1 2<!DOCTYPE html> 3<html lang="en"> 4<head> 5 <meta charset="UTF-8"> 6 <meta name="viewport" content="width=device-width, initial-scale=1.0"> 7 <title>Privacy notice | Raileasy</title> 8 <link rel="preconnect" href="https://rsms.me"> 9 <link rel="preconnect" href="https://challenges.cloudflare.com"> 10 <link rel="stylesheet" href="/assets/style.css"> 11 <link rel="stylesheet" href="/dist/whitelabel.css"> 12 <link rel="preload" href="https://rsms.me/inter/inter.css" as="style"> 13 <link rel="preload" href="https://rsms.me/inter/font-files/InterVariable.woff2?v=4.1" as="font" type="font/woff2" crossorigin> 14 <link rel="preload" href="/assets/style.css" as="style"> 15 <link rel="modulepreload" href="/assets/main.js" as="script"> 16 <link rel="modulepreload" href="/assets/vendor.js" as="script"> 17 <link rel="modulepreload" href="/assets/core.js" as="script"> 18 <link rel="preload" href="/dist/whitelabel.css" as="style"> 19
19<script defer type="module" src="/assets/main.js"></script>
19 20
20<script defer type="module" src="/assets/vendor.js"></script>
20 21
21<script defer type="module" src="/assets/core.js"></script>
21 22
22<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit" defer></script>
22 23 <link rel="apple-touch-icon" sizes="152x152" href="/apple-touch-icon.png"> 24 <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"> 25 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png"> 26 <link rel="mask-icon" href="/safari-pinned-tab.svg" color="#0d59a2"> 27 <link rel="shortcut icon" href="/favicon.ico"> 28 <meta name="keywords" content="privacy, GDPR, policy, data protection, data erasure"/> 29 <meta name="description" content="This privacy policy is for this website and is served by Raileasy Ltd. It governs the privacy of its users who choose to use the TrainSplit website." /> 30 <link rel="manifest" href="/manifest.json"> 31 <meta name="theme-color" content="#0d59a2"> 32 <meta name="app-env" content="Production"> 33 <meta name="look-ahead" content="104"> 34 <meta name="content-realm" content="raileasy"/> 35 <meta name="brand-name" content="Raileasy"/> 36 <meta name="payment-method" content="Stripe"/> 37 <meta name="search-default" content="False"> 38 <meta name="brand-splits-enabled" content="True"> 39 <meta name="brand-split-fee" content="150"> 40 <meta name="brand-any-card-enabled" content="True"> 41 <meta property="og:title" content="Privacy notice | Raileasy"/> 42 <meta property="og:description" content="This privacy policy is for this website and is served by Raileasy Ltd. It governs the privacy of its users who choose to use the TrainSplit website."/> 43 <meta property="og:image" content="https://directus.trainsplit.com/assets/efaabeef-2e04-458c-a26c-0c342cd70103"/> 44 <meta name="turnstile" content="0x4AAAAAAB8A1CvxpZS0yCAz"> 45 <meta name="hcaptcha" content="195cce24-241a-4c0a-8a06-4dd00f98e2b4"> 46 <meta name="stripe" content="pk_live_51Mg6ZULCeRZDq69e2EcstjWkpBx2SpYmnvSWRhH58hxJBpSPzXeSmqjrxjnVG2s7bPBmmcotIg4tmSj6A1FZoBoQ00BoLIz3FU"> 47 <link rel="canonical" href="https://raileasy.co.uk/privacy"/> 48
48<script id="border-control" type="application/json"> 49 {"apiKey":"AIzaSyA8qxNJSkbiqDhyDbT-CHG_YZML7W--q58","authDomain":"trainsplit.firebaseapp.com","projectId":"trainsplit","storageBucket":"trainsplit.appspot.com","messagingSenderId":"5800411061","appId":"1:5800411061:web:3ada2b6e921607077e23fc"} 50 </script>
