PRIVACY NOTICE – CUSTOMERS AND PASSENGERS

2026

 

1. Who does this privacy notice apply to, and what is it about?

 

This privacy notice applies to you if you are or were a customer of Beestons (Hadleigh) Ltd referred to below and/or if you are or were a passenger on any of the passenger transport services arranged or provided by Beestons (Hadleigh) Ltd. 

 This privacy notice, explains what personal data we collect about you and what we do with it. It also explains your rights in respect of your personal data and it informs you what to do if you have any questions or complaints about our use of your personal data. 

 We take your privacy seriously and are committed to abiding by the relevant data protection laws which protect your privacy. 

 This privacy notice may change from time to time and the most up-to-date version will always be available on our website. It is your responsibility to read this privacy notice and check our website for the current version. 

 

2. Who is controller of your personal data?

 

Beestons (Hadleigh) Ltd sells or provides you with passenger transport services is the controller of your personal data that is or was processed for the purposes explained in this privacy notice. 

 The data controller of this privacy notice is Beestons (Hadleigh) Ltd and can be contacted using the contact details set out at the end of this notice.  

 

3. What personal data do we collect about you, and how?

 

We collect the following types of personal data about you: 

 

·        your name and title; 

·        your home address including postcode and country of residence;

·        your contact information, including telephone number and email address;

·        your transaction/payment information (but please note that full debit card and credit card information is not processed by us as it is passed through to a PCI-DSS compliant third-party payment provider in accordance good industry practice);

·        information about your travel behaviour;

·        if you are disabled, information about your disability or mobility requirements; 

·        if you set up an account with us, information about your marketing preferences; 

·        your image, where this is held for the purposes of creation of travel cards and/or where it is captured by CCTV or other visual recording equipment on our owned or occupied sites such as coach and coach depot and/or on the passenger carrying vehicles used to provide our passenger travel services;

·         your voice, where this is captured by CCTV or any other audio recording equipment at our owned or managed premises such as coach and coach depot and/or on the passenger carrying vehicles used to provide our passenger travel services and/or were captured in recorded telephone conversations with you; and

·        any other personal data that you provide to us when you communicate with us.

 

In addition, each time you visit our website we “may “automatically collect the following information: 

 Our website is hosted by Distinctive Systems Ltd.  Any data that maybe collected for example:

·        technical information including web usage information (e.g. IP address), browser type and version, time zone setting, operating system and platform; and 

·        information about your visit, including the full Uniform Resource Locators (URLs) clickstream to, through and from our website (including date and time); tickets and/or journeys you viewed or searched for; time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page.

 

We collect this personal data about in a variety of ways, including:

 

·        by you creating an account with us;

·        by you searching for products and services and/or purchasing products and services on our website;

·        by you submitting information via our website, for example via the ‘Contact Us’ page;

·        by you providing information to us when communicating us in any manner, for example when you speak to our representatives in person at our offices or on-board our passenger carrying vehicles, and when you contact us by letter, email, text message, telephone call or on social media;

·        by you consenting to receive certain information from us, such as marketing emails and other promotional material about seat sales, offers, exclusive deals and travel ideas;

·        by you entering our competitions or participating in post journey, market research and other surveys that we organise or conduct;

·        by us making visual and/or audio recordings at our owned site, including on the passenger carrying vehicles used to provide our travel services; and

·        by us recording telephone conversations with our customer contact centre representatives.

 

4. What do we do with your personal data, and on what basis?

 

We use your personal data for the following purposes and reasons and, where those reasons are our legitimate interest, we inform you about what that legitimate interest is:

 

What we use your information for:  

 

·        To provide our products and services to you

·        To provide you with information, advice and guidance about our products and services

·        To manage our relationship with you, including to respond to any questions you ask and deal with any complaints you make.

·        To develop our business and develop new and/or better ways of meeting our customers’ needs, including by carrying out market research and consulting with you

·        To develop our strategy, operational processes and marketing activities

·        To study how our customers, use products and services from us

·        To manage how we work with other companies

·        To comply with the laws and regulations that apply to us

·        To seek to enforce and defend our legal rights

·        To seek to detect, investigate, prevent and report crime and anti-social behaviour

·        To seek to protect and promote your health & safety and that of both customers & staff.

