Privacy Notice

Last updated: 27 August 2026

Introduction

Myle Connect Ltd is committed to protecting and respecting your privacy.

This Privacy Notice explains what personal information we collect, how and why we use it, who we may share it with, how long we keep it and the rights available to you under data-protection law.

It applies when you use our transport services, website or app; contact our team; travel in a Myle vehicle; make or receive a booking; represent a corporate customer; or are otherwise captured by one of our vehicle camera systems.

Who we are

Myle Connect Ltd is the data controller responsible for the personal information described in this notice.

Company: Myle Connect Ltd
Address: 39 Durham Street, Unit 8, Glasgow, G41 1BS
ICO registration number: ZB390393
General enquiries: help@mymyle.com
Data-protection enquiries and requests: data@mymyle.com
Telephone: 0141 424 4444

Who this notice applies to

This notice may apply to:

• customers and prospective customers;

• passengers and people for whom journeys are booked;

• corporate-account users, administrators, employees, clients and visitors;

• drivers, employees, contractors and service providers;

• website and app users;

• people who contact us with an enquiry, complaint or information request;

• pedestrians, road users and vehicle occupants captured by our vehicle cameras; and

• parents, guardians, carers or organisations arranging transport for another person.

The personal information we collect

Depending on how you interact with Myle, we may collect:

• your name and contact details;

• pickup points, destinations, routes and other journey details;

• booking dates, times, references and journey history;

• live or approximate location information;

• passenger requirements and information needed to arrange an appropriate journey;

• account, organisation, department, cost-centre and billing information;

• payment and transaction information;

• communications with our team, including enquiries, feedback and complaints;

• information relating to lost property, incidents, safeguarding concerns or insurance matters;

• app, website, device and usage information;

• marketing preferences; and

• video, audio and related information collected through vehicle CCTV and dashcam systems.

Where transport is arranged for children, young people or passengers requiring additional support, we may receive relevant information from a parent, guardian, carer, school, local authority, employer or other organisation arranging the journey.

We ask organisations and individuals making bookings for other people to provide only the information needed to arrange and deliver the transport safely.

How we collect personal information

We may collect personal information:

• directly from you;

• through the Myle app or website;

• when a booking is made by telephone;

• from someone making a booking on your behalf;

• from a corporate customer, school, local authority or other organisation arranging transport;

• from our drivers and operational team during service delivery;

• through payment, dispatch, camera and technology providers;

• from vehicle CCTV and dashcam systems;

• through cookies and similar website technologies; and

• from the police, insurers, regulators or other organisations where appropriate and lawful.

How and why we use personal information

We may use personal information to:

• create, manage and fulfil transport bookings;

• allocate and communicate with drivers;

• provide journey tracking, confirmations, receipts and service updates;

• contact customers about delays, changes or booking requirements;

• process payments and manage corporate accounts;

• provide customer support;

• respond to feedback, complaints and lost-property enquiries;

• protect passengers, drivers, members of the public, vehicles and property;

• manage safeguarding concerns;

• investigate collisions, incidents, complaints, fraud, crime or vehicle misuse;

• support insurance claims and legal matters;

• maintain and improve our app, website and services;

• maintain appropriate business, financial and operational records;

• send marketing communications where permitted;

• comply with legal, licensing, regulatory and law-enforcement requirements; and

• establish, exercise or defend legal claims.

Our lawful bases

We use personal information only where we have an appropriate lawful basis.

Depending on the circumstances, we may rely on:

Contract

We may process personal information where it is necessary to provide a transport service, manage a booking, process a payment or fulfil another agreement with you.

Legal obligation

We may process information where necessary to comply with legal, tax, accounting, licensing, safeguarding, regulatory or law-enforcement obligations.

Legitimate interests

We may process information where necessary for our legitimate interests or those of another organisation, provided those interests are not overridden by your rights.

Our legitimate interests may include:

• operating safe, reliable and efficient transport services;

• protecting passengers, drivers, vehicles and members of the public;

• preventing and investigating incidents, crime, fraud and misuse;

• handling complaints, insurance matters and legal claims;

• maintaining appropriate business and financial records;

• improving our services and customer experience; and

• communicating with existing customers about relevant services, where permitted.

Consent

We may rely on your consent for certain types of marketing, non-essential cookies or other activities where consent is appropriate. You can withdraw your consent at any time.

Vehicle CCTV, dashcams and audio recording

We use inward- and outward-facing camera systems in selected vehicles owned and operated by Myle Connect Ltd.

Camera-equipped vehicles display external and internal signage so drivers and passengers know that recording is taking place and can find further privacy information.

