CINXE.COM
Privacy policy & customer data | Grand Central Rail
<!DOCTYPE html> <html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#"> <head> <base href="https://www.grandcentralrail.com/privacy-policy"> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /> <script type="text/javascript" async src="//cdn-sitegainer.com/sitegainer_5619650.js"></script> <meta name="description" content="Our Grand Central privacy policy explains what personal data we collect about you, how and why we use it, and how we protect your privacy. Learn more here." /> <meta name="google-site-verification" content="EwdhgkiTxyKuwSf13xm1FKQAmYc3qV5HO8lZZ0TPKFY" /> <meta name="Generator" content="Drupal 10 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <style>div#sliding-popup, div#sliding-popup .eu-cookie-withdraw-banner, .eu-cookie-withdraw-tab {background: #1C2334} div#sliding-popup.eu-cookie-withdraw-wrapper { background: transparent; } #sliding-popup h1, #sliding-popup h2, #sliding-popup h3, #sliding-popup p, #sliding-popup label, #sliding-popup div, .eu-cookie-compliance-more-button, .eu-cookie-compliance-secondary-button, .eu-cookie-withdraw-tab { color: #ffffff;} .eu-cookie-withdraw-tab { border-color: #ffffff;}</style> <script type="application/ld+json">{ "@context": "https://schema.org", "@graph": [ { "@type": "FAQPage", "mainEntity": { "@type": "Question", "answerCount": "1", "acceptedAnswer": { "@type": "Answer" } } } ] }</script> <link rel="icon" href="/sites/default/files/favicon.ico" type="image/vnd.microsoft.icon" /> <link rel="canonical" href="https://www.grandcentralrail.com/privacy-policy" /> <link rel="shortlink" href="https://www.grandcentralrail.com/node/131076" /> </head-placeholder> <title>Privacy policy & customer data | Grand Central Rail</title> <link rel="stylesheet" media="all" href="/libraries/slick-carousel/slick/slick.css?sno1vt" /> <link rel="stylesheet" media="all" href="/sites/default/modules/custom/safe_space_integration/assets/css/main.css?sno1vt" /> <link rel="stylesheet" media="all" href="/modules/contrib/slick/css/layout/slick.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/ajax-progress.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/align.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/autocomplete-loading.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/fieldgroup.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/container-inline.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/clearfix.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/details.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/hidden.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/item-list.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/js.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/nowrap.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/position-container.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/progress.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/reset-appearance.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/resize.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/sticky-header.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/system-status-counter.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/system-status-report-counters.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/system-status-report-general-info.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/tabledrag.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/tablesort.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/themes/contrib/stable/css/system/components/tree-child.module.css?sno1vt" /> <link rel="stylesheet" media="all" href="/modules/contrib/eu_cookie_compliance/css/eu_cookie_compliance.css?sno1vt" /> <link rel="stylesheet" media="all" href="/modules/contrib/calendar/css/calendar.css?sno1vt" /> <link rel="stylesheet" media="all" href="/modules/contrib/calendar/css/calendar_multiday.css?sno1vt" /> <link rel="stylesheet" media="all" href="/modules/custom/grandcentral_configs/css/cookie-settings.css?sno1vt" /> <link rel="stylesheet" media="all" href="/modules/contrib/slick/css/theme/slick.theme.css?sno1vt" /> <link rel="stylesheet" media="all" href="/core/modules/layout_discovery/layouts/onecol/onecol.css?sno1vt" /> <link rel="stylesheet" media="all" href="/sites/default/themes/grandcentral_atomic/assets/css/main.css?sno1vt" /> <link rel="stylesheet" media="print" href="/sites/default/themes/grandcentral_atomic/assets/css/print.css?sno1vt" /> <link rel="stylesheet" media="all" href="https://code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css" /> <link