This GDPR statement explains how Vinta Rides complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and sets out the rights you have over your personal data. It complements our Privacy Policy.

1. Our role

Vinta Rides is the data controller for the personal data we collect from customers, website visitors, and enquirers. We determine why and how your data is processed, and we are accountable for protecting it. Where suppliers process data on our behalf, they act as our processors under written agreements.

2. Principles we follow

We process personal data in line with the GDPR principles. Data is handled lawfully, fairly, and transparently; collected for specified, legitimate purposes; limited to what is necessary; kept accurate and up to date; retained no longer than needed; and processed securely. We are accountable for, and can demonstrate, our compliance.

3. Lawful bases

We only process personal data where we have a lawful basis to do so: contract (to deliver your booking), legitimate interests (to operate, improve, and secure our services), consent (for marketing and non-essential cookies), and legal obligation (to meet our regulatory and tax duties). Where we rely on consent, you are free to withdraw it at any time.

4. The data we process

We process contact and booking details, payment confirmations (not full card data), account information, communications, and limited technical data such as IP address and cookie identifiers. We do not carry out automated decision-making that produces legal or similarly significant effects, and we do not use your data for profiling beyond basic service analytics.

5. Your rights under GDPR

You have the following rights in relation to your personal data:

  • Right to be informed — to know how your data is used, as set out here and in our Privacy Policy.
  • Right of access — to obtain a copy of the personal data we hold about you.
  • Right to rectification — to have inaccurate or incomplete data corrected.
  • Right to erasure — to ask us to delete your data where there is no overriding reason to keep it.
  • Right to restrict processing — to limit how we use your data in certain circumstances.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — to object to processing based on legitimate interests or to direct marketing.
  • Rights around automated decisions — not to be subject to solely automated decisions with significant effects.

6. How to exercise your rights

To exercise any of these rights, email info@vintarides.com or write to us at 50 Browning Road, London, E12 6QZ. We will respond within one month, as required by law. We may ask you to verify your identity before acting on a request. There is normally no charge, although we may charge a reasonable fee or refuse a request that is clearly unfounded or excessive.

7. Data retention

We keep personal data only for as long as necessary for the purpose it was collected, and to meet legal and accounting obligations. Booking and financial records are typically held for up to six years; marketing data is held until you unsubscribe. When data is no longer needed, it is securely deleted or anonymised.

8. International transfers

If any data is transferred outside the UK, we ensure an adequate level of protection through recognised safeguards such as adequacy regulations or standard contractual clauses.

9. Data breaches

We have procedures to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) and, where required, affected individuals without undue delay.

10. Complaints

If you are unhappy with how we handle your data, please contact us first so we can put things right. You also have the right to lodge a complaint with the ICO, the UK supervisory authority, at ico.org.uk or by calling 0303 123 1113.

11. Contact

For any data-protection matter, contact us at info@vintarides.com, call +44 20 8044 0939, or write to 50 Browning Road, London, E12 6QZ.