We treat the protection of personal data as integral to the trust placed in us by our clients. Our processes, partners and infrastructure are aligned with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and accountability.

Right of access — you can request a copy of the personal data we hold about you.

Right to rectification — you can ask us to correct inaccurate or incomplete information.

Right to erasure — also known as the right to be forgotten, subject to legal retention obligations.

Right to restriction — you can ask us to limit the processing of your data in certain circumstances.

Right to data portability — you can receive your data in a structured, machine-readable format.

Right to object — you can object to processing based on our legitimate interests or for direct marketing.

Rights related to automated decision-making — we do not make decisions about you based solely on automated processing.

Where personal data is transferred outside the United Kingdom or European Economic Area, we rely on adequacy decisions or Standard Contractual Clauses to ensure equivalent protection.

We employ encryption in transit and at rest, role-based access control, regular penetration testing, and ongoing staff training to safeguard personal data against unauthorised access, alteration or loss.

In the unlikely event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.

Our Data Protection Officer can be reached at dpo@sjtcoaches.co.uk or by post at 12 Berkeley Square, Mayfair, London W1J 6BR.

You have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk if you believe we have not handled your data in accordance with the law.