50 51</head> 52<body> 53<div id="app"></div> 54 55<div id="static-body" class="flex flex-col h-screen my-auto"> 56 <nav class="bg-white dark:bg-slate-900 shadow-sm dark:shadow-none dark:border-b dark:border-white/10 z-10"> 57 <div class="mx-auto px-4 sm:px-6 lg:px-8"> 58 <div class="flex h-16 justify-between"> 59 <div class="flex"> 60 <a href="/" class="flex shrink-0 items-center cursor-pointer"> 61 <img class="main-logo-nav h-7 md:h-6 lg:h-8 w-auto dark:hidden" src="/dist/whitelabel_light_logo.svg" alt="Raileasy"> 62 <img class="main-logo-nav h-7 md:h-6 lg:h-8 w-auto hidden dark:block" src="/dist/whitelabel_dark_logo.svg" alt="Raileasy"> 63 </a> 64 <div class="hidden md:ml-6 md:flex md:space-x-8"> 65 <a href="/" class="inline-flex items-center border-b-2 border-transparent px-1 pt-1 text-sm font-medium text-gray-600 dark:text-slate-400 hover:border-gray-300 hover:text-gray-700 dark:hover:text-slate-300">Home</a> 66 <a href="/careers" class="inline-flex items-center border-b-2 border-transparent px-1 pt-1 text-sm font-medium text-gray-600 dark:text-slate-400 hover:border-gray-300 hover:text-gray-700 dark:hover:text-slate-300">Careers</a> 67 <a href="#" class="inline-flex items-center border-b-2 border-transparent px-1 pt-1 text-sm font-medium text-gray-600 dark:text-slate-400 hover:border-gray-300 hover:text-gray-700 dark:hover:text-slate-300 gap-x-2"> 68 Resources 69 <svg class="svg-inline--fa fa-chevron-down fa-fw h-3" aria-hidden="true" focusable="false" data-prefix="fas" data-icon="chevron-down" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path class="" fill="currentColor" d="M233.4 406.6c12.5 12.5 32.8 12.5 45.3 0l192-192c12.5-12.5 12.5-32.8 0-45.3s-32.8-12.5-45.3 0L256 338.7 86.6 169.4c-12.5-12.5-32.8-12.5-45.3 0s-12.5 32.8 0 45.3l192 192z"></path></svg> 70 </a> 71 </div> 72 </div> 73 <div class="hidden md:ml-6 md:items-center md:flex"> 74 <a href="/checkout" class="shrink-0 py-2 px-3.5 rounded-md flex items-center mr-2 gap-x-2.5 text-sm font-semibold text-gray-600 dark:text-slate-300"> 75 <span class="sr-only">Basket</span> 76 <svg class="svg-inline--fa fa-basket-shopping-simple fa-fw h-5" aria-hidden="true" focusable="false" data-prefix="fas" data-icon="basket-shopping-simple" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"> 77 <path class="" fill="currentColor" d="M243.1 2.7c11.8 6.1 16.3 20.6 10.2 32.4L171.7 192l232.6 0L322.7 35.1c-6.1-11.8-1.5-26.3 10.2-32.4s26.2-1.5 32.4 10.2L458.4 192l85.6 0c17.7 0 32 14.3 32 32s-14.3 32-32 32L492.1 463.5C485 492 459.4 512 430 512L146 512c-29.4 0-55-20-62.1-48.5L32 256c-17.7 0-32-14.3-32-32s14.3-32 32-32l85.6 0L210.7 12.9c6.1-11.8 20.6-16.3 32.4-10.2zM144 296a24 24 0 1 0 0-48 24 24 0 1 0 0 48zm312-24a24 24 0 1 0 -48 0 24 24 0 1 0 48 0z"></path> 78 </svg> 79 0 80 </a> 81 <div class="relative"> 82 <button class="relative flex shrink-0 py-2 px-3.5 items-center rounded-md text-sm gap-x-2 border border-gray-200 hover:border-gray-300 dark:border-white/10 dark:hover:border-white/20" type="button" aria-expanded="false"> 83 <svg class="svg-inline--fa fa-user fa-fw h-4" aria-hidden="true" focusable="false" data-prefix="fas" data-icon="user" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"> 84 <path class="" fill="currentColor" d="M224 256A128 128 0 1 0 224 0a128 128 0 1 0 0 256zm-45.7 48C79.8 304 0 383.8 0 482.3C0 498.7 13.3 512 29.7 512l388.6 0c16.4 0 29.7-13.3 29.7-29.7C448 383.8 368.2 304 269.7 304l-91.4 0z"></path> 85 </svg> 86 <div class="flex flex-col text-right animate-pulse hidden lg:block"> 87 <div class="h-2 w-16 rounded bg-gray-600 hover:bg-gray-700 dark:bg-slate-400 dark:hover:bg-slate-300 my-2"></div> 88 </div> 89 </button> 90 </div> 91 </div> 92 93 <div class="-mr-2 flex items-center md:hidden gap-x-2"> 94 <a href="/checkout" class="shrink-0 py-2 px-3.5 rounded-md flex items-center gap-x-2.5 text-sm font-semibold text-gray-600 dark:text-slate-300">
