Data Protection
How Fivestar Minicab complies with UK data protection law when we process your personal data. This page sits alongside, and does not replace, our Privacy Policy.
1. Legal Framework
Fivestar Minicab processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, together with any applicable e-privacy and electronic communications rules. This page explains how we apply those laws in practice. Our Privacy Policy explains what data we collect and why.
2. Data Controller & Data Protection Officer
Fivestar Minicab (company number 09068537) is the data controller for personal data processed through our website, passenger app, driver app and support channels.
3. Legal Bases We Rely On
| Legal Basis | Where It Applies |
|---|---|
| Performance of a contract | Creating your account, matching you with a driver, processing payments, fares and receipts. |
| Legal obligation | Tax, accounting, licensing, safeguarding and law-enforcement requests we must comply with. |
| Legitimate interests | Fraud prevention, platform safety, service improvement and core app analytics, balanced against your rights. |
| Consent | Marketing communications, optional cookies, and processing of sensitive data where consent is the applicable basis. |
| Vital interests | Protecting life or safety in an emergency, such as sharing location with emergency services. |
4. Automated Decisions & Profiling
Some processing on our platform is automated, including:
None of these processes are intended to produce a decision with legal or similarly significant effect on you without the possibility of human review. If you believe an automated decision has affected you unfairly, contact us using the details below and we will review it.
5. International Transfers
Where personal data is transferred outside the UK, for example to a cloud hosting, mapping or payment provider, we rely on an applicable UK adequacy regulation, the UK International Data Transfer Agreement or International Data Transfer Addendum, or another safeguard recognised under UK GDPR. A list of the categories of recipient is in our Privacy Policy.
6. Security Measures
7. Data Breach Response
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will assess it without undue delay, take steps to contain and remedy it, and notify the ICO within the statutory timeframe where required. Where a breach is likely to result in a high risk to you, we will also notify you directly, where required by law.
8. Exercising Your Rights
Under UK GDPR you can ask to access, correct, erase, restrict, or port your personal data, and you can object to certain processing or withdraw consent. To make a request, email info@fivestarminicab.com or use our Contact page. We will normally respond within one calendar month, and may ask for identity verification before actioning a request.
9. Complaints to the ICO
We hope you will contact us first so we can try to resolve any concern. You also have the right to complain directly to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or by calling 0303 123 1113.