This Notice is effective from January 14, 2025.

This Privacy Notice applies to your use of this Website, App and on-board Wi-Fi provided by Big Bus Tours. It applies if reference is made to it via a link or in a similar manner, e.g. on websites of partners on which services from Big Bus Tours are offered.

Irrespective of where you reside or where you take your tour, Big Bus Tours Limited, whose registered office address is 110 Buckingham Palace Road, SW1W 9SA London, is your data controller, and responsible for the collection and processing of your personal data in connection with the provision of our services. Our accountable data protection regulator under the UK General Data Protection Regulation (GDPR) is the Information Commissioners Office.

We may change this Privacy Notice at any time by posting the revised Notice on this website and indicating the new effective date. You will be notified of any material changes to this Privacy Notice via email.

Personal Data Processing

We collect your personal data when you use our services, provide us with information, or otherwise interact with us. In total, we collect the following personal data:

  • Data that identifies you, such as your name, address, telephone number, email address.
  • Financial information (e.g. credit card, transaction details, and form of payment).
  • In some cases: age, gender, country of birth, nationality, country of residence, interests and preferences.
  • You may provide us with additional information through App, a web form, CCTV on board a bus, or live chat.

Data that is generated as part of one of your transactions is collected automatically. This includes location data, including your general location data (e.g. IP address) and, with your permission, the precise location data of your mobile device. You can manage or disable the use of precise location services for all applications in the settings menu of most mobile devices.

We also collect computer connection information, such as statistics regarding your use of our services, information on data traffic to and from websites, referral URL, information on advertisements, your IP address, Mobile Device IDs, your access times including accessed pages within our services, your language settings and your weblog information. For cookie-collected data, please see our Cookie Notice.

Basis Of Processing

We process your personal data for various purposes, based on several different legal bases. Below you will find a summary of the purposes for which we process your personal data.

Performance of a contract

  • Provision of our services, including but not limited to enabling and performing transactions.
  • Providing customer support, where we may contact you via email, telephone, SMS, live chat or by mail.
  • Processing of general location data (such as IP address) in order to provide you with location-based services.

Consent

  • Marketing communications with you via email, WhatsApp or SMS message.
  • Content personalisation, measurement and analytics.

You can find information about your right to withdraw your consent below under section Rights, and information with regard to the use of cookies in our Cookie Notice.

Legitimate interests

  • Monitoring and improvement of the security of our services.
  • Evaluation of the quality of our marketing campaigns (e.g. through analysis of opening and click rates).
  • To comply with an impending legal obligation, participation in investigations and proceedings conducted by courts, law enforcement agencies, for the purpose of detecting, investigating and prosecuting illegal acts.
  • Initiation, preparation and execution of a company acquisition, e.g. in the event of a merger with another company or takeover by another company. If such an event occurs, we will require the merged entity to comply with this Privacy Notice with respect to your personal data.

Legal obligations

  • Participation in investigations and judicial proceedings, in particular, for the purpose of detecting, investigating and prosecuting illegal acts.
  • Complying with information collection, verification, disclosure, reporting and other requirements under consumer protection, anti-fraud, and tax legislation.
  • Retention and storage of your personal data to comply with specific legal retention requirements.

Processing by Processors

  • External service providers
  • Government agencies or public authorities
  • Payment service providers
  • External operators of websites, applications, services and tools
  • Affiliates and third-party advertising partners such as Google etc.

Automated decision-making

We may make use of technologies that are considered automated decision making or profiling. We will not make any automated decisions about you that would significantly affect you unless such a decision is necessary for the performance of a contract with you or we have obtained your consent.

Rights

You are prescribed several rights by the GDPR and you have a right to lodge a complaint with a data protection supervisory authority, noting Big Bus Tours is a registered UK Data controller.

Access & Portability

You have the right to obtain access to your personal data that is processed by us. This right shall not adversely affect the rights and freedoms of others. You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller (this is the associated right of portability).

Rectification

You have the right to obtain from us a rectification of any inaccurate personal data concerning you.

Erasure

You have the right to obtain from us the erasure of personal data concerning you (e.g. when the personal data are no longer necessary in relation to the purposes for which they were processed or when they are no longer required for overriding legitimate grounds), unless processing is necessary for compliance with a legal obligation or defence of legal claims.

Restriction

You have the right to obtain from us restriction of processing your personal data to the extent that the accuracy of the data is disputed by you, we no longer need the data, you have objected to the processing, or you need it to assert or defend legal claims.

Objection / Profiling

If your personal data is processed on the basis of our legitimate interests, you have the right to object to the processing of your personal data, as you do if your personal data is processed by us for direct marketing purposes. This also applies to profiling.

Consent

Where we rely on consent you can withdraw your consent to the processing of your personal data by us at any time.

Marketing preferences

If you no longer wish to receive email marketing communications from us, you can unsubscribe by clicking on the link in the email footer. For technical reasons, the implementation may take a few days.

Please contact us if you have any difficulty in opting out of SMS or WhatsApp messages.

For information on how to manage cookie preferences, see our Cookie Notice.

Exercising your rights

You can exercise your rights here.

Cross-Border Transfers

We will only transfer your personal data from the United Kingdom to third countries, i.e. countries outside the European Economic Area (EEA), on the basis of appropriate safeguards or if otherwise authorised by applicable law. Third countries providing an adequate level of data protection according to the UK and European Commission include Andorra, Argentina, Canada (for companies covered by the Personal Information Protection and Electronic Documents Act), Switzerland (for transfers out of the EEA), the Faroe Islands, Guernsey, the State of Israel, the Isle of Man, Japan, Jersey, New Zealand, South Korea, the United States (Data Privacy Framework) and Uruguay.

In other cases, Big Bus Tours provides the necessary safeguards, e.g. through the conclusion of data protection contracts adopted by the European Commission (e.g. standard data protection clauses (2021/914/EU) with the recipients, or through other measures provided for by law.

Information Retention

Your personal data will be stored to the extent necessary for the processing purposes set out in this Privacy Notice. Subsequently, we will delete or make anonymous your personal data in accordance with our data retention policy, unless we are legally obliged or permitted to keep your personal data longer (e.g. for legal compliance, tax, accounting or auditing purposes, or to detect and prevent fraudulent or illegal activity).

Information Security

We protect your personal data through technical and organisational measures to help minimise risks associated with data loss, misuse, unauthorised access and unauthorised disclosure and alteration. We use network security and data encryption, for example, as well as physical and logical systems access.

Artificial Intelligence

We may use Artificial Intelligence tools and products to improve our services, to offer you new or enhanced features, a customised and personalised experience, to provide you with enhanced customer service and to support fraud detection.

Children's Privacy

Our services are not intended for use by children. We do not knowingly collect personal data from those who are considered children under applicable national laws.

Data Protection Officer

We have appointed a Data Protection Officer to oversee the protection of your personal data. You can contact them here.

State Privacy Disclosures

View our California Privacy Notice here.

Previous Notice

View the previous Privacy Notice here.