95 <span class="sr-only">Basket</span> 96 <svg class="svg-inline--fa fa-basket-shopping-simple fa-fw h-5" aria-hidden="true" focusable="false" data-prefix="fas" data-icon="basket-shopping-simple" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"> 97 <path class="" fill="currentColor" d="M243.1 2.7c11.8 6.1 16.3 20.6 10.2 32.4L171.7 192l232.6 0L322.7 35.1c-6.1-11.8-1.5-26.3 10.2-32.4s26.2-1.5 32.4 10.2L458.4 192l85.6 0c17.7 0 32 14.3 32 32s-14.3 32-32 32L492.1 463.5C485 492 459.4 512 430 512L146 512c-29.4 0-55-20-62.1-48.5L32 256c-17.7 0-32-14.3-32-32s14.3-32 32-32l85.6 0L210.7 12.9c6.1-11.8 20.6-16.3 32.4-10.2zM144 296a24 24 0 1 0 0-48 24 24 0 1 0 0 48zm312-24a24 24 0 1 0 -48 0 24 24 0 1 0 48 0z"></path> 98 </svg> 99 0 100 </a> 101 <button type="button" aria-expanded="false" class="inline-flex items-center justify-center rounded-md py-2 px-3 text-gray-600 hover:text-gray-700 dark:text-slate-400 dark:hover:text-slate-300 focus:outline-hidden focus:outline-2 focus:outline-inset focus:outline-primary-700 border border-gray-200 hover:border-gray-300 dark:border-white/10 dark:hover:border-white/20"> 102 <span class="sr-only">Open main menu</span> 103 <svg class="svg-inline--fa fa-bars fa-fw block w-3" aria-hidden="true" focusable="false" data-prefix="fas" data-icon="bars" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"> 104 <path class="" fill="currentColor" d="M0 96C0 78.3 14.3 64 32 64l384 0c17.7 0 32 14.3 32 32s-14.3 32-32 32L32 128C14.3 128 0 113.7 0 96zM0 256c0-17.7 14.3-32 32-32l384 0c17.7 0 32 14.3 32 32s-14.3 32-32 32L32 288c-17.7 0-32-14.3-32-32zM448 416c0 17.7-14.3 32-32 32L32 448c-17.7 0-32-14.3-32-32s14.3-32 32-32l384 0c17.7 0 32 14.3 32 32z"></path> 105 </svg> 106 </button> 107 </div> 108 </div> 109 </div> 110 </nav> 111 <div class="my-auto"> 112 113 114<div id="static-content"> 115 <div class="mx-auto"> 116 <div id="static-content-messages"> 117 118 </div> 119 120 <div class="page-root"> 121 <div class="pb-8"> 122 <div class="flex flex-col gap-y-8"> 123 <header id="static-content-header"> 124 <h1 id="pageTitle" class="text-2xl/7 sm:text-3xl font-bold tracking-tight text-gray-900 dark:text-white">Privacy notice</h1> 125 </header> 126 <main class="mx-auto"> 127 <article id="static-content-body" class="prose dark:prose-invert max-w-none col-span-2 directus"> 128 <p><span>v3.0.6</span></p> 129<p><span>Last reviewed August 2026</span></p> 130<p><span>Legal entity processing data: Raileasy Ltd, registered at 10 Station Parade, Wanstead E11 1QF (referred to as âusâ in this document)</span></p> 131<p><span>As a responsible company, the stewardship of your personal data provided to us is a top priority. As such, we feel itâs important that we detail what data of yours we handle, why we need it and â most importantly â how we keep it safe.</span></p> 132<h2><span>What data is collected, and why?</span></h2> 133<p><span>In order to fulfil your booking with a Raileasy-powered brand, we may need to collect the following PII (Personal Identifiable Information) from you:</span></p> 134<table border="1px"> 135<thead> 136<tr> 137<th> 138<p><strong>Data Type</strong></p> 139<p><em><span>What data do we collect?