Skip to content
Beyond Cars

Privacy Policy

How Beyond Cars collects, uses, and protects your personal data. GDPR compliant privacy policy for our transport services.

Last updated: 13 October 2026

Beyond Cars Limited (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Definitions and Interpretation

In this Privacy Policy:

  • Beyond Cars / We / Us means Beyond Cars Limited, a company incorporated in England and Wales with company number 14310259, whose registered office is at Suite 7, Network Business Centre, 177 Hook Road, Surbiton, KT6 5AR.
  • Data means all personal data submitted to Beyond Cars by you or collected by us.
  • Data Protection Laws means the UK GDPR, the Data Protection Act 2018, and any applicable related legislation.
  • User / You means any individual whose personal data we process, including website users and customers.
  • Website means https://www.beyondcars.co.uk and any associated sub-domains.

Unless the context requires otherwise, words in the singular include the plural and vice versa.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

  • use of our Website; and
  • use of our transport services, including bookings made online, by telephone, email, or any other means.

It does not apply to third-party websites linked from our Website.

For the purposes of Data Protection Laws, Beyond Cars Limited is the data controller.

3. Information We Collect

3.1 Information you provide

We may collect:

  • name;
  • contact details (telephone number, email address);
  • pickup and drop-off addresses;
  • booking and journey details;
  • payment information;
  • correspondence with us; and
  • any special requirements you disclose.

For SEN or accessibility transport, we may collect limited information relating to accessibility or support needs. This may constitute special category data and will only be collected with your explicit consent and where necessary to provide the service.

3.2 Information collected automatically

When you use our Website, we may automatically collect:

  • IP address;
  • browser type and version;
  • pages visited, navigation paths, and interaction data;
  • date and time of access.

If something on the Website breaks, our error monitoring service records the page, your browser and device type and the technical details of the error. When you type a pickup or drop-off address, it is sent to Google Maps to suggest addresses and work out the route. If you accept analytics cookies, we also collect statistics about how the Website is used. See sections 6 and 10.

4. How We Use Your Information

We use your personal data to:

  • provide and manage our transport services;
  • process payments;
  • communicate booking confirmations and journey updates;
  • respond to enquiries;
  • improve our services and operations;
  • comply with legal and regulatory obligations;
  • prevent fraud and ensure safety.

We will only send marketing communications where you have given explicit consent, which you may withdraw at any time.

We process personal data on the following legal bases:

  • Contract – where processing is necessary to provide our transport services;
  • Legal obligation – where required to comply with law or regulation;
  • Legitimate interests – to operate and improve our business, to find and fix faults on the Website (error monitoring) and to prevent misuse and payment fraud, where your rights do not override these interests;
  • Consent – for marketing communications, special category data, website analytics cookies and recordings of your visit when an error happens (session replay).

6. Data Sharing

We may share your personal data with:

  • our drivers, limited to the information necessary to complete journeys;
  • Stripe, our payment processor, for secure payment handling and to prevent fraud;
  • Google Maps Platform, to suggest addresses as you type a pickup or drop-off address and to work out the distance and time of the journey. What you type is sent to Google as you type it, whether or not you go on to book. Google uses this under its own privacy policy and may process it in the United States;
  • Sentry (Functional Software, Inc.), our error monitoring service. If something on the Website breaks, Sentry records what went wrong: the page, your browser and device type, and the technical details of the error. This is how we find and fix faults. Sentry sets no cookies and runs without your consent. It processes this for us in the European Union (Germany) and keeps it for up to 90 days. With your consent, Sentry may also record a replay of your visit when an error happens, so we can see what led to it. Text, form inputs and images are hidden in these recordings. Replays are recorded only after you press Accept, and stop if you press Reject or withdraw your consent;
  • Google Analytics, only if you accept analytics cookies. We use it to understand how people use the Website: which pages are visited, how people arrive and what device they use. Google processes this information for us and may transfer it to the United States, under the UK's data bridge or standard contractual safeguards. Google Analytics does not run unless you press Accept;
  • professional advisers or authorities, where required by law.

We do not sell your personal data. All drivers and service providers are subject to confidentiality obligations.

In the event of a sale, transfer, or restructuring of our business, personal data may be transferred to the new owner, subject to this Privacy Policy.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure.

