Privacy notice

This site is provided by The Department for Transport in conjunction with the Government Digital Service (GDS), part of the Cabinet Office.

The Department for Transport is the data controller for any personal information published on this site and any personal information collected via cookies. 

The Cabinet Office is the data controller for personal information processed as part of providing the underlying platform such as IP addresses. 

A data controller determines how and why personal data is processed. For more information, read the Cabinet Office’s entry in the Data Protection Public Register.

What data we collect and why we need it

GDS collects some data automatically when you visit this site. This includes your Internet Protocol (IP) address, and details of which version of web browser you use. GDS uses this information to provide you with access to the website and to monitor use of the site to identify security threats.

Where you provide your consent The Department for Transport uses Google Analytics or Google Analytics 4 to collect information about how you use this website. 

No directly identifiable personal information is collected through Google Analytics or Google Analytics 4 (for example your name or address).

The Department for Transport will not identify you through analytics information, and will not combine analytics information with other data sets in a way that would identify who you are.

The Department for Transport uses this information to make sure the website is meeting the needs of its users and to make improvements. 

See the Cookies page for more information about the cookies used on this website. 

With regard to each of your visits to this site, we may automatically collect this information:

  • technical information, including the type of mobile device you use, a unique identifier (for example, mobile network information, your mobile operating system, the type of mobile browser you use (Device Information); 
  • details of your use of any your visits to any of our site and the resources that you access (Log Information); 
  • internet protocol (IP) address used to connect your computer to the Internet, browser type and version, browser plug-in types and versions, operating system and platform, information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site, (including date and time); product you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information 
  • location information. e.g. a region within the United Kingdom 
  • we may also use GPS technology to determine your current location. Some of our location-enabled services require your personal data for the feature to work. If you wish to use the particular feature, you will be asked to consent to your data being used for this purpose. You can enable or disable location services when you use our service at any time through your mobile device settings (location information) 

Information we receive from other sources

We may receive information about you if you use any of the sites we operate or the other services we provide. In this case we will have informed you when we collected that data that it may be shared internally and combined with data collected on our site. We are also working closely with third parties (including, for example, business partners, subcontractors, delivery services, analytics providers, search information providers) and may receive information about you from them. This data can be viewed by authorised people in the Department for Transport (DfT) and our suppliers, to: 

  • improve the site by monitoring how you use it 
  • gather feedback to improve our services, for example our email alerts 
  • respond to any feedback you send us, if you’ve asked us to 
  • send email alerts to users who request them 
  • provide you with information about local services if you want it. 

Personal information we collect about you 

Newsletter sign up form

We ask for your name and email address when you sign up to our newsletter so we can contact you to send our periodical newsletter or to contact you about ‘it’s everyone’s journey’ activities. Your data will be kept securely and used only for the purposes of distributing our newsletter or contacting you about ‘it’s everyone’s journey’ activities. You can let us know at any time if you do not wish to remain on this distribution list or if you would like to update your contact details – please reply and let us know. 

Sign up your organisation to become a registered partner

We ask for your name and email address when you register to become a partner so we can contact you about ‘it’s everyone’s journey’ activities that might be relevant. We may share your name and email address with our supplier (23Red) but only for the purposes of delivering and supporting ‘it’s everyone’s journey’. We will not use your data for any purpose outside of ‘it’s everyone’s journey’. The Department for Transport (DfT) is the ‘data controller’ for the ‘it’s everyone’s journey’ campaign for the purposes of data protection law. Further details on DfT’s privacy policy can be found at www.gov.uk/dft/privacy-policy. 

Protecting your information 

We use the Amazon RDS server in the UK London for securely storing personal data. When you sign up to our newsletter or to become a partner, you agree to your data being stored in this way. You agree for us to collect your full name and email address and agree to mailchimp privacy policy.

Legal basis for processing your data

GDS’s legal basis for processing personal data in relation to site security is their legitimate interests in ensuring the security and integrity of the platform. 