</span></em></p> 140</th> 141<th> 142<p><strong>Why we need it</strong></p> 143<p><em><span>Basis for processing the data</span></em></p> 144</th> 145<th> 146<p><strong>Who handles this</strong></p> 147</th> 148</tr> 149</thead> 150<tbody> 151<tr> 152<td> 153<ul> 154<li><span>Full name</span></li> 155<li><span>Full physical address</span></li> 156<li><span>Telephone number</span></li> 157</ul> 158<p><span> </span></p> 159</td> 160<td> 161<ul> 162<li><span>Assist with payment processing</span></li> 163<li><span>Pass through to industry systems for Ticket on Departure (ToD) fulfilment</span></li> 164<li><span>Pass through to the reservations system, for sleeper bookings only (only name and telephone number)</span></li> 165<li><span>Assist with support requests if you contact us</span></li> 166</ul> 167</td> 168<td> 169<ul> 170<li><span>Us</span></li> 171<li><span>Google Cloud (Google LLC)</span></li> 172<li><span>Rail Delivery Group (ATOC Ltd) who control the Live Sales Management database for ToD bookings</span></li> 173<li><span>If you make a sleeper reservation, Sqills Products B.V. who provide technology ("S3 Passenger") that supports rail reservations in Great Britain</span></li> 174<li><span>Third-party support providers (at the time of writing, Help Scout PBC)</span></li> 175<li><span>Third-party authentication system (customer name only), Firebase</span></li> 176<li><span>Third-party payment provider (one of Stripe or Braintree and potentially additionally Apple Payments Services Limited or Google UK Limited if you use Apple/Google Pay)</span></li> 177</ul> 178</td> 179</tr> 180<tr> 181<td> 182<ul> 183<li><span>Full name</span></li> 184<li><span>Email address</span></li> 185</ul> 186</td> 187<td> 188<ul> 189<li><span>User account management</span></li> 190<li><span>To send service emails to you, such as booking confirmations, e-tickets and disruption emails</span></li> 191<li><span>Newsletter-based marketing, if opted in.</span></li> 192<li><span>Assist with support requests if you contact us</span><span></span></li> 193<li><span>Collect customer reviews<br></span></li> 194</ul> 195</td> 196<td> 197<ul> 198<li><span>Us</span></li> 199<li><span>Google Cloud (Google LLC)</span></li> 200</ul> 201<ul> 202<li><span>Third-party newsletter provider (at the time of writing, Spotler Limited)</span></li> 203<li><span>Third-party email service provider (at the time of writing, Amazon Web Services Inc.)</span></li> 204<li><span>Third-party support providers (at the time of writing, Help Scout PBC)</span></li> 205<li><span>Third-party authentication system, Firebase</span></li> 206<li><span>Third-party reviews provider (see below)</span></li> 207</ul> 208<p></p> 209</td> 210</tr> 211<tr> 212<td> 213<ul> 214<li><span>Payment card information</span></li> 215</ul> 216</td> 217<td> 218<ul> 219<li><span>Assist with payment processing</span></li> 220</ul> 221</td> 222<td> 223<ul> 224<li><span>Third-party payment provider (one of Stripe or Braintree and potentially additionally Apple Payments Services Limited or Google UK Limited if you use Apple/Google Pay)</span> 225<ul> 226<li><strong>We do not handle or hold the raw card details ourselves, in accordance with PCI-DSS guidelines</strong></li> 227</ul> 228</li> 229</ul> 230</td> 231</tr> 232<tr> 233<td> 234<p>Technical data related to your visit such as:</p> 235<ul> 236<li>IP address,</li> 237<li>TLS Fingerprint</li> 238<li>User-Agent</li> 239</ul> 240</td> 241<td> 242<ul> 243<li><span>This allows us to assist with stopping bot traffic</span></li> 244</ul> 245</td> 246<td> 247<ul> 248<li><span>Our CAPTCHA service providers (Cloudflare, ReCAPTCHA by Google LLC, hCaptcha by Intuition Machines Inc.)