LEGAL / PRIVACY

Privacy Policy

Last updated: 17 October 2026

Before publication: The website operator must replace the placeholder email and provide the legal business name and appropriate postal/contact details. This policy is a draft for review against actual business operations.

1. Who we are

VEXXOR is the trading name used for this website. Data controller: [INSERT LEGAL NAME / SOLE TRADER NAME]. Business address: [INSERT BUSINESS ADDRESS]. Contact: CHANGE-ME@example.com.

2. What we collect

When you send an enquiry, we collect your name, email address, phone number, journey locations, date and time, passenger and luggage numbers, optional flight information and any message you submit. We also use technically necessary session data to protect the site and administer enquiries.

3. Why we process data

We use enquiry information to respond to requests, supply quotes, arrange services and communicate about an agreed journey. The lawful basis will ordinarily be steps taken at your request before entering a contract or performance of a contract; security and fraud prevention may be based on legitimate interests. Where applicable, legal obligations require some records to be retained.

4. Google Analytics

We may use Google Analytics 4 to understand website usage, but only after you opt in using our cookie control. If no measurement ID is configured, Google Analytics is disabled. Details are in the Cookies & Analytics Policy.

5. Who receives information

Website hosting and technical providers may process information to operate the site. Details may be shared with relevant service providers only where necessary to fulfil your journey or legal obligations. We do not sell your information.

6. Retention and security

Enquiries are held in an access-controlled server database. The operator must set and follow an appropriate retention schedule: [INSERT ENQUIRY RETENTION PERIOD]. We use HTTPS where deployed correctly, password-protected administrator access and access controls. No internet service is risk-free.

7. International transfers

Where third-party providers process personal data outside the UK, appropriate UK GDPR safeguards may be required; the operator should verify the actual provider arrangements.

8. Your rights

Depending on the circumstances you may request access, correction, erasure, restriction, portability or object to processing. You can withdraw consent for analytics through the cookie settings link in the footer. You may complain to the UK Information Commissioner's Office at ico.org.uk.

9. Contact

For privacy requests contact CHANGE-ME@example.com. We may update this notice when services or processing activities change.