1. Data Controller

VELMOURNE is a trading name of LTV Production Limited (Company No. 12217724, registered office Unit 112 Marsh Wall, London E14 9SG), which is the data controller for the personal data we process. Contact: [email protected].

2. What We Collect

When you use our service, we collect: your name, email address, mobile number (verified by a one-time text message code), pickup and drop-off addresses, flight number (for airport transfers), booking history, and your loyalty credit balance. Payment card details are processed securely by Stripe — we never see or store your card number.

3. Why We Collect It

We use your data solely to run your bookings: to take payment, to let your chauffeur know who to meet and where, to contact you about your journey, and to operate your loyalty credit. We use it for our own business only — we do not sell your data, and we do not share it with advertisers or marketing companies.

4. Legal Basis

We process your data under: contract performance (to fulfil your booking), legal obligation (keeping booking and payment records for tax law), and legitimate interests (preventing fraud — for example, we keep a minimal record of verified phone numbers so the one-time welcome discount can't be claimed repeatedly).

5. Third Parties (Processors)

Your data is handled by these service providers, each only for its stated purpose: Stripe (payment processing and refunds), Twilio (sending your phone verification text), Google (address lookup when you type a pickup/drop-off; sign-in with Google if you choose it; and our private operating calendar, which holds your booking details so your chauffeur is in the right place), Apple (sign-in with Apple if you choose it), AeroDataBox (flight-number lookup — only the flight number and date are sent, nothing about you), and Cloudflare (website hosting and our database). We do not sell your data to anyone.

6. Data Retention

We retain booking and payment records for 6 years (required for tax and legal compliance). Account data is kept until you delete your account. When you delete your account, your name, email, phone number and sign-in details are erased immediately; past booking records are kept in anonymised form for the 6-year period.

7. Your Rights

Under UK GDPR, you have the right to: access your data, correct inaccurate data, request deletion, restrict processing, data portability, and object to processing. You can download a full copy of your data and delete your account yourself at any time from your account page — or contact [email protected] and we'll do it for you.

8. Cookies

We use one strictly necessary cookie: it keeps you signed in to your account. We use no analytics cookies, no advertising cookies, and no tracking of any kind — which is why you don't see a cookie banner on this site. If that ever changes, we will ask for your consent first.

9. Security

All traffic to this site is encrypted (HTTPS). Passwords are stored only as salted cryptographic hashes. Card payments happen entirely on Stripe's secure systems.

10. Contact & Complaints

For privacy queries, contact [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Privacy Policy