</span></li> 249</ul> 250</td> 251</tr> 252<tr> 253<td> 254<ul> 255<li>Technical data related to your visit such as IP address, browser version and device details</li> 256</ul> 257</td> 258<td> 259<ul> 260<li><span>This assists us with understanding issues with crashes and other technical failures you may experience whilst using our website and/or mobile apps</span></li> 261</ul> 262</td> 263<td> 264<ul> 265<li><span>Our analytics provider Google Analytics (all frontends)/Firebase (mobile apps only)</span></li> 266<li><span>Google Cloud (Google LLC)</span></li> 267</ul> 268</td> 269</tr> 270<tr> 271<td> 272<ul> 273<li>Passwords</li> 274<li>Email addresses</li> 275<li>User agents</li> 276<li>IP addresses</li> 277</ul> 278</td> 279<td> 280<ul> 281<li><span>To manage customer accounts and authentication</span></li> 282</ul> 283</td> 284<td> 285<ul> 286<li><span>Our authentication provider Firebase </span></li> 287</ul> 288</td> 289</tr> 290<tr> 291<td> 292<ul> 293<li><span>First name</span></li> 294<li><span>
294Booking reference</span></li> 295<li><span>Product descriptor (e.g. 'Train tickets from x to y')</span></li> 296</ul> 297</td> 298<td> 299<ul> 300<li><span>To collect customer feedback that we can use to improve the service<br></span></li> 301</ul> 302</td> 303<td> 304<ul> 305<li><span>Trustpilot A/S (registration number 30276582), Pilestraede 58, 5th Floor, 1112 Copenhagen K, Denmark<br></span></li> 306</ul> 307</td> 308</tr> 309</tbody> 310</table> 311<p dir="ltr"><span>If you purchase a Railcard from us via </span><a href="https://railcards.trainsplit.com"><span>https://railcards.trainsplit.com</span></a><span>, we may also need to process the following information:</span></p> 312<p dir="ltr"></p> 313<div dir="ltr" align="left"> 314<table border="1"><colgroup><col width="175"><col width="207"><col width="221"></colgroup> 315<thead> 316<tr> 317<th> 318<p><strong>Data Type</strong></p> 319<p><em><span>What data do we collect?</span></em></p> 320</th> 321<th> 322<p><strong>Why we need it</strong></p> 323<p><em><span>Basis for processing the data</span></em></p> 324</th> 325<th> 326<p><strong>Who handles this</strong></p> 327</th> 328</tr> 329</thead> 330<tbody> 331<tr> 332<td> 333<ul> 334<li dir="ltr" aria-level="1"> 335<p dir="ltr" role="presentation"><span>Full name</span></p> 336</li> 337<li dir="ltr" aria-level="1"> 338<p dir="ltr" role="presentation"><span>Email address</span></p> 339</li> 340</ul> 341</td> 342<td> 343<ul> 344<li dir="ltr" aria-level="1"> 345<p dir="ltr" role="presentation"><span>Assist with collecting information relevant to railcard purchasing and fulfilment </span></p> 346</li> 347</ul> 348</td> 349<td> 350<ul> 351<li><span>Us</span></li> 352<li><span>Google Cloud (Google LLC)</span></li> 353</ul> 354<ul> 355<li dir="ltr" aria-level="1"> 356<p dir="ltr" role="presentation"><span>Rail Delivery Group (ATOC Ltd)</span></p> 357</li> 358</ul> 359</td> 360</tr> 361<tr> 362<td> 363<ul> 364<li dir="ltr" aria-level="1"> 365<p dir="ltr" role="presentation"><span>Photo</span></p> 366</li> 367</ul> 368</td> 369<td> 370<ul> 371<li dir="ltr" aria-level="1"> 372<p dir="ltr" role="presentation"><span>Allows visual verification that a railcard is being used by the authorised person(s)</span></p> 373</li> 374</ul> 375</td> 376<td> 377<ul> 378<li><span>Us</span></li> 379<li><span>Google Cloud (Google LLC)</span></li> 380</ul> 381</td> 382</tr> 383<tr> 384<td> 385<ul> 386<li dir="ltr" aria-level="1"> 387<p dir="ltr" role="presentation"><span>Information from identity documents (e.g. passport number, driving licence number)</span></p> 388</li> 389</ul> 390</td> 391<td> 392<ul> 393<li dir="ltr" aria-level="1"> 394<p dir="ltr" role="presentation"><span>Allows verification of details for issuance of railcards with specific eligibility requirements</span></p> 395</li> 396</ul> 397</td> 398<td> 399<ul> 400<li><span>Us</span></li> 401<li><span>Google Cloud (Google LLC)</span></li> 402</ul> 403</td> 404</tr> 405<tr> 406<td> 407<ul> 408<li dir="ltr" aria-level="1"> 