·         To market and promote our products and services to you

·        To inform you about incomplete purchases of our products and services

·        To inform you about similar products and services to those you have previously bought from us

·        To assist you in completing your purchase

·        To administer and manage our website, including troubleshooting and testing

·        To ensure that our website content is presented in the most effective manner and customised for customers

·        For data analysis, research, statistical and survey purposes

 

Our reasons

 

·        Fulfilling our legal duty

·        Fulfilling our contracts with you

·        Our legitimate interest

·        Consent

·        Our legitimate interest consents

 

 Our legitimate interest

·        Being efficient about how we fulfil our legal and contractual duties and manage our relationship with you

·        Keeping our business records up to date 

·        Developing and improving our business

·        Developing our products and services, and what we charge for them

·        Developing relationships with business partners, to enhance our product and service offering 

·        Preserving our legal position, seeking to detect and prevent crime and antisocial behaviour and seeking to promote health & safety

·        Providing an efficient and customised means for customers to get information about our products and services

 

 5. What if we have obtained your consent to use your personal data?

 

Where we process any of your personal data on the basis of your consent you may withdraw that consent at any time.

 

Where you have consented to us sending you marketing communications, you may withdraw that consent at any time, either by updating your marketing preferences in your account with us (if you have one), by clicking on the “unsubscribe” link in any marketing communications we send you or by contacting us at info@beestons.co.uk

 

6. What are our obligations to collect and your obligations to provide personal data?

 

We have no legal obligation to collect personal data about you but we need to collect some personal data about you in order to provide our products and services to you and to collect payment for these and to deal with any questions or complaints you have about them.  

 You have no legal obligation to provide your personal data to us, but we may not be able to provide our products and services to you or deal with your questions or complaints if you do not provide us with the information needed for this.  

 

7. Who will we share your personal data with?

 

We may share your personal data with:

 

·         other business partners in connection with the provision of their products and services to you;

·        our legal and professional advisors;

·        government bodies and regulatory authorities, including the Driver Vehicle & Standards Agency, the Police and other crime prevention and detection agencies and the UK Information Commissioner’s Office;

·        the Traffic Commissioners, the courts and other dispute resolution arbitrators and mediators, other parties to legal proceedings and passenger transport watchdogs; and

·        other companies that take on any part of our business as a result of a restructure, merger or transfer of that part of our business.

 

Where we share your information with business partners for the purpose of them providing their products and services to you, it may be essential to do this to fulfil a contract with you.  In other cases, we do this only with your consent, generally where you have selected the relevant preferences in your account with us (if you have one). Where this applies, the business partners are data controllers of your personal data that we provide to them and their privacy notices or policies apply to how they handle your personal data. We do not accept any responsibility or liability for these third parties or their handling of your personal data.

 In addition, if you follow a link to any of the websites of advertisers and affiliates that are on our websites, these third-party websites may have their own privacy notices or policies, and we do not accept any responsibility or liability for these notices or policies or the third parties’ handling of your personal data. Please check these notices or policies before you submit any personal data to these websites. 

 

9. For how long will we process your personal data?

 

Where we process your personal data to fulfil a legal obligation, we will process such personal data for so long as necessary to fulfil that obligation.

 

Where we process your personal data to fulfil a contract with you, we will process such personal data until we fulfil that contract and for so long thereafter as may be necessary to keep a record of that contract, which will typically be for six (6) years, and to deal with any complaints or claims relating to that contract, which will be until the final resolution of such complaints or claims (having regard to the nature of any potential claims and the limitation of liability periods that apply to them). 

 Where we process your personal data based on our legitimate interest, we will process such personal data for so long as necessary to achieve that legitimate interest, which will typically be for six (6) years after we collect your personal data or the last time, we use your personal data (or longer in relation to any legal claims that might arise having regard to the nature of any potential claims and the limitation of liability periods that apply to them).

 Where we process your personal data on the basis of your consent, for example to send you marketing information, we will process such personal data until you withdraw that consent.  Please bear in mind that it may take a short time to process any withdrawal of your consent. We aim to do this within 48 hours of receipt of your request, although you may still receive emails that are already in process around the time of your withdrawal. 

 We may also retain your personal data for longer if we cannot delete it for legal, regulatory or technical reasons.

 

10. What rights do you have in relation to your personal data?

 

You have a number of rights in relation to your personal data. These include the right, subject to exceptions, to:

 

·        access your personal data;

·        request the rectification or erasure of your personal data;

·        request restrictions on the processing of your personal data; and

·        object to our processing of your personal data.

 

Please contact Beestons (Hadleigh) Ltd if you wish to exercise any of these rights. 

 

You also have the right in some circumstances to receive a copy of your personal data in a portable format. This right is limited to personal data that you have provided to us and is processed on the basis of your contract with us or your consent. It does not cover personal data that we process on other grounds. 

 Please contact Beestons (Hadleigh) Ltd to request a portable copy of the data that you have provided and is processed on these bases.

 

11. What should you do if you have any questions or complaints?

 

If you have any questions or complaints about how we process your personal data or otherwise about the matters set out in this privacy notice, you should contact Beestons (Hadleigh) Ltd at:

 

Address:  Beestons (Hadleigh) Ltd, The Coach Depot, Ipswich Road, Hadleigh, Suffolk, IP7 6BG. Email address: info@beestons.co.uk