Privacy Policy
Last updated: 18 May 2026
1. Who we are
Scarlet Cars is operated by Scarlet Cars Ltd, Hayes, Uxbridge UB11 1FW, United Kingdom. We are the data controller for the personal data we collect through this website. You can contact us at scarletcarsltd@outlook.com or +44 7551 366664.
2. What we collect
- Your name, email address, and phone number
- Pickup and drop-off addresses for your journey
- Pickup date and time, vehicle type, passenger and luggage counts
- Any special requests you add to the booking
- Your payment preference (cash on the day, or online)
- The status of your booking and any feedback you choose to leave
- Basic technical data your browser sends when you load the site (e.g. IP address, browser type) — used only to keep the site secure
We do not collect or store your card details. Online card payments, when available, are processed by our payment provider directly.
3. Why we use it (lawful basis)
- To provide the booking you requested (lawful basis: performance of a contract). This includes calculating your fare, dispatching a driver, and emailing you confirmations and updates.
- To respond to messages or feedback (lawful basis: legitimate interest in answering your enquiries).
- To meet legal and tax obligations (lawful basis: legal obligation).
We do not use your data for marketing, profiling, or automated decision-making.
4. Who we share it with
We share the minimum information needed to provide your journey:
- Your assigned driver sees your pickup and drop-off address, name, and phone number.
- Service providers we trust to run the site: Supabase (database and authentication, EU-hosted), Resend (email delivery), and Mapbox (address autocomplete and route distance). Each acts as a data processor under contract.
- Authorities if we are required to by law.
5. How long we keep it
Booking records are retained for up to 7 years to meet HMRC and accounting obligations. Contact-form messages are retained for up to 2 years. Feedback is retained indefinitely in anonymised form for service-improvement purposes. You can request earlier deletion (see your rights below).
6. Your rights
Under UK GDPR you have the right to:
- Ask for a copy of the personal data we hold about you (subject access request)
- Ask us to correct inaccurate data
- Ask us to erase your data, where there is no overriding legal basis to keep it
- Ask us to restrict or stop using your data in certain circumstances
- Object to our processing where the basis is legitimate interest
- Receive your data in a portable format
To exercise any of these rights, email us at scarletcarsltd@outlook.com. We aim to respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) at any time.
7. Cookies and tracking
We use only the cookies that are strictly necessary to make the site work — for example, the session cookie that keeps the admin signed in. We do not use advertising or marketing cookies, and we do not use third-party analytics that track you across other sites.
8. Security
Personal data is stored in our database with row-level security policies. Access is restricted to our admin team. We use HTTPS for all traffic to the site. No system is completely secure, but we follow accepted industry practices to protect your information.
9. Updates to this notice
We may update this notice from time to time. The version published here is the version that applies. Material changes will be highlighted at the top of the page when they happen.
10. Contact
For any privacy-related question, email scarletcarsltd@outlook.com or call +44 7551 366664.