How recording operates

Depending on the vehicle and system configuration, cameras may:

• record continuously; or

• be activated by an incident trigger.

The systems may capture video and audio inside the vehicle, together with outward-facing video of the road and surrounding environment.

We do not publish the proportion of continuous and incident-triggered systems because vehicle configurations may change. The signage displayed in an equipped vehicle will notify passengers that recording is in operation.

What the systems may capture

Camera systems may collect:

• images and voices of drivers and passengers;

• images of pedestrians, road users and other vehicle occupants;

• vehicle registration marks;

• road and traffic conditions;

• behaviour or events taking place inside or around the vehicle;

• the date and time of a recording;

• vehicle-identification information; and

• location-related information available through the system.

Why we use vehicle cameras

We use vehicle CCTV, dashcams and audio recording where reasonably necessary to:

• support passenger, driver and public safety;

• protect children, young people and passengers requiring additional support;

• identify and respond to safeguarding concerns;

• investigate collisions, incidents, complaints and serious service or conduct concerns;

• deter and investigate crime, fraud, vehicle damage or misuse;

• protect Myle’s vehicles, property and legal rights;

• support insurance and claims handling;

• establish, exercise or defend legal claims; and

• comply with lawful requests and legal or regulatory obligations.

Footage is not used for marketing and is not intended to replace fair investigation or management procedures.

Our usual lawful basis for using vehicle cameras is our legitimate interests under Article 6(1)(f) of the UK GDPR. These interests include safety, safeguarding, security, incident investigation, the protection of vehicles and property, and the establishment, exercise or defence of legal claims.

Where required, we may also use or disclose footage to comply with a legal obligation.

Myle has completed a Data Protection Impact Assessment covering the use of vehicle camera systems. The assessment and use of the technology will be reviewed when the systems, purposes or risks materially change.

Who can access camera footage

Access to live or recorded footage is restricted to authorised Myle personnel and service providers who require it for an appropriate and lawful purpose.

Depending on the circumstances, footage may be shared with:

• our camera, telematics and secure-storage provider, including Geotab;

• insurers and claims handlers;

• legal advisers;

• repairers or accident investigators;

• the police and other law-enforcement bodies;

• courts, regulators and local authorities;

• safeguarding bodies; and

• other public authorities where disclosure is necessary and lawful.

We do not sell camera footage or permit it to be posted on social media unless publication has been specifically authorised for a legitimate and lawful purpose.

Camera-footage retention

Our standard retention period for vehicle-camera footage is 365 days from the date of recording.

Myle selected this period following a data-protection and safeguarding assessment that considered the nature of the transport services we provide, including journeys involving children, young people and passengers requiring additional support.

At the end of the retention period, footage will be deleted, overwritten or put beyond use unless it must be preserved for longer in connection with:

• an incident or complaint;

• a safeguarding concern;

• an insurance or legal claim;

• an investigation or regulatory enquiry;

• a law-enforcement request;

• anticipated legal proceedings; or

• another legal obligation.

Where footage is preserved for one of these reasons, it will be retained only for as long as reasonably necessary and will then be securely deleted or put beyond use.

The 365-day standard retention period will be reviewed regularly to ensure it remains necessary and proportionate.

Requesting camera footage

You may have the right to request access to footage containing your personal information.

To help us locate the relevant recording, email data@mymyle.com and provide:

• the journey or incident date;

• the approximate time;

• the route or location;

• the vehicle or booking details, if known; and

• a description of the incident or recording.

We may ask for proof of identity or further information to locate the footage and protect other people’s privacy.

Recordings may include other passengers, drivers, pedestrians or road users. We may need to blur, redact or withhold third-party information where required by law.

The rights to access, erasure and objection are not absolute. We may need to retain or restrict the disclosure of footage where necessary for safeguarding, another person’s privacy, a legal claim, a legal obligation or another compelling legitimate reason.

Sharing personal information

We may share personal information with carefully selected organisations where necessary to provide our services or operate our business.

These may include:

Payment providers

We share the information needed to process payments, refunds and financial transactions securely.

Autocab

Our dispatch software is provided by Autocab. Relevant booking, customer, driver and journey information may be processed through its systems to arrange and manage transport services.

Geotab and camera-system providers

Geotab and other relevant technology or storage providers may process vehicle, telematics, video or audio information on our behalf.

Corporate customers and booking organisations

Where a journey is arranged or paid for by an employer, school, local authority, healthcare provider or other organisation, we may provide appropriate booking, journey, billing or incident information to that organisation.