GDS’s legal basis for processing all other personal data is that it’s necessary to perform a task in the public interest or in the exercise of our functions as a government department.

The Department for Transport’s lawful basis for collecting your information with Google Analytics or Google Analytics 4 is your consent.

What we do with your data

GDS or The Department for Transport may share data with other government departments, agencies and public bodies where there is a legitimate and justifiable business need. Data may also be shared with technology suppliers, such as hosting providers, which act as data processors.

We will not:

  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes
  • use the analytics data to identify individuals i.e. by linking with other datasets

We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.

Data related to the underlying platform is processed and stored in the European Economic Area (EEA). Data collected by Google Analytics or Google Analytics 4 may be transferred outside the EEA for processing.

How long we keep your data

We will only retain your personal data for as long as it is needed for the purposes set out in this document or for as long as the law requires us to.

GDS will delete access log data after 120 days. 

The Department for Transport will delete Google Analytics or Google Analytics 4 data after 2 years.

Children’s privacy protection

This website is not designed for, or intentionally targeted at, children 13 years of age or younger. Neither GDS or The Department for Transport intentionally collect or maintain data about anyone under the age of 13.

Where your data is processed and stored

Data related to the underlying platform is processed and stored in the European Economic Area (EEA). Data collected by Google Analytics or Google Analytics 4 may be transferred outside the EEA for processing. 

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites. 

We may share your data with our suppliers but only for the purposes of delivering and supporting ‘it’s everyone’s journey’ and any service that you have signed up for e.g. ordering printed materials. 

Your rights

You have the right to request:

  • information about how your personal data is processed
  • a copy of that personal data
  • that anything inaccurate in your personal data is corrected immediately

You can also:

  • raise an objection about how your personal data is processed
  • request that your personal data is erased if there is no longer a justification for it
  • ask that the processing of your personal data is restricted in certain circumstances

If you have any of these requests, get in contact with gds-privacy-office@digital.cabinet-office.gov.uk.

Links to other websites

This website contains links to other websites. This privacy policy only applies to this website. If you go to another website from this one, read the privacy policy on that website to find out what it does with your information. 

Following a link to the ‘it’s everyone’s journey’ website from another website 

If you come to ‘it’s everyone’s journey’ from another website, we may receive information from the other website. We don’t use this data. You should read the privacy policy of the website you came from to find out more about this. 

Browser upgrade prompt 

We log a cookie the first time you visit the ‘it’s everyone’s journey’ website to let us know you’ve visited once. If you’re using an out-of-date browser the next time you visit, we’ll show you a message suggesting you upgrade. We’ll also save a cookie that lets us know you don’t want to see the prompt if you dismiss it. 

Contact us or make a complaint

Contact the GDS Privacy Team at gds-privacy-office@digital.cabinet-office.gov.uk if you:

  • have a question about anything in this privacy notice
  • think that your personal data has been misused or mishandled

You can also contact the Cabinet Office and The Department for Transport’s Data Protection Officers (DPO):

Data Protection Officer
DPO@cabinetoffice.gov.uk
Cabinet Office
70 Whitehall
London
SW1A 2AS

Data Protection Officer
dataprotectionofficer@dft.gov.uk
3rd Floor
One Priory Square
Hastings
East Sussex
TN34 1EA

The DPOs provide independent advice and monitoring of our use of personal information.

You can also make a complaint to the Information Commissioner, who is an independent regulator.

Information Commissioner
casework@ico.org.uk

Telephone: 0303 123 1113
Textphone: 01625 545860
Monday to Friday, 9am to 4:30pm
Find out about call charges

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Changes to this notice

This notice may be changed from time to time. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy notice will apply to you and your data immediately.

If these changes affect how your personal data is processed, GDS and The Department for Transport will take reasonable steps to let you know.

Last updated 07/02/24.