rel="stylesheet" media="all" href="/sites/default/themes/grandcentral_atomic/assets/css/admin.css?sno1vt" /> <link rel="stylesheet" media="all" href="/sites/default/files/asset_injector/css/trains_3386-16554bb8f5747217ddcb9137884141fc.css?sno1vt" /> </css-placeholder> <script src="/core/assets/vendor/jquery/jquery.min.js?v=3.7.1"></script> <script src="/sites/default/files/asset_injector/js/trains_3386_23-3a48c7a84ed087b1f5c21fe120ab680a.js?sno1vt"></script> </js-placeholder> <link href="https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2" rel="preload" as="font" crossorigin="anonymous"> <link href="https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVsEpbCIPrE.woff2" rel="preload" as="font" crossorigin="anonymous"> <link href="https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pbCIPrE.woff2" rel="preload" as="font" crossorigin="anonymous"> <link href="https://fonts.gstatic.com/s/sourcesanspro/v14/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2" rel="preload" as="font" crossorigin="anonymous"> <link href="https://fonts.gstatic.com/s/sourcesanspro/v14/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2" rel="preload" as="font" crossorigin="anonymous"> <script type="text/javascript" src="//cdn-4.convertexperiments.com/js/10041573-10041899.js"></script> </head> <body class="body"> <a href="#main-content" class="visually-hidden focusable"> Skip to main content </a> <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-W3VWZM5" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas> <div> <div id="block-disruptionbanner" data-block-plugin-id="disruption_banner_block"> <div class="disruption-banner--wrapper" > </div> </div> </div> <header class="header"> <div> <div id="block-grandcentral-atomic-branding" data-block-plugin-id="system_branding_block"> <a href="/" rel="home"> <img src="/sites/default/themes/grandcentral_atomic/logo.svg" alt="Home" /> </a> <a href="/" rel="home">Grand Central Rail</a> </div> </div> <div class="container"> <div class="brand"> <a href="https://www.grandcentralrail.com/"><img src="/sites/default/themes/grandcentral_atomic/assets/images/gc_logo@2x.png" alt="Grand Central - logo" /></a> </div> <div class="site-menu-toggle"> <div class="line"></div> <div class="line"></div> <div class="line"></div> </div> <ul class="menu menu--main"> <li> <span>Tickets</span> <ul> <li> <a href="https://buy.grandcentralrail.com/" title="Buy tickets">Buy tickets</a> </li> <li> <a href="/tickets/train-fares-policy" data-drupal-link-system-path="node/121876">Ticket types</a> </li> <li> <a href="/tickets/ticket-types/advance-fares" data-drupal-link-system-path="node/121501">> Advance</a> </li> <li> <a href="/tickets/ticket-types/anytime" data-drupal-link-system-path="node/121486">> Anytime</a> </li> <li> <a href="/tickets/ticket-types/off-peak-and-super-off-peak" data-drupal-link-system-path="node/121971">> Off-peak</a> </li> <li> <a href="/tickets/ticket-offers" data-drupal-link-system-path="node/121521">Ticket offers</a> </li> <li> <a href="/tickets/first-class-upgrades" data-drupal-link-system-path="node/280816">First Class Upgrades</a> </li> <li> <a href="/tickets/multi-buy-tickets" data-drupal-link-system-path="node/121481">Multi-buy tickets </a> </li> <li> <a href="/tickets/group-travel" data-drupal-link-system-path="node/121626">Group travel</a> </li> <li> <a href="/tickets/railcards" data-drupal-link-system-path="node/121476">Railcards & Groupsave</a> </li> </ul> </li> <li> <span>Travelling with GC</span> <ul> <li> <a href="/travelling-with-gc/disruptions/service-updates" data-drupal-link-system-path="node/345391">Service updates</a> </li> <li> <a href="/christmas-trains-new-year-travel" title="Christmas & New Year Travel" data-drupal-link-system-path="node/455226">Christmas & New Year Travel</a> </li> <li> <a href="/travelling-with-gc/timetables" data-drupal-link-system-path="node/121681">Timetables</a> </li> <li> <a href="/travelling-with-gc/engineering-works" title="Timetable and Engineering updates " data-drupal-link-system-path="node/131721">Timetable and Engineering updates </a> </li> <li> <a href="/travelling-with-gc/timetables/ticket-availability" data-drupal-link-system-path="node/131726">> Current Ticket Availability</a> </li> <li> <a href="/strike" title="Strike Information" data-drupal-link-system-path="node/333221">Strike Information</a> </li> <li> <a href="/app" data-drupal-link-system-path="node/132291">Grand Central mobile app</a> </li> <li> <a href="/travelling-with-gc/on-board" data-drupal-link-system-path="node/121646">On board our trains</a> </li> <li> <a href="/travelling-with-gc/the-grand-central-difference" title="The