Privacy Policy

1. Who We Are

OnPoint Cars is the data controller for personal data processed in connection with our services.

Contact:
OnPoint Cars
Manchester, United Kingdom
Email: hello@onpointcars.co.uk

If you have any questions about how we handle your personal data, or wish to exercise any of your rights, please contact us at the email address above.

2. What Personal Data We Collect

We only collect data that is necessary to take your booking and provide your journey. This includes:

• Identity data: your full name
• Contact data: email address and phone number
• Journey data: pickup address, drop-off address, travel date and time, and any special instructions you provide
• Payment data: payment is processed securely by our third-party payment processor. We do not store your card number, CVV, or full payment details on our systems at any point
• Technical data: IP address, browser type, and pages visited — collected automatically when you use our website
• Communication data: records of any emails or messages you send us

We do not collect any special category data (such as health information, ethnicity, or biometric data) unless you voluntarily disclose it to us in the context of a booking requirement (for example, informing us of an accessibility need). In that case, we process it solely to fulfil your request.

3. How We Collect Your Data

• Directly from you — when you complete our online booking form, contact us by email, or call us
• Automatically — via cookies and similar technologies when you browse our website (see our Cookie Policy)

4. Why We Use Your Data — Legal Bases

Under UK GDPR, we must have a lawful basis for every processing activity. The table below sets out our purposes and the legal basis for each.

5. How Long We Keep Your Data

We do not keep your data any longer than necessary. The following retention periods apply:

• Booking records (name, contact details, journey details) — retained for 7 years from the date of the booking, in line with HMRC record-keeping requirements
• Communication records (emails, enquiries) — retained for 2 years from the date of last contact
• Website analytics data — retained for up to 26 months as set by Google Analytics default retention settings; you can opt out at any time
• Payment transaction records — retained by our payment processor in accordance with their own privacy policy and applicable financial regulations

When data reaches the end of its retention period, it is securely deleted or anonymised.

6. Who We Share Your Data With

We do not sell your personal data. We share it only where necessary to deliver our services:

Payment Processing

Payments are handled by our third-party payment processor. Your card data is transmitted directly to them using industry-standard encryption and is never stored on our servers. Their processing is governed by their own privacy policy.

Google Maps

When you use our booking form and have consented to functional cookies, your journey addresses are sent to Google's Maps API to calculate routes and display maps. This is governed by Google's Privacy Policy.

Google Analytics

Where you have consented to analytics cookies, anonymised data about your visit (pages viewed, device type, approximate location) is shared with Google Analytics. This is governed by Google's Privacy Policy. We have enabled IP anonymisation.

Legal Disclosure

We may disclose your data to law enforcement, regulatory bodies, or courts where we are legally required to do so.

All third-party processors we use are required to handle your data in accordance with UK GDPR and are subject to appropriate data processing agreements.

7. Transfers Outside the UK

Google Analytics and Google Maps may transfer data to the United States. Google has implemented Standard Contractual Clauses (SCCs) approved for use under UK GDPR as an appropriate safeguard for such transfers. For further information, see Google's compliance documentation.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you (a Subject Access Request)
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your data where there is no lawful reason for us to continue processing it
• Right to restriction — you can ask us to restrict processing of your data in certain circumstances
• Right to data portability — you can request a machine-readable copy of the data you provided to us
• Right to object — you can object to processing based on legitimate interests at any time
• Right to withdraw consent — where we rely on consent (e.g. analytics and functional cookies), you can withdraw it at any time via the cookie banner or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal

To exercise any of these rights, email us at hello@onpointcars.co.uk. We will respond within one calendar month. We may ask you to verify your identity before acting on your request.

9. How to Complain

If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with the UK's data protection authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concern directly before you contact the ICO, so please reach out to us first.

10. Cookies

We use cookies on our website. For full details of the cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy.

11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include secure HTTPS connections, restricted internal access to booking data, and encrypted data storage.

No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security. If you suspect a data breach affecting your personal data, please contact us immediately at hello@onpointcars.co.uk.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

---

Last updated: 17 May 2026