Privacy Policy
Last updated: 2 September 2026
This policy explains how CDM Transport Services Ltd (company number SC855468, registered in Scotland), trading as Highland Airport Transfers, handles your personal data. We are the data controller for the information described below, and we process it in line with UK GDPR and the Data Protection Act 2018.
Information we collect
- Booking details — your name, email address, phone number, pickup and drop-off addresses, travel dates and times, flight number, passenger and luggage numbers, and any notes you add.
- Payment information — payments are handled by Stripe. We never see or store your full card details; we only receive a confirmation of payment and a reference.
- Account requests — business or hotel account enquiries you submit, including company name and contact details.
- Service data — journey status, driver allocation, pickup verification codes, tracking links and any review you choose to leave.
- Technical data — basic device and usage information needed to run and secure the website.
How we use your information
- To quote, confirm, plan and carry out your transfer, tour or luggage transfer.
- To take payment and issue receipts.
- To send service messages — booking confirmations, itineraries, driver-en-route alerts, tracking links and, after a completed journey, a request for feedback.
- To respond to enquiries and manage business or hotel accounts.
- To keep accounting records and meet our legal obligations.
Legal bases
We rely on contract (to deliver the journey you booked), legitimate interests (running and improving the service, preventing fraud, requesting feedback), legal obligation (tax and accounting records) and, where required, consent (optional marketing, which you can withdraw at any time).
Sharing your information
We share only what is necessary, with:
- The allocated driver, so they can complete your journey.
- Stripe, for secure payment processing.
- Our email delivery and hosting/database providers, which store data on our behalf.
- Professional advisers or authorities where the law requires it.
We never sell your personal data.
Automated itineraries
Where an itinerary is generated for your trip, journey details may be processed by an AI service to draft it. Every itinerary is reviewed and approved by a manager before it is sent to you. No decision with a legal or similarly significant effect is made about you by automated means.
How long we keep it
Booking and payment records are kept for six years to meet UK accounting and tax requirements. Tracking links and pickup verification codes expire shortly after the journey. Enquiries that do not lead to a booking are deleted within 12 months. Published reviews remain until you ask us to remove them.
Security
Data is stored on access-controlled, encrypted infrastructure. Staff and driver accounts are individually authenticated and see only the information needed for their role. Customer payment card data never reaches our systems.
Your rights
You have the right to access, correct, delete or restrict use of your personal data, to object to processing, to data portability, and to withdraw consent. You can unsubscribe from non-essential email at any time using the link in our emails. To exercise any right, email bookings@highlandairporttransfers.com.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
We use only the cookies and local storage needed to run the site securely — for example keeping you signed in to a staff or driver account. We do not use advertising cookies.
Contact us
CDM Transport Services Ltd trading as Highland Airport Transfers
Email: bookings@highlandairporttransfers.com
Phone: 07539 663173