This explains how we keep your personal data safe and where it will be held. It also explains how we may process your personal data outside of the United Kingdom, but that we will only do so using recognised mechanisms which offer an adequate level of protection.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
This section explains the length of time that we will retain your personal data. It also explains why we would hold your personal data for such time periods.
WHAT ARE YOUR RIGHTS?
This section explains that you have rights in relation to your personal data. It also explains what these rights are and how you can go about exercising them. COOKIES
This section explains that our Website uses cookies and where you can find further information about the cookies used.
WHO CAN YOU ASK FOR MORE INFORMATION?
This section provides you with contact information should you have any questions or concerns about the way we handle your personal data. It also explains how you can contact the data protection regulator should you be unsatisfied with our response to your data protection issues.


Yorkshire Buses & Kinetic Coaches is a trading name of Yorkshire Travel Group Limited (company number 12850883) in England and Wales whose registered offices are at unit 6 Cunningham's yard, Wood Lane, Rothwell, Leeds, United Kingdon, LS26 0RS.

This policy is issued by Yorkshire Travel Group Ltd (together, Yorkshire Travel Group Ltd, we, our or us).
Yorkshire Buses is a trading name of Yorkshire Travel Group Limited (company number 12850883) in England and Wales whose registered offices are at unit 6 Cunningham's yard, Wood Lane, Rothwell, Leeds, United Kingdon, LS26 0RS.
Each of the operating companies identified in section 14 below are registered as a data controller with the Information Commissioner's Office as detailed below.
2 About this privacy policy
This privacy policy applies to the personal data we collect about you through our website (www.yorkshirebuses.co.uk) (Website), by post, by telephone, in person (for example on-board), through our apps and when you otherwise communicate with us.
This privacy policy may change from time to time and, if it does, the up-to-date version will always be available on our Website. We will also tell you about any important changes to our privacy policy.
3 What personal data do we collect about you?
This section informs you of what information we collect about you and why. Personal data means any information about an individual from which that individual can be identified.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
" Identity Data includes first name, surname, username or similar identifier, marital status, title, date of birth, gender and CCTV footage.
" Contact Data includes billing address, delivery address, postcode, email address and telephone numbers.
" Financial Data includes bank account and payment card details.
" Transaction Data includes details as to your journeys, details about payments to and from you and other details of products and services you have purchased from us.
" Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
" Profile Data includes your username and password, purchases or orders made by you, any interests communicated to us to enable the personalisation of services, travel preferences, feedback and survey responses.
" Usage Data includes information about how you use the Website, products and services.
" Health Data includes information relating to your mobility and disability status to enable us to provide assisted travel and ensure that you receive the correct pricing and any information detailed within any accident reports that relates to personal injury or receipt of medical attention.
" Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data is not considered personal data in law as this data does not directly or indirectly reveal your identity. An example of Aggregated Data would be where we use your Usage Data to calculate the percentage of users accessing a specific Website feature. If the Aggregated Data is combined with other personal data to directly or indirectly identify you, we will treat this combined data as personal data and in accordance with this privacy policy.
Special Category Data includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not seek to collect or otherwise process your Special Category Data, except where:
" we have obtained your explicit consent prior to processing your Special Category Data (e.g. you consent to us processing your Health Data to provide travel assistance services to you);
" the processing is necessary for compliance with a legal obligation;
" the processing is necessary for the detection or prevention of crime (including the prevention of fraud) to the extent permitted by applicable law;
" you have manifestly made those Special Category Data public;
" the processing is necessary for the establishment, exercise or defence of legal rights; or
" processing is necessary for reasons of substantial public interest and occurs on the basis of an applicable law that is proportionate to the aim pursued and provides for suitable and specific measures to safeguard your fundamental rights and interests.
4 How is your personal data collected?
We use different methods to collect data from and about you including through:
Direct interactions:
We collect personal data about you if you fill in forms on the Website or correspond with us by telephone, email, live chat, social media or otherwise. This includes information you provide when you:
" register to use our Website or app;
" buy bus tickets or other products or services;
" register to use our wifi provision;
" enter a competition, promotion or survey; or
" report a problem or give us feedback.
We may also ask you to share your personal data with us if it is necessary for us to provide our services to you - for example, we may ask if you require mobility assistance when travelling.
We may process personal data that you manifestly choose to make public, including via social media (e.g. we may collect information from your social media profile(s), to the extent that you choose to make your profile visible).
Automated technologies or interactions:
If you use our Website, we automatically collect the following information:
" web usage information (e.g. IP address), your login information, browser type and version, time zone setting, operating system and platform; and
" information about your visit, including the full Uniform Resource Locators (URLs) clickstream to, through and from our Website (including date and time); time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs).
Where we collect information about you in the ways described above, we do so on the basis that it is in our legitimate interests to collect and process this data. In most situations this will be anonymised but we collect and process this data to ensure that our site is functioning properly and that our customer experience is to the standard that you and we expect.
The Website may, from time to time, contain links to and from the websites of advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
No automated decision-making or profiling will take place using your personal data.
Information we receive from other sources:
We may receive information about you if you use any other website we operate or the other services we provide. We are also working closely with third parties, (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them, in particular where you purchase any of our products or services through such third parties. In addition, we may receive information about you from third parties who provide it to us (e.g. your employer, our customers and law enforcement authorities).
When we receive information from other sources, we rely on them having the appropriate provisions in place telling you how they collect data and who they may share it with. We carefully check our sources to ensure that we only receive your information when it is lawful for us to do so.
CCTV and Body Worn Video:
We employ CCTV and Body Worn Video (BWC) cameras (BWC include audio recording capabilities) to capture, record and monitor what takes place at our offices, stations, car parks and on our services in order to help provide a safe environment for both our employees and customers, reduce the number of assaults on our employees, provide an accurate record of certain interactions and prevent, deter and detect crime.
BWC will only be activated when absolutely necessary. Prior to the record mode being activated, our employees will give notice that the camera is being activated and that it will make both a video and audio recording. For further information on CCTV and retention periods, please contact us using the details provided.
5 Purposes for which we will use your personal data
This section explains how we will use personal data you provide to us in order to carry out the activities relevant to the provision of our services to you.
We must have a legal basis for processing your personal data. We consider that we have a legal basis where:
" you have given us consent to do so for the specific purposes which we have told you about - for example, we will need your consent to process any health information you provide to us, such as information relating to mobility;
" it is necessary for us to do so to enable us to provide you with the services that you have requested from us - for example, contacting you about your journey;
" it is necessary in order to fulfil our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; or
" the law otherwise permits or requires it.
Where we process your personal data on the basis of our legitimate interests, these are our (or our third party's) interests in providing our services to you in an efficient and secure manner.
We have set out below a list of all the ways we may use your personal data and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are, where appropriate.
In some cases we may use more than one legal basis for processing your personal data; this will depend on the specific purpose for which we are using your personal data. Please contact us if you have any queries about the specific legal basis that we rely on for processing your personal data.