Privacy Policy

This website is run and managed by Euclid Ltd on behalf of Translink.

For completeness Translink’s Privacy Policy must also be read. This privacy policy explains how we use any personal information we collect about you.

We are committed to protecting your privacy.

Our contact details

Full name: Euclid Limited

Address: Euclid House, Parklands Business Park, Forest Road, Denmead, Hants PO7 6XP

Any questions or issues you may have regarding your data privacy, or any wish you have to exercise any of your rights (which are explained below), should be raised via Translink.

However, if you do need to contact us regarding any issue or query about our privacy policy then our Data Protection Officer can be reached by emailing dpo@euclid.co.uk.

Personal Information collected by us and what we do with it

In line with Translink’s privacy policy we need certain information from you in order to verify your eligibility and thus provide you with a yLink bus/rail pass.

Information required will include your name, address, date of birth, email address, mobile phone number, identification photo and proof of age documentation.

Personal information is only passed to third parties in the following situations:

where your application is for a Replacement pass (required because your existing pass is lost or damaged), as these applications do incur a charge for which you will be asked to pay by online card transaction. This will require us to securely send your name and address details to NMI who need the information to verify and authorise your payment card. Your payment card details are entered on a secured page under NMI control. Your payment card details are never entered, stored, processed or transmitted within our website directly.

where your application is for a new first-time pass at a point in time where an initial charge is being made requiring you to make payment by online card transaction. This will require us to securely send your name and address details to NMI who need the information to verify and authorise your payment card. Your payment card details are entered on a secured page under NMI control. Your payment card details are never entered, stored, processed or transmitted within our website directly.

To Arrive (formerly Flowbird) for controlling use of the passes (eg. checking they have not been reported as lost and have not expired etc).

To Royal Mail, by secure means, for address check if this service is requested by Translink.

To the National Fraud Initiative team, on behalf of Translink and by secure means, for the biennial national data matching fraud prevention and detection activity under the management of the UK Government Cabinet Office.

Personal Data Collection

All the personal data, photo and supporting documentation that we require to check, approve, print, encode and deliver your yLink pass to you can be supplied through this website. In exceptional circumstances some additional data may be collected from you by post, phone or email.

For existing pass holders, applying through this website for a replacement pass, the data collected about you will either add to or override data collected previously.

Keeping personal information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected data security breach.

What gives us the right to process this personal data?

We process this information to comply with Translink’s contractual obligations to you. We may also process the data if we have a legal or regulatory obligation to do so (for example if we are required to pass on your personal data to the police authorities) or we have a legitimate obligation to process your personal data and your interests and fundamental rights do not override those interests.

How long will we retain your data?

We will retain personal data for as long as required by Translink. In certain instances we may be required to keep personal data for a longer period for combatting fraud, where it relates to a legal case or claim, or we are under instruction from police authorities or there is some legal or contractual obligation so to do.

Your legal rights

Under GDPR you have rights which you can exercise, generally free of charge, which allow you to:

  • know what we are doing with your information and why we are doing it
  • ask to see what information we hold about you (subject access request)
  • ask us to correct any mistakes in the information we hold about you
  • object to direct marketing
  • make a complaint to the Information Commission
  • withdraw consent at any time (if applicable)

Depending on our reason for using your information you may also be entitled to:

  • ask us to delete information we hold about you
  • have your information transferred electronically to yourself or to another organisation
  • object to decisions being made that significantly affect you
  • object to how we are using your information
  • stop us using your information in certain ways

We will always seek to comply with your request however we may be required to hold or use your information to comply with legal duties. Please note, your request may delay or prevent us delivering a service to you. For example, it would not be possible to delete your data without you first surrendering your entitlement to the yLink pass.

How to complain

You can complain to the IC if you are unhappy with how we have used your data.

The IC’s address is:
Information Commission
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113