Grand Central Difference" data-drupal-link-system-path="node/226811">The Grand Central Difference</a> </li> </ul> </li> <li> <span>Stations & routes</span> <ul> <li> <a href="/stations" data-drupal-link-system-path="node/121711">Stations</a> </li> <li> <a href="/popular-routes" data-drupal-link-system-path="node/121716">Popular routes</a> </li> <li> <a href="/popular-routes/london-to-bradford" data-drupal-link-system-path="node/121746">> London to Bradford</a> </li> <li> <a href="/popular-routes/london-to-sunderland" data-drupal-link-system-path="node/121736">> London to Sunderland</a> </li> <li> <a href="/popular-routes/london-to-york" data-drupal-link-system-path="node/121741">> London to York</a> </li> <li> <a href="/popular-routes/sunderland-to-london" data-drupal-link-system-path="node/121731">> Sunderland to London</a> </li> <li> <a href="/popular-routes/york-to-london" data-drupal-link-system-path="node/121721">> York to London</a> </li> <li> <a href="/popular-routes/york-to-sunderland" data-drupal-link-system-path="node/121726">> York to Sunderland</a> </li> <li> <a href="/stations/a-to-z" title="A-to-Z of all stations" data-drupal-link-system-path="node/148321">> A-to-Z of all stations</a> </li> </ul> </li> <li> <span>Travel inspiration</span> <ul> <li> <a href="/blog" title="Grand Central blog" data-drupal-link-system-path="node/162526">Grand Central blog</a> </li> <li> <a href="/top-destinations" title="Top destinations" data-drupal-link-system-path="node/121881">Top destinations</a> </li> <li> <a href="/top-destinations/doncaster-and-south-yorkshire" data-drupal-link-system-path="node/126261">> Doncaster & South Yorkshire</a> </li> <li> <a href="/top-destinations/james-herriot-country" data-drupal-link-system-path="node/126241">> Herriot Country</a> </li> <li> <a href="/top-destinations/london" data-drupal-link-system-path="node/122071">> London</a> </li> <li> <a href="/top-destinations/sunderland-and-the-north-east" data-drupal-link-system-path="node/121976">> Sunderland and the North East</a> </li> <li> <a href="/top-destinations/bronte-country" data-drupal-link-system-path="node/126246">> West Yorkshire & Brontë Country</a> </li> <li> <a href="/top-destinations/york-and-north-yorkshire" data-drupal-link-system-path="node/126256">> York & North Yorkshire</a> </li> <li> <a href="/community" title="Community Hub" data-drupal-link-system-path="node/184106">Community Hub</a> </li> </ul> </li> <li> <span>Help</span> <ul> <li> <a href="/help" data-drupal-link-system-path="node/121751">Help & Contact</a> </li> <li> <a href="/help/faqs" data-drupal-link-system-path="node/122821">FAQs</a> </li> <li> <a href="/help/refunds-and-compensation" data-drupal-link-system-path="node/121761">Claim Charter compensation</a> </li> <li> <a href="/help/refunds-and-compensation" data-drupal-link-system-path="node/121761">Ticket refunds</a> </li> <li> <a href="/help/travel-assistance" data-drupal-link-system-path="node/121771">Travel assistance</a> </li> <li> <a href="/help/passenger-charter" title="Passenger charter" data-drupal-link-system-path="node/121896">Passenger charter</a> </li> <li> <a href="/help/change-my-ticket" title="Change my ticket" data-drupal-link-system-path="node/159316">Change my ticket</a> </li> </ul> </li> </ul> <a aria-label="My Account" class="button button--account" href=https://buy.grandcentralrail.com/account>My Account</a> <div class="search"> <input aria-label="Search topic or keyword" type="text" class="input input--search" value=""/> <button aria-label="Search " class="button button--search-submit"><span>Search</span></button> </div> </div> </header> <div class="container"> <div class="main--no-sidebar"> <div> <div id="block-grandcentral-atomic-breadcrumbs" data-block-plugin-id="system_breadcrumb_block"> <nav class="breadcrumb" role="navigation" aria-labelledby="system-breadcrumb"> <ol> <li> <a href="/">Home</a> </li> <li> Privacy policy </li> </ol> </nav> </div> </div> </div> <main class="main--no-sidebar" > <div> <div data-drupal-messages-fallback class="hidden"></div><div id="block-grandcentral-atomic-grandcentral-atomictheme-system-main" data-block-plugin-id="system_main_block"> <article> <div> <div class="layout layout--onecol"> <div class="layout__region layout__region--content"> <div data-block-plugin-id="standalone_qtt"> <h2>Standalone QTT</h2> </div> <div data-block-plugin-id="extra_field_block:node:page:content_moderation_control"> </div> <div data-block-plugin-id="extra_field_block:node:page:links"> </div> </div> </div> <div class="container"> <main id="main-content" class="main--no-sidebar layout__region