Legal

Privacy policy

How Halcolux collects, uses and protects your personal data, in line with UK GDPR and the Data Protection Act 2018.

What we collect

When you request a quote or book a journey, we collect the details needed to serve you: your name, contact details, journey information (dates, addresses, flight numbers) and any preferences you choose to share, such as child seats or route notes.

Quote requests submitted through this website are stored in our administration system so that our reservations team can review, respond to and manage the enquiry. If you contact us by phone or e-mail, we may also keep a record of the conversation so that any colleague picking up your file can continue without asking you to repeat yourself.

How we use enquiry information

Your data is used to assess and respond to enquiries, prepare quotations, manage bookings and plan and deliver your journeys. Where you have asked us to, we may also keep you informed about our services. We do not sell personal data.

We use service providers where necessary to operate our reservations process. Resend processes the contact details and journey summary needed to send operational e-mail notifications to our reservations team. We may also share relevant journey details with a vetted partner chauffeur where this is essential to deliver your journey, or disclose information where the law requires it.

Website preferences and optional analytics

We use first-party browser storage and similar technologies to remember your privacy choice. This necessary preference records whether you accepted or rejected optional analytics. It does not contain your name, contact details or journey information.

When you use the journey planner, its ten journey fields are held temporarily as one draft in session storage so they can be shown on the quotation form without placing addresses, dates or flight details in the page URL. The draft is used only for this handoff, is not sent as analytics, is overwritten if you start a new planner journey and is removed after a successful quotation request. It expires after two hours and is also removed when the browser session ends.

Analytics is off unless you actively accept it. When you do, the website creates a random browser identifier in first-party storage and a random session identifier in session storage. These identifiers help us understand activity across a browser and a browsing session; they do not identify a verified individual. Clearing browser storage or using another browser or device can create a different identifier.

Consented analytics events may include the page path without its query string, the referring website’s hostname, allowlisted campaign fields (source, medium and campaign), broad device category, browser language, time zone and event time. We also record limited event categories: page views, visible-session heartbeats, contact-link type, the start of a form, completion of the journey planner and successful submission of a quotation request.

We do not include form values, names, contact details, journey details, raw URL queries, user-agent strings or IP addresses as fields in analytics events. No third-party analytics script is loaded. Reports use aggregated, non-identifying metrics; a browser identifier should not be interpreted as a unique person.

Your analytics choice

You can accept, reject or manage optional analytics in the privacy panel. The analytics control starts off, including where a browser sends a Global Privacy Control or Do Not Track signal. You can reopen the panel at any time using “Cookie settings” in the footer. Withdrawing consent stops future analytics events immediately and removes the analytics identifiers stored by this website in your browser.

How long we keep information

Enquiries that do not become bookings are kept for up to 12 months and then deleted. Optional analytics events and their random identifiers are retained for up to 14 months. Journey and booking records may be kept for up to six years, consistent with tax, accounting and legal obligations. You may ask us to erase your data once any applicable obligation to retain it has ended.

Your rights

You have the right to access, correct, export or erase your personal data, and to object to or restrict certain processing. To exercise any of these rights, e-mail us and we will respond within 30 days.

Contact

Questions about this policy or your data: e-mail reservations@halcolux.com and mark your message “Data protection”.