you have placed with us.
Your rights in respect of your personal data
You have the right to request access to your personal data, amendments to it and for it to be deleted. Further information about those rights and who to speak with if you have any queries about our approach to processing your personal data are shown below.
How and when we use your personal data
We’re committed to using your personal data responsibly and lawfully. Here’s what we do with your personal data:
• Use it to fulfil orders you’ve placed with us.
• Use it to focus our updates on information that you’ve shown an interest in
• Use it to ensure we deal with your enquiries about our services quickly and efficiently.
The majority of your personal data is stored on our servers within the UK, and we have ensured that any data that is held with third parties (for example on our Mailchimp CRM system database) on servers outside of the UK, is strictly held in compliance with General Data Protection Regulations.
To help us to maintain the accuracy of the personal data that we hold please let us know if we hold out of date or inaccurate information about you.
Sharing your personal data
There are only a few occasions where we will share your personal data with a third party. They are:
• Where we’re required to disclose it by law – to government bodies for example.
• Between ourselves – for example to deal with a query that you may have which may involve our Customer Services team, sales team, and operations teams.
We use accepted standards of technology and security to protect your personal data. For how long will we keep your personal data Our ‘retention policy’ as to the types of data we keep and the length of time we keep it is as follows:
Type of data - Customer contact details including postal address, email address, contact phone numbers, date of birth, preferences, IP Address, photographs for ID purposes where relevant
Retention period - Orders / purchases / contact with our Customer Services team: two years from the date of the last transaction on a registered account (whether that be a top-up or a journey made) Service updates: ongoing, but with option to unsubscribe at any time on all correspondence or online. Data is then permanently deleted within twelve months.
Type of data - As above, plus vehicle details (where relevant)
Retention period - For any insurance-related incidents / accidents: six months after the incident / file has been closed. Or 42 months for personal injury, unless a child is involved – in which case CCTV is retained for 42 months beyond the date on which the child reaches 18 years old.
If you would like us to delete your data and we don’t have a lawful reason to retain it you can make a deletion request by emailing us at email@example.com or writing to us at Coastal Red Ltd t/a Lynx, Acer Road, Saddlebow Industrial Estate, King’s Lynn, Norfolk, PE34 3HN.
How you can access your personal data
You can ask us for a copy of the personal data that we hold on you by emailing us at firstname.lastname@example.org or writing to us at Coastal Red Ltd t/a Lynx, Acer Road, Saddlebow Industrial Estate, King’s Lynn, Norfolk, PE34 3HN. We’ll ask you for copies of two types of approved identity in order to process your request (such as a passport and driving licence). You can also ask us to make corrections to data you consider to be inaccurate emailing us at email@example.com or writing to us at Coastal Red Ltd t/a Lynx, Acer Road, Saddlebow Industrial Estate, King’s Lynn, Norfolk, PE34 3HN.
We use social buttons such as Twitter, Google, Facebook and LinkedIn to share or bookmark pages on our site or email updates. Those sites may collect information about your internet activity, including if your visit to our site (even if you don’t click on the button if you’re logged on to their site). You should check the privacy and cookies policy of each of these sites to see how they use your information and find out how to opt out and delete such information.
You are able to manage cookies. For more information please visit www.aboutcookies.org. If you want to block all cookies all of the time you can set your computer preferences to do so.
Our website does not require you to input personal data to use it. You may however volunteer personal data such as your name and email address to request information, updates and our services. That information is required to deal with your query appropriately.