layout__region--main"> <div data-block-plugin-id="gc_page_title"> <h2>Page Title</h2> <div class="page-block page-block--page-title page-block--page-title--centered"> <h1>Privacy policy</h1> <p class="h3 text-center">Last updated January 16th January 2023</p> </div> </div> </main> </div> <div class="container"> <main id="main-content" class="main layout__region"> <div data-block-plugin-id="gc_content_block"> <div class="page-block page-block--main-content"> <p>Grand Central is committed to protecting your privacy. This privacy policy explains what personal data we collect about you, how and why we use it, and how we protect your privacy. To make it easy to use this privacy policy we have outlined the key sections in the table below which you can use to navigate the policy.</p> <p>This notice (together with our <u><a href="https://www.grandcentralrail.com/terms-and-conditions/">Terms and Conditions</a></u> and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by Grand Central or our processing partners. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting <u><a href="https://www.grandcentralrail.com/">www.grandcentralrailway.com</a></u> or <u><a href="https://buy.grandcentralrail.com/">buy.grandcentralrailway.com</a></u> or providing your information in the circumstances described below, you are accepting and consenting to the practices described in this policy.</p> <ol> <li><u><a href="#who-is-responsible">Who is responsible for your data?</a></u></li> <li><u><a href="#what-personal-data">What personal data do we collect?</a></u></li> <li><u><a href="#cookies">Cookies</a></u></li> <li><u><a href="#how-we-use-your-data">How we use your personal data and the legal basis for such processing?</a></u></li> <li><u><a href="#who-do-we-share-your-information-with">Who do we share your information with?</a></u></li> <li><u><a href="#data-retention">Data Retention</a></u></li> <li><u><a href="#information-security">Information security</a></u></li> <li><u><a href="#transferring-information-internationally">Transferring Information Internationally</a></u></li> <li><u><a href="#updates-to-this-privacy-policy">Updates to this Privacy Policy</a></u></li> <li><u><a href="#your-data-protection-rights">Your Data Protection Rights</a></u></li> <li><u><a href="#questions">Questions about this Privacy Policy</a></u></li> </ol> <ol> <li> <h2><strong><a id="who-is-responsible"></a>Who is responsible for your data?</strong></h2> </li> </ol> <p>For the purpose of the Data Protection Laws, the data controller is Grand Central Railway Company Ltd (“Grand Central”) and the data processors are Journeycall Ltd ("Journeycall"), Acteol Ltd ("Acteol"), XC Trains Ltd ("CrossCountry") and The Chiltern Railway Company Ltd ("Chiltern Railways").</p> <p>Individuals are advised that when using the “Website” those pages with a web address prefixed by <u><a href="https://www.grandcentralrail.com/">www.grandcentralrailway.com</a></u> these pages are managed by Grand Central as the data controller, (a company registered in England and Wales with registration number 03979826 and registered to 1 Admiral Way, Doxford International Business Park, Sunderland SR3 3XP).</p> <ol start="2"> <li> <h2><a id="what-personal-data"></a>What personal data do we collect?</h2> </li> </ol> <h3><strong>Information provided by you</strong></h3> <p>You may give us information about you by filling in forms, emailing us, contacting our staff in person or otherwise on <u><a href="https://www.grandcentralrail.com/">www.grandcentralrailway.com</a></u> or <u><a href="https://buy.grandcentralrail.com/">buy.grandcentralrailway.com.</a></u> This includes information you may provide when you:;</p> <ul> <li>Register and consent to receive marketing information</li> <li>Register to buy ticket(s) or open a Grand Central account</li> <li>Purchase ticket(s)</li> <li>Enter a competition, promotion or survey</li> <li>Provide answers to a promotion or survey</li> <li>Make a complaint</li> <li>Claim compensation</li> <li>Request a refund</li> <li>Book passenger assistance</li> <li>Download our app</li> <li>Register to use our on-train Wi-Fi service</li> <li>Contact us via social media channels</li> <li>Report a problem with our sites</li> <li>Purchase food and drink from our on-board portal</li> </ul> <h3><strong>The information you may give us may include:</strong></h3> <ul> <li>First name and last name</li> <li>Date of birth</li> <li>Address details including postcode</li> <li>Email address</li> <li>Phone number – mobile, home or work</li> <li>Disability details (Passenger assistance)</li> <li>Transaction meta data (e.g. journey