409<p dir="ltr" role="presentation"><span>Payment card information</span></p> 410</li> 411</ul> 412</td> 413<td> 414<ul> 415<li dir="ltr" aria-level="1"> 416<p dir="ltr" role="presentation"><span>Assist with payment processing</span></p> 417</li> 418</ul> 419</td> 420<td> 421<ul> 422<li><span>Third-party payment provider (Stripe and potentially additionally Apple Payments Services Limited or Google UK Limited if you use Apple/Google Pay)</span> 423<ul> 424<li><strong>We do not handle or hold the raw card details ourselves, in accordance with PCI-DSS guidelines</strong></li> 425</ul> 426</li> 427</ul> 428</td> 429</tr> 430<tr> 431<td> 432<ul> 433<li>Technical data related to your visit such as IP address, browser version and device details</li> 434</ul> 435</td> 436<td> 437<ul> 438<li><span>This assists us with understanding issues with crashes and other technical failures you may experience whilst using our website and/or mobile apps</span></li> 439</ul> 440</td> 441<td> 442<ul> 443<li><span>Our analytics provider Google Analytics</span></li> 444<li><span>Our logging backend (Google Cloud)</span></li> 445</ul> 446</td> 447</tr> 448<tr> 449<td> 450<ul> 451<li>Passwords</li> 452<li>Email addresses</li> 453<li>User agents</li> 454<li>IP addresses</li> 455</ul> 456</td> 457<td> 458<ul> 459<li><span>To manage customer accounts and authentication</span></li> 460</ul> 461</td> 462<td> 463<ul> 464<li><span>Our authentication provider Firebase </span></li> 465</ul> 466</td> 467</tr> 468<tr> 469<td> 470<ul> 471<li dir="ltr" aria-level="1"> 472<p dir="ltr" role="presentation"><span>Technical data related to the device your railcard is stored on, such as UID and manufacturer/model number</span></p> 473</li> 474</ul> 475</td> 476<td> 477<ul> 478<li dir="ltr" aria-level="1"> 479<p dir="ltr" role="presentation"><span>Allow us to monitor railcard installations, assist with issues and enables technical compliance with device limits </span></p> 480</li> 481</ul> 482</td> 483<td> 484<ul> 485<li><span>Us</span></li> 486<li><span>Google Cloud (Google LLC)</span></li> 487</ul> 488</td> 489</tr> 490</tbody> 491</table> 492</div> 493<p><span>Rail Delivery Group (ATOC Ltd) who acts as an independent Data Controller will use the data shared (full name and email address) for the purposes of fraud prevention and verification.</span></p> 494<h2><span>Where is my data handled and stored?</span></h2> 495<p><span>Your personal data is controlled by a UK-based company, so comes under UK GDPR laws and ICO guidelines. However, ourselves and partner organisations whom we pass your data through to may use trusted cloud storage providers with global locations (such as Googleâs Cloud Platform and Amazonâs Web Services). All PII is stored within the UK/EEA with the exception of authentication/analytics data which is managed on our behalf by Firebase and Analytics which are both Google LLC services, and CAPTCHA services provided by Cloudflare / Google LLC / Intuition Machines Inc. The data transfer to US-based servers for these services is covered by the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework, as appropriate, and you can find out more about how this data is protected by <a href="https://firebase.google.com/support/privacy"></a><a href="https://firebase.google.com/support/privacy" target="_blank" rel="noopener">Google (Firebase)</a>, Google (<a href="https://policies.google.com/privacy/frameworks" target="_blank" rel="noopener">Other services: Analytics & ReCAPTCHA</a>), <a href="https://www.cloudflare.com/privacypolicy/#6-notice-to-eu-uk-and-swiss-residents" target="_blank" rel="noopener">Cloudflare</a> and <a href="https://www.hcaptcha.com/privacy" target="_blank" rel="noopener">Intuition Machines (hCAPTCHA)</a> on their websites as hyperlinked.