Privacy Policy

Last updated: March 2026

Bramhall Cars Limited ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our services.

Bramhall Cars Limited is registered in England and Wales (Company No. 17085270). Our registered address is 9 Moreton Avenue, Bramhall, Stockport, SK7 2BD.

1. Data Controller

Bramhall Cars Limited is the data controller for the personal data we process. If you have any questions about how we handle your data, you can contact us at:

• Email: info@bramhallcars.uk
• Phone: 07990 573 473
• Address: 9 Moreton Avenue, Bramhall, Stockport, SK7 2BD

2. Information We Collect

2.1 Customer Data

When you book a ride with us, we collect:

• Your name and telephone number (provided via WhatsApp)
• Your WhatsApp profile name
• Pickup and destination addresses, including GPS coordinates
• Journey details including distance, duration, fare, and payment method
• Messages exchanged with our booking system and drivers
• Ratings and feedback you provide after a journey
• Your live location if you choose to share it for pickup

2.2 Driver Data

For our drivers, we collect:

• Name, telephone number, and photograph
• Vehicle details including make, model, colour, and registration number
• Vehicle photographs
• Private Hire Driver Badge details and expiry date
• Hire and Reward insurance certificate details and expiry date
• Real-time GPS location while online and during journeys
• Job history, earnings, and commission records

2.3 Website Visitors

When you visit our website (bramhallcars.uk), we may collect:

• Standard web server logs (IP address, browser type, pages visited)
• Analytics data via Google Analytics (anonymised usage patterns, device information, geographic region)
• Cookies as described in Section 8 below

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide our private hire booking service, including matching you with a driver, calculating fares, and processing payments
• To send you booking confirmations, driver details, live tracking links, and receipts via WhatsApp
• To enable real-time driver tracking so you can see your driver approaching
• To allow you to share your journey tracking link with family or friends for safety
• To maintain booking records as required by our Private Hire Operator Licence
• To handle complaints, safeguarding concerns, and disputes
• To generate invoices and manage driver commission
• To monitor and improve our service quality
• To comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

• Contract: Processing necessary to provide you with the private hire service you have requested
• Legal obligation: Processing required to comply with our Private Hire Operator Licence conditions, including maintaining booking records for a minimum of 12 months
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our service, preventing fraud, and ensuring passenger safety
• Consent: Where you choose to share your live location or provide optional feedback

5. Data Sharing

We share your personal data with the following parties:

• Your assigned driver: Your name, pickup location, destination, and phone number are shared with the driver assigned to your booking so they can complete the journey
• Customers (driver data): Driver name, photograph, vehicle details, and registration number are shared with customers for identification and safety purposes

5.1 Third-Party Service Providers

We use the following third-party services to operate our platform:

• Google Firebase (Google LLC, USA) — Cloud database and file storage for booking records, driver documents, and photographs. Data is encrypted at rest and in transit.
• Google Maps Platform (Google LLC, USA) — Address geocoding, route calculation, and live tracking maps
• Google Cloud Run (Google LLC, USA) — Hosting our booking system server
• Google Analytics (Google LLC, USA) — Anonymised website usage analytics
• Twilio (Twilio Inc, USA) — WhatsApp Business messaging and voice call services
• WhatsApp (Meta Platforms Inc, USA) — Customer messaging platform
• Firebase Cloud Messaging (Google LLC, USA) — Push notifications to drivers
• Google Play Store (Google LLC, USA) — Distribution of our driver application
• Krystal Hosting (Krystal Hosting Ltd, UK) — Website hosting

Where data is transferred to service providers in the United States, these transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) and the providers' participation in recognised data protection frameworks.

5.2 Legal and Regulatory Disclosure

We may disclose your personal data if required to do so by law, or if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation or regulatory requirement
• Respond to requests from Stockport Council Licensing Authority
• Cooperate with Greater Manchester Police or other law enforcement
• Protect the safety of our passengers, drivers, or the public
• Investigate safeguarding concerns

6. Data Retention

We retain your personal data for the following periods:

• Booking records: Minimum 12 months from the date of the journey, in compliance with our Private Hire Operator Licence conditions
• Customer accounts: Retained while you remain an active customer. You can request deletion at any time.
• Driver documents: Retained for the duration of the driver's engagement with us and for 12 months thereafter
• Complaints and safeguarding records: Retained for the duration of our operator licence and available for inspection by the Licensing Authority
• Messages and communication logs: Retained for a minimum of 12 months
• Live tracking data: Real-time location data is used during the journey and is not stored separately beyond the booking record
• Website analytics: Retained in accordance with Google Analytics' standard data retention settings

7. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:

• All data is stored on secure, encrypted cloud servers (Google Firebase)
• Access to our admin systems is password-protected and restricted to authorised personnel
• All data transmitted between your device and our servers is encrypted using HTTPS/TLS
• Driver documents (insurance, badges) are stored securely in encrypted cloud storage
• We regularly review our security measures and access controls

8. Cookies

Our website uses a limited number of cookies:

• Essential cookies: Required for the website and admin dashboard to function (session management)
• Analytics cookies: Google Analytics cookies to help us understand how visitors use our website. These collect anonymised data only.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain pages.

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request that we correct any inaccurate data
• Right to erasure: You can request that we delete your personal data, subject to our legal retention obligations
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request your data in a machine-readable format
• Right to object: You can object to our processing of your data where we rely on legitimate interests
• Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details in Section 1 above. We will respond to your request within one month.

10. Live Tracking and Location Data

Our service includes a live tracking feature that allows customers to watch their driver approaching on a map. This feature:

• Uses the driver's real-time GPS location, which is transmitted while they are online and during active journeys
• Provides a shareable tracking link that you can send to family or friends so they can monitor your journey for safety
• Displays the driver's name, photograph, vehicle details, and registration number
• Tracking is only active during an active booking and stops when the journey is completed

11. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will take steps to delete it.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our services or legal requirements. The "Last updated" date at the top of this page indicates when this policy was last revised. We encourage you to review this page periodically.

13. Complaints

Bramhall Cars Limited is registered with the Information Commissioner's Office (ICO). Our registration number is ZC104984.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.