Our visitors notice lets you know what data will be collected and how it will be used and processed when you visit a National Express site.
This privacy notice applies to you if you are a visitor to any site in the UK that is exclusively occupied or otherwise managed by a National Express group company, such as its corporate offices, its owned or managed coach stations, its owned or managed bus depots, its managed coach or bus stations or interchanges at airports and its travel shops.
This privacy notice explains what personal data we collect about you and what we do with it. It also explains your rights in respect of that personal data and it informs you about what to do if you have any questions or complaints about our use of your personal data.
For clarity, visitors to our managed coach and bus stations who then become passengers on our coach or bus services and visitors to our travel shops who purchase tickets for travel on our bus or coach services should also refer to our customer and passenger privacy notice for information about what we do with those persons’ personal data in those capacities.
The National Express group company which occupies or manages the site that you are visiting is the controller of your personal data that is collected for the purposes explained in this privacy notice.
This will be that one of the following named National Express group companies, depending on the site you are visiting:
National Express Group PLC
National Express Limited
West Midlands Travel Limited
The Kings Ferry Limited
E. Clarke & Son (Coaches) Limited
Tayside Public Transport Company Limited
You can ask at the reception area, information desk or sales desk at the relevant site you visit which National Express group company is the data controller for that site.
The data controller’s representative for the purposes of this privacy notice is the National Express UK Data Protection Officer, who can be contacted using the contact details set out at the end of this notice.
We collect information about you that we need from you as a visitor to our sites, which may include:
We collect this information in the following ways:
You should note that we currently use CCTV at all of our exclusively occupied or managed sites.
We will record visitor information, such as names, organisation/role and any vehicle registration number, in the visitor log books that we maintain at our sites.
If you have an accident or health incident at one of our sites, we will also collect details about that accident or incident in an accident book.
If you are a regular visitor to one of our bus depots, you will also be issued with a ‘Health & Safety Site Passport’ in which you can record your name and organisation/role, as well as details of your line manager at your organisation and your next of kin and their respective contact details. You will retain this booklet with you while on site and take it with you when you leave, but if there is an accident or emergency while you are on site, we may need to access and use this booklet and the information contained therein to manage the accident or incident and inform your relevant contacts about it.
We process your personal data for the following purposes:
Where we have a legal duty to ensure health & safety at our sites, we process your personal data captured by CCTV or other visual/audio recording equipment and/or recorded in relation to accidents or incidents at our sites in order to fulfill that duty. We otherwise process your personal data on the basis of our legitimate interests, which are to achieve all those other purposes specified above.
You have the right to object to our use of your personal data where we do this only on the basis of our legitimate interest. However, we do not have to stop processing personal data where we have compelling grounds that override your interests, or where we need to process your data in order to establish, exercise or defend legal claims. If you have any objections please contact the National Express UK Data Protection Officer (details below). Where we use your personal data because we have a legal duty to do so, there is no right to object.
If we process your personal data on the basis that we have obtained your consent to do so (which is likely to be for a purpose that is not described in this privacy notice) you may withdraw that consent at any time and we will give you further information at the time of obtaining your consent on how to withdraw consent.
We may have a legal duty to process your personal data, for example to seek to ensure your health and safety, and the health and safety of others, at our sites.
You have no obligation to provide us with any personal data. However, we ask you for your personal data as a condition of visiting our sites. If you do not provide us with the information needed we may refuse you entry to our sites.
We may share your personal data with:
There may be occasions where it is necessary for us to transfer your personal data to a country outside of the European Economic Area (“EEA”), including where our suppliers or subcontractors who process your personal data on our behalf are based in such a country. It is possible that the country concerned may not be deemed to provide a similar level of protection for individuals’ rights in relation to their personal data as in the EEA. Where that is the case, we have entered into appropriate contracts with such data processors, based on the standard contractual clauses approved by the European Commission, a copy of which can be found here, such that your personal data should be afforded the same level of protection as when it is processed in the EEA.
We will process your personal data for as long as necessary to ascertain who visited our sites and/ to deal with any legal issues that may arise concerning our sites or incidents at our sites or otherwise concerning your visit to our site or others’ visits to our site at around the same time as your visit.
We retain visitor log books for at least three (3) years after they are created and CCTV or other visual/audio recordings for at least six (6) months after they are captured, or longer to deal with the legal issues noted above unless/until those legal issues are resolved.
You have a number of rights in relation to your personal data. These include the right, subject to exceptions, to:
Please contact the National Express UK Data Protection Officer if you wish to exercise any of these rights.
You also have the right in some circumstances to receive a copy of your personal data in a portable format. This right is limited to personal data that you have provided to us and is processed on the basis of your consent or any contract with us. It does not cover personal data that we process on the grounds of legitimate interest.
If you have any questions or complaints about how we process your personal data, you should contact the National Express UK Data Protection Officer:
You also have the right to complain to the UK Information Commissioner's Office about how we process your personal data. You can do this by contacting them on their helpline: 0303 123 1113.
Back to top
Official Coach Supplier to Wembley Stadium
© Copyright National Express Ltd 2019