</span></p> 496<h2><span>Can I opt out of data processing?</span></h2> 497<p><span>There are some scenarios where we collect data which is not regarded as either legitimate interest for processing or being required for the performance of a contract; you are usually able to opt out of this data being collected (for example, analytics, both general and specifically within the context of authorisation) by using the privacy options available in our web/mobile frontends. On web, that's something you can do from the <a href="/cookies" target="_self">Cookie Policy page</a> (or for first-time visitors, via the floating banner). On mobile, refer to the settings screen for the app (which will either be inside the app or managed from within the phone's central Settings menu, depending on the OS).</span></p> 498<p><span>Additionally, we do not always send all information above, where it is not necessary. For example, where a user books as a guest (rather than as an authenticated user) we do not send your provided name and e-mail address with Firebase, our authentication provider.</span></p> 499<h2><span>What data security measures are in place?</span></h2> 500<p><span>Our cloud provider, Google, and ourselves use a range of both physical and digital protections to keep your personal data safe. In addition, we regularly run both semi-automated and manual checks on our digital infrastru
500cture and periodic security reviews of third parties that process user data.</span></p> 501<h2><span>A note if you use third-party authentication providers such as Apple or Google</span></h2> 502<p><span>If you choose to use one of our third-party providers such as Apple or Google for signing in to your account with us, we only take a limited amount of personal data. Any data you provide to these platforms directly remains under their own data protection principles, and is subject to their own Privacy Policy as well as our own.</span></p> 503<h2><span>How do I remove my data from your systems?</span></h2> 504<p><span>At any time, you can ask us to remove or anonymise (as appropriate) any personal identifying information that we hold within our systems â please <a href="mailto:[email protected]" target="_blank" rel="noopener">contact us</a> if youâd like to do this. We will aim to do this in a timely manner, but within one calendar month at the latest.</span></p> 505<h2><span>Who do I ask if Iâve got questions or concerns on how my data is handled?</span></h2> 506<p><span>Raileasyâs Data Controller is:</span></p> 507<p><span>Joe Sikking ([email protected])</span></p> 508<p><span>We take the security of your personal data seriously, so if you think thereâs been a breach in trust in this for any reason, please contact our Data Controller using the details above in the first instance.</span></p> 509<p><span>If, after contacting us, weâre unable to resolve your concerns to your satisfaction, you also have the right to make a complaint to the ICO.</span></p> 510<p><span>You also have the right to a copy of all personally identifying data on yourself held by us in the form of a Subject Access Request (SAR) - if you would like us to do this, please contact us.