details)</li> <li>Relevant rail discount or loyalty cards</li> <li>Limited amount of personal data of any other passengers you are booking tickets for</li> <li>Personal descriptions and photographs</li> <li>Reason for travel</li> <li>Financial and credit card information</li> <li>Data regarding your mobile phone or PC (especially when you register to use our on-train Wi-Fi service)</li> </ul> <h3><strong>Information you may provide via our website(s)</strong></h3> <ul> <li>Geographical location</li> <li>IP or MAC address or details regarding use of your mobile device or PC</li> </ul> <h3><strong>Analytics</strong></h3> <p>We may collect and process anonymous information about your use of the Website or Booking Service, such as some of the pages you visit and some of the searches you perform. Such information is used by us to help us improve the contents of the Website or Booking Service and to compile, for internal market research purposes, aggregate statistics about individuals using it. This kind of anonymous information can be obtained by our use of "cookies" as well as other means. Please see Section 3, '<u><a href="https://grandcentral.prod.acquia-sites.com/privacy-policy#cookies">Cookies</a></u>' for more information on our use of cookies. We may also share anonymous information about your use of the Booking Service with third parties for analytical purposes.</p> <h3><strong>Information we collect about you</strong></h3> <p>With regard to each of your visits to either <u><a href="https://www.grandcentralrail.com/">www.grandcentralrailway.com</a></u> or <u><a href="https://buy.grandcentralrail.com/">buy.grandcentralrailway.com</a></u> or if you register to use our Wi-Fi services we may automatically collect the following information;</p> <ul> <li>Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, time zone setting, browser plug-in types and versions, and platform.</li> <li>Device: what type of device you are using (TV, smartphone, laptop, desktop)</li> <li>OS (Operating system): what operating system your device has (iOS, Android, Windows, Linux, Mac OS)</li> <li>Browser & browser version: which web browser you are using (Internet Explorer/Edge, Opera, Chrome, Firefox, Safari)</li> <li>Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our sites (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number</li> <li>Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data and the resources that you access (this is used to help track the performance of our website)</li> <li>We may also collect information about your computer, including where available your IP address, operating system and browser type for system administration, to improve the structure and content of our site and to report aggregated information to our advertisers and marketing agencies. This is statistical data about your browsing patterns which in turn enables us to track the performance of our site and advertising efforts. It also allows us to serve relevant advertising that is likely to be of interest to you and does not identify any individual. For this reason, we may collect this information even if you do not register with us on our website.</li> </ul> <h3><strong>Information we receive from other sources</strong></h3> <p>We may receive information about you if you use any of the other websites we operate or the other services we provide. We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.</p> <p>We may receive information from other sources if you have provided permission for this to happen or if there is a legal reason for it to occur .</p> <h3>Sensitive personal data </h3> <p>We will not intentionally or systematically seek to collect, store or otherwise use information about you classed as ‘special categories of data’ or ‘sensitive data’.</p> <p>If you require any extra assistance to help you make your journey, we offer our <a href="/help/travel-assistance/passenger-assistance" title="Travel assistance">Travel Assistance service</a>. This may involve you providing us with sensitive personal data.</p> <ol start="3"> <li> <h2><a id="cookies"></a>Cookies</h2> </li> </ol> <p>Our site uses cookies to distinguish you from other users of our site. This helps us to provide you with a good experience when you browse our site and also allows us to improve our sites. For detailed information on the cookies we use and the purposes for which we use them see our <u><a href="https://www.grandcentralrail.com/cookie-policy/">Cookie Policy</a></u>.</p> <ol start="4"> <li> <h2><a id="how-we-use-your-data"></a>How we use your personal data and the legal basis for such processing?