Home

Introduction

This page was last updated June 2009.

Transport for London is committed to protecting your personal information when you are using this website.

In order to provide you with the full range of features and facilities on this website, TfL sometimes needs to obtain certain information about you.

This privacy policy explains the following:

• What information TfL may collect about you
• How TfL will use the information collected
• How TfL will protect the information you give us
• The use of cookies on this website and how you can disable these cookies
• Changes to this privacy policy
• A summary of TfL’s obligations and your rights under the Data Protection Act (DPA) 1998, which regulates the use of personal data in all organisations.

This website may contain links owned and operated by third parties. These third party websites have their own privacy policies, including cookies, and we urge you to review them. TfL does not accept any responsibility or liability for the privacy practices of such third party websites and your use of such websites is at your own risk.

Changes to this privacy policy

TfL may update this privacy policy from time to time by updating this page. The date of the last revision is shown at the start of this privacy policy. You should check this page from time to time to ensure you are happy with any changes.

Data Protection

The Data Protection Act (DPA) 1998 regulates the use of personal information within all organisations, including Transport for London (TfL) and its subsidiary companies. It also creates a legal right for individuals to request access to their personal information.

The DPA states that any organisation which processes personal information must be open about how that information is used and must comply with eight data protection principles. These eight rules require personal data to be:

1. Processed fairly and lawfully
2. Processed only for specified and lawful purposes
3. Adequate, relevant and not excessive
4. Accurate and, where necessary, kept up-to-date
5. Not kept longer than necessary
6. Processed in accordance with an individual's rights under the DPA
7. Kept secure
8. Not transferred to non-European Economic Area (EEA)countries without adequate protection

The DPA also gives individuals rights to:

• Gain access to their data
• Seek compensation for damage or distress caused by their data not being processed in accordance with the Act
• Prevent their data being processed in certain circumstances
• Opt out of having their data used for direct marketing at any time

Subject access requests

Under the DPA, you can ask to see any personal information that we hold about you. Such requests are called subject access requests.

If you would like to make a subject access request, please complete the subject access request form (Word .doc, 67KB).

You will also need to provide one form of identification and proof of your address, for example, staff pass, driving license, utility bill and, if appropriate, any particulars about the source or location of the information you are requesting. These requirements and further details are outlined in the subject access request form.

What personal information is collected about you

You can browse this website without disclosing any information about yourself.

If you choose to contact TfL via the website, you will be required to enter certain contact information, such as your name and email address, to enable TfL to deal with and respond to your enquiry.

How TfL uses your personal information

TfL will only use your personal information for the following purposes:

• internal record keeping
• to improve the website
• to respond to enquiries submitted by you.

TfL will only use your personal information in accordance with this privacy policy unless we have your consent to use it in any other ways. TfL will never disclose your personal information to any other organisation without your permission.

Protecting your information

TfL has in place security systems and encryption technology to help ensure the security of your personal information.

The use of cookies and how you can disable them

Most major websites use cookies. A cookie is a piece of text that a website transfers to your computer's hard disk, so that the website can remember who you are.

A cookie will typically contain the name of the website from which the cookie has come, the lifetime of the cookie and a value. It does not give us access to the rest of your computer, and only the site that created the cookie can read it.

Our cookies cannot be used by themselves to identify you.

Cookies make the interaction between users and websites faster and easier. Without cookies, it would be difficult to remember your registration details or preferences for a future visit.

We use the following types of cookie:

• Session cookies: To ensure you are recognised when you move from page to page within our site and that any information you enter is remembered.

Visit the All About Cookies website to learn more about cookies.

Disabling/enabling cookies

You can accept or disable cookies by modifying the settings in your browser. However, you may not be able to use all the interactive features of our site if you disable cookies.

You have two options if you wish to disable cookies:

1. You may opt out of third party cookies used on this site
2. You may disable cookies through your browser

How web beacons affect you

Some of our web pages may contain electronic images known as web beacons (sometimes known as clear gifs), that allow us to count the number of visitors to these pages.

Web beacons collect limited information which include a cookie number, time and date of a page view, and a description of the page on which the web beacon sits.

We may also carry web beacons placed by third party advertisers.

These beacons do not carry any personally-identifiable information and are only used to track the effectiveness of a particular campaign.

Find out more about web beacons.