</span></p> 511 </article> 512 </main> 513 </div> 514 </div> 515 </div> 516 </div> 517</div> 518 519 </div> 520 <footer class="bg-primary-700 dark:bg-slate-900 text-white border-t border-transparent dark:border-white/10 z-10" aria-labelledby="footer-heading"> 521 <h2 id="footer-heading" class="sr-only">Footer</h2> 522 <div class="container mx-auto space-y-6 md:space-y-4 px-6 py-4.5 pb-6"> 523 <div class="flex flex-col sm:flex-row flex-wrap w-full text-center sm:text-left items-center justify-center sm:justify-between gap-y-3.5"> 524 <div class="flex gap-1 flex-wrap justify-center sm:justify-start sm:gap-x-8"> 525 <a href="/terms-and-conditions" class="hover:underline p-3.5 sm:px-0">Terms</a> 526 <a href="/privacy" class="hover:underline p-3.5 sm:px-0">Privacy</a> 527 <a href="/cookies" class="hover:underline p-3.5 sm:px-0">Cookies</a> 528 </div> 529 <img class="logo h-12.5" src="/images/nra_white.svg" alt="National Rail accredited logo"> 530 </div> 531 <hr class="border-t border-white/15"> 532 <div class="flex flex-col sm:flex-row flex-wrap w-full text-center sm:text-left items-center justify-center sm:justify-between gap-y-6"> 533 <div class="relative flex items-start text-left"><!----> 534 <button class="relative inline-flex bg-primary-800 h-8.5 w-16 shrink-0 cursor-pointer p-[3px] rounded-full transition-colors duration-200 ease-in-out focus:outline-2 focus:outline-primary-800 focus:outline-offset-2" id="theme-toggle" type="button" tabindex="0" aria-checked="false"> 535 <span class="sr-only">Toggle dark mode</span> 536 <span class="relative size-7 rounded-full bg-white shadow-xs transition-transform duration-200 ease-in-out translate-x-0"> 537 <span class="absolute flex size-full items-center justify-center transition-opacity opacity-100 duration-200 ease-in" aria-hidden="true"> 538 <svg class="svg-inline--fa fa-brightness fa-fw size-4 text-primary-800" aria-hidden="true" focusable="false" data-prefix="fas" data-icon="brightness" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"> 539 <path class="" fill="currentColor" d="M224 80l0-48c0-17.7 14.3-32 32-32s32 14.3 32 32l0 48c0 17.7-14.3 32-32 32s-32-14.3-32-32zM160 256a96 96 0 1 1 192 0 96 96 0 1 1 -192 0zM0 256c0-17.7 14.3-32 32-32l48 0c17.7 0 32 14.3 32 32s-14.3 32-32 32l-48 0c-17.7 0-32-14.3-32-32zm432-32l48 0c17.7 0 32 14.3 32 32s-14.3 32-32 32l-48 0c-17.7 0-32-14.3-32-32s14.3-32 32-32zM256 512c-17.7 0-32-14.3-32-32l0-48c0-17.7 14.3-32 32-32s32 14.3 32 32l0 48c0 17.7-14.3 32-32 32zM73.4 438.6c-12.5-12.5-12.5-32.8 0-45.3l32
539-32c12.5-12.5 32.8-12.5 45.3 0s12.5 32.8 0 45.3l-32 32c-12.5 12.5-32.8 12.5-45.3 0zm288-333.3l32-32c12.5-12.5 32.8-12.5 45.3 0s12.5 32.8 0 45.3l-32 32c-12.5 12.5-32.8 12.5-45.3 0s-12.5-32.8 0-45.3zm77.3 333.3c-12.5 12.5-32.8 12.5-45.3 0l-32-32c-12.5-12.5-12.5-32.8 0-45.3s32.8-12.5 45.3 0l32 32c12.5 12.5 12.5 32.8 0 45.3zm-333.3-288l-32-32c-12.5-12.5-12.5-32.8 0-45.3s32.8-12.5 45.3 0l32 32c12.5 12.5 12.5 32.8 0 45.3s-32.8 12.5-45.3 0z"></path></svg></span> 540 <span class="absolute flex size-full items-center justify-center transition-opacity opacity-0 duration-100 ease-out" aria-hidden="true"> 541 <svg class="svg-inline--fa fa-moon fa-fw size-4 text-primary-800" aria-hidden="true" focusable="false" data-prefix="fas" data-icon="moon" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 384 512"> 542 <path class="" fill="currentColor" d="M223.5 32C100 32 0 132.3 0 256S100 480 223.5 480c60.6 0 115.5-24.2 155.8-63.4c5-4.9 6.3-12.5 3.1-18.7s-10.1-9.7-17-8.5c-9.8 1.7-19.8 2.6-30.1 2.6c-96.9 0-175.5-78.8-175.5-176c0-65.8 36-123.1 89.3-153.3c6.1-3.5 9.2-10.5 7.7-17.3s-7.3-11.9-14.3-12.5c-6.3-.5-12.6-.8-19-.8z"></path></svg></span></span> 543 </button> 544 </div> 545 <div class="text-center sm:text-right"> 546 <p class="text-sm">© 2023-2026 Raileasy Ltd</p> 547 </div> 548 </div> 549 </div> 550 </footer> 551 552</div> 553</body> 554</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.