|When you supply any personal information to Delay-Repay we have legal obligations towards you in the way we use this data. We must explain how we will use it and we must inform you if we want to pass the information on to anyone else.
In general, any information you provide will only be used for the purposes of submiting or processing a Claim and keeping you informed about other Delay-Repay information and activities.
Your information will only be disclosed to third parties where necessary to submit or process a Claim or where we are obliged or permitted by law. Specifically it will not be sold or passed on to marketers.
We will hold your personal information on our systems for as long as you use the service you have requested, and remove it within a reasonable timeframe in the event that the purpose has been met, or, in the case of membership you no longer wish to continue your registration as a member. We will ensure that all personal information supplied is held securely, in accordance with the Data Protection Act 1998.
Under the EU's General Data Protection Regulation (GDPR) personal data is defined as:
"any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person".
It is necessary for us to use your personal data to deliver under the terms and conditions the service you have subscribed. We have a legitimate interest to use this data in order to populate and/or submit claims for delay repay compensation. This is the core service and to fulfil our obligations we may submit your data to the train operator for the sole purpose of facilitating your claim for compensation under the Delay Repay Scheme.
We do not knowingly collect or store any personal information about children under the age of 16. If you are under 16 please get your parent's or guardian's permission before you provide any personal information.
We use PayPal for all financial transactions.
In accordance with PayPal policy and compliance with Data Protection Laws. With regard to any personal data processed by Delay-Repay and PayPal in connection with this Agreement, Delay-Repay and PayPal will respectively each be a controller in respect of such processing. Delay-Repay and PayPal agree to comply with the requirements of the Data Protection Laws applicable to controllers in respect of the provision of their respective services and otherwise in connection with this Agreement. For the avoidance of doubt, Delay-Repay and PayPal each have their own, independently determined privacy policies, notices and procedures for the personal data they hold and are each a data controller (and not joint data controllers). In complying with the Data Protection Laws, Delay-Repay and PayPal shall, without limitation:
- implement and maintain at all times all appropriate security measures in relation to the processing of personal data;
- maintain a record of all processing activities carried out under this Agreement; and
- not knowingly do anything or permit anything to be done which might lead to a breach by the other party of the Data Protection Laws.
We only use your data to populate and/or submit delay repay compensation forms
We will not spam you and we will not enable others to spam you.
At any point while we are in possession of, or processing your personal data, you, have the following rights:
Right of access - You have the right to know what information we hold about you - all your information can be view in My Account - we don't know anything else!
Right of rectification - You have a right to correct data that we hold about you that is inaccurate or incomplete - you can change all your personal data through My Account (other than audit/transaction/system log data)
Right to be forgotten - You can erase the data we hold about you - simply click the "Delete My Account" in My Account then confirm and it is all erased.
Right to restriction of processing - If you no longer want us to process with your data - simply click the "Delete My Account" in My Account then confirm and no further processing will take place as all your data is erased.
Right of portability - You have the right to have the data we hold about you transferred to another organisation - all your information can be view in My Account, feel free to print it out or copy any/all of it.
Right to object - You have the right to object to certain types of processing such as direct marketing - If we do this then let us know and we will be suprised but will stop
Right to object to automated processing, including profiling - You also have the right not to be subject to the legal effects of automated processing or profiling - simply click the "Delete My Account" in My Account then confirm and no further processing will take place as all your data is erased.
Right to judicial review - In the event that we refuse your request under rights of access, we will provide you with a reason as to why. You have the right to complain
If you have any questions you can contact us through our Contact Us & FAQ page.