Privacy notice
Contents
- About NaPTAN
- What data we collect about you
- Why we need your data
- Our legal basis for processing your data
- When we share your data
- How long we keep your data
- Where your data is processed and stored
- Children’s privacy protection
- How we protect your data and keep it secure
- Further Information
- Changes to this notice
About NaPTAN
The National Public Transport Access Nodes (NaPTAN) dataset holds information about public transport stops across Great Britain. The NaPTAN dataset is stored and maintained by the Department for Transport.
The Department for Transport’s data controller decides how and why personal data can be processed.
What data we collect about you
We collect the following personal information when you use NaPTAN:
- name
- business contact details
Why we need your data
We need your data so we can make sure NaPTAN information is only edited by the responsible owners.
Managing NaPTAN by using your data
Using your data means we can manage and coordinate NaPTAN, including:
- creating accounts for users to upload
- supporting the service including responses to user enquiries
- gathering feedback to improve our services and, if asked, respond to feedback
- telling you about changes to the NaPTAN service, for example, during redevelopment, and any ongoing issues affecting performance, as part of our community work
Our legal basis for processing your data
NaPTAN is the single source of Great Britain’s public transport stop data.
Our legal basis for gathering your data is so we can keep NaPTAN up to date.
This is a task that is in the public interest or in the exercise of official authority vested in the controller.
Our legal basis for using this data is your consent.
When we share your data
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
We will share your data if we must share by law, for example:
- by court order
- to prevent fraud or other crime
How long we keep your data
We will keep the data for as long as you need to upload to NaPTAN.
Once you notify us that you no longer need to upload to NaPTAN we will remove your details from the system.
We will keep records of your previous uploads for 2 years from this date.
We will only keep your personal data for as long as the law requires us to.
We will only hold your personal data for a:
- minimum of 1 year
- maximum of 7 years
Your email address will only be stored if you have signed up to upload NaPTAN data.
Your details will be removed within two weeks if you ask to be removed, or notify us that you no longer need to upload NaPTAN data.
Where your data is processed and stored
We design, build and run our systems to make sure that your data is as safe as possible. We do this while your data is processed and when it’s stored.
Your personal data may be transferred outside the United Kingdom while being processed by the Department for Transport. We will give you the same level of technical and legal protection as you are within the United Kingdom if this happens.
Children’s privacy protection
We understand the importance of protecting children’s privacy online.
Our services are not designed for, or intentionally targeted at, children 13 years of age or younger.
It is not our policy to intentionally collect or maintain data about anyone under the age of 13.
How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure.
We use systems and processes to prevent unauthorised access to or disclosure of the data we collect about you. This includes protecting your data using varying levels of encryption.
All third parties that process personal data for the Department for Transport are required to keep that data secure.
Further Information
DfT’s privacy policy has more information about your rights in relation to your personal data, how to complain and how to contact the Data Protection Officer. You can view it at https://www.gov.uk/government/organisations/department-for-transport/about/personal-information-charter .
Changes to this notice
We may change this privacy notice.
When we make changes to this notice, the ‘last updated’ date will also change.
Any changes to this privacy notice will apply to you and your data immediately. This means the data we have already collected about you.
The Department for Transport will take reasonable steps to make sure you know if these changes affect how your personal data is processed.
Last updated 12th October 2022