Insurers and professional advisers

We may share information with insurers, claims handlers, accountants, auditors, legal advisers, accident investigators and other professional advisers where necessary.

Marketing and communications providers

We may use service providers to help us deliver communications and marketing. Marketing preferences can be changed at any time.

Public authorities

We may share information with the police, courts, regulators, local authorities, safeguarding bodies or other public authorities where we are legally required or otherwise lawfully permitted to do so.

We assess requests for personal information before making a disclosure. In urgent circumstances involving an immediate risk to life or safety, information may be provided where this is necessary and lawful.

We do not sell personal information.

International transfers

Some service providers may process personal information outside the United Kingdom.

Where this happens, we will use an appropriate safeguard required by data-protection law, such as a UK adequacy regulation, approved contractual protections or another lawful transfer mechanism.

Further information about relevant safeguards can be requested from data@mymyle.com.

Data storage and security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss, destruction or misuse.

These measures may include:

• access controls and role-based permissions;

• password protection and authentication;

• secure systems and storage;

• contractual controls for service providers;

• staff training;

• access logging and auditability where available; and

• secure deletion and retention procedures.

Access is limited to people who require the information for an appropriate business or legal purpose.

How long we keep personal information

We keep personal information only for as long as necessary for the purpose for which it was collected and to meet legal, accounting, regulatory, insurance and operational requirements.

Different retention periods apply to different types of information.

In deciding how long to retain information, we consider:

• the purpose for which it is used;

• the nature and sensitivity of the information;

• safeguarding and safety requirements;

• legal and regulatory obligations;

• limitation periods for legal claims; and

• whether there is an ongoing complaint, incident, investigation or claim.

The specific standard retention period for vehicle-camera footage is explained in the CCTV section above.

Your data-protection rights

Depending on the circumstances, you may have the following rights:

Right of access

You may ask for a copy of the personal information we hold about you.

Right to rectification

You may ask us to correct information you believe is inaccurate or complete information you believe is incomplete.

Right to erasure

You may ask us to delete your personal information in certain circumstances.

Right to restrict processing

You may ask us to restrict how we use your information in certain circumstances.

Right to object

You may object to processing based on legitimate interests or to the use of your information for direct marketing.

Right to data portability

In certain circumstances, you may ask us to transfer information you provided to another organisation or directly to you.

Right to withdraw consent

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect processing that took place before consent was withdrawn.

These rights are subject to conditions and exemptions under data-protection law.

You will not normally be charged for exercising your rights. We aim to respond within one month, although the law allows additional time in certain circumstances.

To exercise a right, email data@mymyle.com. We may ask for information to confirm your identity and help us locate the relevant records.

Cookies

Cookies are small files stored on your computer, tablet or mobile device when you visit a website. They help websites function, remember preferences and understand how visitors use different pages and features.

We may use:

Essential cookies

These are required for the website to operate and cannot normally be switched off through our systems.

Performance and analytics cookies

These help us understand how visitors use the website so we can monitor performance and improve navigation and content.

Functional cookies

These remember choices and preferences to provide enhanced functionality.

Advertising and marketing cookies

These may be used to measure campaigns, personalise advertising or understand the effectiveness of marketing.

Where required, we will ask for your consent before placing non-essential cookies. You can accept, reject or manage non-essential cookies through the website’s cookie controls. You may also adjust your browser settings, although blocking some cookies may affect website functionality.

Marketing communications

Where permitted, we may use your contact details to send relevant news, offers and service updates.

You can opt out at any time by:

• using the unsubscribe option in a marketing message;

• changing your preferences where available; or

• contacting us at help@mymyle.com.

Opting out of marketing will not prevent us from sending essential information about an active booking, payment, account, complaint or service issue.

Third-party links

Our website or app may contain links to websites operated by other organisations.

We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy information before providing personal data.

Employee training

Employees and other relevant personnel receive appropriate training on their data-protection and information-security responsibilities.

Changes to this notice

We may update this notice to reflect changes to our services, systems, suppliers, legal obligations or the way we use personal information.

The latest version will be published on this page. We will update the date at the top when material changes are made.

How to contact us

If you have a question or concern about how Myle uses your personal information, please contact:

Data-protection enquiries and requests: data@mymyle.com
General enquiries: help@mymyle.com
Telephone: 0141 424 4444
Address: Myle Connect Ltd, 39 Durham Street, Unit 8, Glasgow, G41 1BS

How to complain

Please contact us first if you are concerned about how we have used your personal information. We will try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://www.ico.org.uk
Myle ICO registration number: ZB390393