Privacy Policy

1. Who we are

Bux Travel is a licensed PSV and private hire transport operator based in Bolton, Greater Manchester, providing minibus hire with a driver across the North West and nationwide.

For the purposes of UK data protection law, Bux Travel is the data controller for the personal information described in this policy. That means we decide what information is collected and how it is used.

2. What information we collect

We only ask for what we need to quote for a job and then carry it out. Depending on how you contact us, that may include:

• Your name — so we know who we're dealing with and who to expect at the pick-up.
• Contact details — phone number and email address, so we can send you a quote, confirm the booking and reach you on the day.
• Journey details — pick-up address or postcode, destination, date, time, number of passengers and journey type.
• Anything you choose to tell us — flight numbers, luggage, wheelchair or mobility requirements, multiple pick-up points, or other notes you add to your enquiry.
• Correspondence — the messages and emails you exchange with us about your booking.

Where you tell us about a disability, mobility need or medical requirement so that we can accommodate you, this is treated as special category data. We use it only to plan and carry out your journey safely, we keep it to a minimum, and we do not use it for any other purpose.

3. Why we use it, and our lawful basis

UK GDPR requires us to have a lawful basis for using your information. Ours are set out below.

We do not send marketing. We will not add you to a mailing list, and we will not pass your details to anyone for marketing purposes. If that ever changes, we will ask for your consent first and you will be able to withdraw it at any time.

4. Enquiries sent through WhatsApp

Most enquiries reach us through WhatsApp. It is worth being clear about how that works.

The quote form on our website does not send anything to us or store anything on our website. It simply arranges the details you have typed into a message and opens WhatsApp on your own device with that message ready. Nothing leaves your device until you press send in WhatsApp.

Once you send it, the message travels through WhatsApp, which is operated by Meta Platforms Ireland Limited. WhatsApp messages are end-to-end encrypted in transit, but Meta processes associated information such as your phone number and metadata under its own terms. We have no control over that processing. If you would rather not use WhatsApp, you can email us at saeed@buxtravel.co.uk instead.

Once your message reaches us, we hold it in our WhatsApp account and treat it under this policy in the same way as any other enquiry.

5. This website

Our website is deliberately simple.

• No cookies are set by us. We do not use tracking cookies, advertising pixels or analytics that identify you.
• No accounts, no logins, no payments are taken on this site.
• Fonts are loaded from Google Fonts. To display the site's typefaces, your browser requests them from Google's servers, which means your IP address is transmitted to Google. This happens on a great many websites and is not used by us to identify you, but you should be aware of it. Google's handling of that request is governed by its own privacy policy.
• Hosting. The site is hosted on GitHub Pages. GitHub may log standard technical information, such as IP addresses, as part of serving and protecting the site.

6. Who we share your information with

We do not sell your personal information, and we do not share it for marketing. We share it only where it is necessary:

• Our drivers — the name, contact number, pick-up point, destination and time needed to carry out your journey, plus any access requirements you have told us about.
• Another operator — if we sub-contract your booking, for example when running several vehicles in convoy. We only pass on what that operator needs to complete the job.
• Our accountant — booking and payment records, for bookkeeping and tax.
• Insurers and legal advisers — in the event of an incident, claim or dispute.
• Licensing authorities, the DVSA, or the police — where we are legally required to provide information.

Your information is stored and processed in the UK, other than where a service provider such as WhatsApp or GitHub processes it outside the UK. Where that happens, we rely on those providers' own safeguards for international transfers, such as the UK International Data Transfer Addendum or an adequacy decision.

7. How long we keep it

When information is no longer needed for the purpose it was collected, we delete it or securely destroy it.

8. Keeping your information secure

We take reasonable and appropriate steps to protect your information, including access controls on the devices and accounts used to run the business, device passcodes and screen locks, keeping software up to date, and limiting access to booking details to the people who actually need them to do the job.

No method of transmission or storage is completely secure. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours of becoming aware of it, and tell you directly where the law requires us to.

9. Your rights

Under UK data protection law you have the right to:

• Be informed about how your information is used — which is the purpose of this policy.
• Access a copy of the personal information we hold about you.
• Rectification — have inaccurate information corrected.
• Erasure — ask us to delete your information, where we have no ongoing lawful reason to keep it.
• Restrict processing — ask us to pause using your information while a concern is resolved.
• Object to processing carried out on the basis of our legitimate interests.
• Data portability — receive your information in a portable format.
• Withdraw consent at any time, where consent is the basis we rely on.

To exercise any of these, contact us using the details below. We will respond within one month. There is no charge, and we may ask you to confirm your identity before releasing information.

10. Children

Our services are booked by adults, and this website is not directed at children. We do not knowingly collect information directly from children.

Where we carry out school or college transport, or where children travel as part of a group booking, we receive passenger details from the school, organisation or responsible adult making the booking. We use that information only to carry out the journey safely, and we keep it for no longer than necessary.

11. Changes to this policy

We may update this policy from time to time — for example, if we change how we take bookings or start using a new service provider. The date at the top of this page shows when it was last revised. Where changes are significant, we will make that clear on this page.

12. Contact and complaints

If you have a question about this policy, want to exercise one of your rights, or are unhappy with how we have handled your information, please contact us first — we would rather put things right directly.

Complaining to the ICO

You also have the right to complain to the Information Commissioner's Office, the UK's independent data protection regulator, at any time. Contacting us first does not affect that right.

← Back to the website