What do you keep about my booking?

What condition 24 of our operator licence requires us to record before the car is sent: who booked, who travelled, the addresses, the time, the fare quoted, who drove, the car, and how the booking reached us. We add the fare charged and the full history with timestamps. Condition 28 requires at least twelve months; we keep it for two years after the date of travel.

Who sees my address and telephone number?

The chauffeur assigned to your booking, and the staff who take and dispatch bookings. Not our other customers, and not an advertising network. Telephone numbers and email addresses are masked in our own logs.

Can I get a copy of my data, or have it deleted?

Yes. Ask from your account or email the address at the foot of this page. Records we are required to keep for licensing or tax reasons are held until that period ends, and we will tell you which ones those are.

Will you send me marketing?

We do not send marketing at present, and if we ever do we will ask for your consent first. Booking messages, such as your confirmation, who is driving and your receipt, are part of the service and are not marketing.

Do you store my card?

Not on our systems. Cards are held by our payment provider, and we keep only the last four digits and the card type so you can recognise which card paid for what.

Your data protection rights

What you can ask us for under the UK GDPR, what to send so the request does not bounce, how long we have to answer, and where to go if our answer is not good enough.

Who holds your information

BURAQ INT LTD is the controller of your personal information. That means it decides how and why your information is used. It holds private hire operator licence 601, issued by Hertsmere Borough Council under the Local Government (Miscellaneous Provisions) Act 1976.

Condition 45 of that licence requires a data protection policy saying how customer details are used, kept and stored. Our privacy notice is that policy, and it is the document that governs. This page is the way in: every right below links to the clause of the notice that sets out the detail.

A copy of what we hold about you

The right of access, Article 15. You can ask for a copy of your personal information, together with what we use it for, who we share it with and how long we keep it.

What to send: Your name, the telephone number or email address you booked with, and any booking references you remember. Say what period you want if you do not want everything.

Correction of something wrong

The right to rectification, Article 16. If a name, telephone number, email address or address we hold is wrong or out of date, you can have it corrected or completed.

What to send: What is wrong and what it should be. For an address or a passenger on an account, your account is faster than writing to us.

Deletion

The right to erasure, Article 17. You can ask us to delete your personal information. Some of it we are not allowed to delete: our operator licence requires the booking record to be kept, and tax law requires financial records for longer. We delete what we can and tell you exactly what we have kept and why.

What to send: Your name and the contact details you booked with, and say that you want your information deleted.

A pause on how we use it

The right to restriction, Article 18. While we check something you have questioned — that a record is accurate, or that we were entitled to use it — you can ask us to stop using it for anything else.

What to send: Which record, and what you are questioning about it.

An objection to our using it

The right to object, Article 21. Where we rely on legitimate interests you can object, and we then stop unless we can show grounds that override yours. Where we use anything for direct marketing you can object and we must stop, with no exceptions.

What to send: What use you are objecting to. For marketing, the unsubscribe link in any message we sent you is the fastest route and needs no request at all.

The information you gave us, in a reusable form

The right to data portability, Article 20. Where we hold something because you gave it to us under a contract or with your consent, you can have it in a structured, machine-readable format, or ask us to send it to somebody else.

What to send: Say that you want it in a portable format, and where it should go if it is not to come to you.

A person rather than a machine

Articles 22 and 21. Prices come from our published rate card automatically, and a booking is accepted automatically once the payment succeeds. Our payment provider screens payments for fraud and can decline one. Nothing about a journey is decided by a machine in a way that cannot be reviewed by a person.

What to send: If a payment was declined or a price looks wrong, telephone us. A person looks at it there and then rather than through a written request.

How to make a request

Use any of the routes on our contact page and say that it is about data protection. There is no form to fill in and no particular wording: a request is valid however you make it, in writing or on the telephone.

We may ask you to confirm who you are, so that we do not hand your information to somebody else.
We reply within one month. If we need more from you to find what you asked for, that month pauses until you send it. For a complex request we may extend the time, and we tell you if we do.
There is normally no charge.
If you have an account, some of this is faster there: your saved addresses, passengers and notification preferences can be changed yourself. Your bookings.

The full detail is in the notice: your rights, how long we keep it, why we use it and our lawful basis, and who we share it with.

If our answer is not good enough

Tell us first, through our complaints route. Under section 164A of the Data Protection Act 2018, inserted by the Data (Use and Access) Act 2025, we acknowledge a data protection complaint within thirty days at the latest; we aim to do it within twenty-four hours, as we do with every complaint.

You do not have to come to us first. You have the right to complain to the Information Commissioner's Office under section 165 of that Act, at ico.org.uk/make-a-complaint. You can also bring a claim in court under section 167 or 168.

What this website stores on your device, and how to refuse it, is on the cookies page.