Payment information is processed via PCI-DSS–compliant payment providers. We maintain procedures to deal with any suspected personal data breach and will notify you and/or the ICO where legally required.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal and accounting requirements.

  • Booking and financial records are retained for 7 years.
  • Marketing preferences are retained until consent is withdrawn.
  • Website analytics data (Google Analytics) is kept for 14 months.
  • Error monitoring data, including any session replays (Sentry), is kept for up to 90 days.
  • Data may be retained in backups for legal, tax, or regulatory purposes even after deletion from active systems.

9. Your Rights

Under UK GDPR, you have the right to:

  • access your personal data;
  • rectify inaccurate or incomplete data;
  • request erasure (in certain circumstances);
  • restrict processing;
  • data portability;
  • object to processing;
  • withdraw consent at any time where consent is relied upon.

To exercise your rights, contact us at info@beyondcars.co.uk.

10. Cookies and similar technologies

Nothing on our Website needs your consent to browse the site or make a booking. The only things we ask your consent for are analytics cookies and recordings of your visit when an error happens. We do not use them unless you press Accept on the banner.

Your choice. The banner shows Accept and Reject as two identical buttons. Rejecting is as easy as accepting, and the Website works the same either way. We remember your answer on your device (see the list below). You can change your mind at any time using Cookie settings at the bottom of every page. This reopens the banner, deletes the Google Analytics cookies straight away and stops any replay recording. If you press Reject, those cookies are deleted straight away too. If you have the Website open in another tab in the same browser, that tab follows your new choice.

Analytics (consent only). If you press Accept, we use Google Analytics, loaded through Google Tag Manager, to understand how people use this Website. It sets the cookies _ga and _ga_ followed by an ID, which last up to two years. Google Analytics and Google Tag Manager are not loaded at all unless you press Accept, so there is nothing to switch off in your browser settings. We keep analytics data for 14 months.

Error monitoring (no consent needed). Sentry records faults on the Website, as described in section 6. It sets no cookies.

Session replay (consent only). If you press Accept, Sentry may record a replay of your visit when an error happens. Text, form inputs and images are hidden. It is recorded only after you press Accept, and it stops if you press Reject or withdraw your consent. To do this, Sentry keeps a short-lived identifier in your browser's session storage, which ends when you close the tab.

Payments (no consent needed). When you open the booking page, our payment provider Stripe loads its payment security script, which sets cookies used to prevent fraud. These are strictly necessary for taking payment safely.

Address search. The booking form uses Google Maps to suggest addresses. It sets no cookies on our Website.

What is stored on your device

  • beyondcars.consent (in your browser's local storage, not a cookie). Remembers whether you pressed Accept or Reject. Set by us. Kept until you change your choice or clear your browser data. Strictly necessary: no consent needed.
  • _ga. Google Analytics: tells visitors apart so we can count them. Set by Google, through Google Tag Manager. Up to 2 years. Only set after you press Accept.
  • _ga_ followed by an ID (currently _ga_NYJ79X34HL). Google Analytics: keeps session state. Set by Google, through Google Tag Manager. Up to 2 years. Only set after you press Accept.
  • sentryReplaySession (in your browser's session storage, not a cookie). Sentry session replay: links an error to the visit it happened in. Set by Sentry. Until you close the tab. Only used after you press Accept.
  • __stripe_mid. Stripe: fraud prevention for payments. Set by Stripe when you open the booking page. 1 year. Strictly necessary: no consent needed.
  • __stripe_sid. Stripe: fraud prevention for payments. Set by Stripe when you open the booking page. 30 minutes. Strictly necessary: no consent needed.
  • m (on Stripe's own domain, m.stripe.com). Stripe: fraud prevention for payments. Set by Stripe when you open the booking page. Up to 2 years. Strictly necessary: no consent needed.

We use no other cookies, and none for advertising.

Our Website may contain links to third-party websites. We are not responsible for their content or privacy practices. You should review their privacy policies before use.

12. Complaints and Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) via their website at ico.org.uk.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on our Website with an updated revision date. Continued use of the Website or our services constitutes acceptance of the revised policy.

14. Contact Details

Beyond Cars Limited Suite 7, 177 Hook Road Surbiton, KT6 5AR

Email: info@beyondcars.co.uk Phone: 020 3287 3232