Privacy Policy | Donegan Express

⚠️ Draft — not yet reviewed by a solicitor or data protection professional.

This is grounded in what the site actually does today (contact forms, Google Analytics, Google Reviews), but UK GDPR compliance depends on details I don't have — your actual data retention periods, whether you're ICO-registered, exactly how enquiry data is used after booking, and so on. Please have this properly reviewed before relying on it, and fill in every bracketed placeholder below.

Last updated: [DATE]

1. Who We Are

Donegan Express Ltd (company number 10316368) is the data controller for personal data collected through this website. Registered office: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, England, W1T 6EB.

ICO registration number: [ADD YOUR ICO REGISTRATION NUMBER, OR CONFIRM WHETHER YOU'RE EXEMPT — most businesses processing personal data must register with the Information Commissioner's Office and pay the data protection fee; check at ico.org.uk if you haven't already.]

2. What Personal Data We Collect

Contact and booking enquiries: name, email address, phone number, and any details you provide in the message field (e.g. pickup/drop-off details, school run or regular journey information).
Website usage data: via Google Analytics (GA4) — pages visited, approximate location, device/browser type, and how you arrived at the site. This uses cookies (see Section 5).

We do not collect payment card details through this website.

3. How We Use Your Data

To respond to enquiries and arrange bookings (legal basis: taking steps prior to entering a contract, or performance of a contract once a booking is confirmed)
To understand how the website is used and improve it (legal basis: legitimate interests, balanced against your privacy rights)
Where you've given consent for non-essential cookies (legal basis: consent — see Section 5)

4. Who We Share Data With

[List anyone who actually receives this data — e.g. your hosting provider, any dispatch/booking software, any drivers who need pickup details.] We also use Google Analytics (Google LLC), which may process data outside the UK/EEA under Google's standard contractual safeguards.

5. Cookies

This site uses cookies. Strictly necessary cookies (e.g. remembering your cookie consent choice) are set automatically. Analytics cookies (Google Analytics — typically named _ga, _ga_*) are only set once you've given consent via the cookie banner. You can withdraw consent at any time by clearing your cookies or [ADD: a way to re-open the cookie banner/change preference, if you build one].

6. How Long We Keep Data

[State your actual retention period — e.g. "Enquiry and booking data is kept for X months/years for business record and tax purposes." This needs a real decision, not a guess.]

7. Your Rights (UK GDPR)

You have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Request erasure of your data, where applicable
Restrict or object to certain processing
Request a copy of your data in a portable format
Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data

To exercise any of these rights, contact us at info@doneganexpress.co.uk.

8. Children

This website is not directed at children, though we do provide a school run service. Data collected for a school run booking (e.g. a child's name, school, and pickup times) is provided by a parent or guardian and used solely to arrange transport.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision.

Contact

Questions about this policy or your data: 01895 725111 or info@doneganexpress.co.uk