</h2> </li> </ol> <p>The collection of the personal data described in Section 2, “What personal data do we collect?” is usually mandatory and, if such personal data is not provided, we will not be able to provide the information, products and services to you. Where the collection of any personal data is not mandatory, we will inform you of this prior to collection, as well as the consequences of failing to provide the relevant personal data.</p> <p>Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.<br /> However, we will normally process your personal information only:</p> <ul> <li>Where we have your consent to do so</li> <li>Where the processing is necessary to perform our contract with you; or</li> <li>Where the processing is in our legitimate interests or those of a third party and such interests are not overridden by your data protection interests or fundamental rights and freedoms; and</li> <li>Where we have a legal obligation to process your personal information.</li> </ul> <h3><strong>Information provided by you</strong></h3> <p>We use your personal information as follows:</p> <h4>Information provided by you for Safety purposes</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Accidents, Incidents, Assaults or Dangerous Occurrences</td> <td>To meet our statutory obligations for the reporting of accidents, incidents, assaults or dangerous occurrences. For the reporting and investigation of safety related events for the purpose of preventing or reducing the risk of their recurrence. Sharing with other organisations with a direct responsibility for maintaining or improving railway safety.</td> <td>The processing of the personal information is necessary for compliance with a legal obligation set by Office of Rail and Road Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR).</td> </tr> <tr> <td>To share with emergency services, as required during emergency situations on board our services.</td> <td>Legitimate interest and duty of care</td> </tr> <tr> <td>Claims</td> <td>To handle your claim in accordance with Claim Allocation and Handling Agreement (CAHA) for losses, property damage or personal injury.</td> <td>Necessary for the performance of the contract. Licence obligations of the Office Rail and Road – Claim Allocation and Handling Agreement (CAHA).</td> </tr> </tbody> </table> <h4>Information provided by you as a Customer or Stakeholder</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Transactional data</td> <td>Provided by you as part of a financial transaction, such as payment for tickets, refunds or compensation.</td> <td>Performance of a contract and legal obligations.</td> </tr> <tr> <td>Sending marketing information to customers</td> <td>Collecting, updating and using contact details such as email address, SMS and postal address to inform you about promotions, news, ticket offers and destination ideas that may be of interest to you.</td> <td>Consent provided by you</td> </tr> <tr> <td>Pre and post travel information</td> <td>Issuing pre and post travel information, including destination ideas and booking information</td> <td>Consent provided by you</td> </tr> <tr> <td>Tracking and improving the performance of website</td> <td>Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data and the resources that you access (this is used to help track and improve the performance of our website)</td> <td>Legitimate interest</td> </tr> <tr> <td>Performance tracking for targeted advertising</td> <td>Information about your computer, including IP address, operating system and browser type for website performance and improvement. This allows us to track performance and serve relevant advertising likely to be of interest to you and does not identify you as an individual.</td> <td>Legitimate interest</td> </tr> <tr> <td>Information provided by customers to us</td> <td>Information you provide to us by filling in forms on our site or that you email us, this includes when you subscribe or register for any service that we may provide via our site or when you complete transactions.</td> <td>Performance of contract</td> </tr> <tr> <td>Research and surveys</td> <td>As part of customer research and surveys</td> <td>Legitimate interest</td> </tr> <tr> <td>Common law or statutory obligations</td> <td>Complying with any common law or statutory obligations, such as in the prevention of fraud</td> <td>Legal obligations</td> </tr> <tr> <td>Service updates</td> <td>Providing customers with updates to train services and/or strike information</td> <td>Performance of contract</td> </tr> <tr> <td>Social media</td> <td>Handling customer social media enquiries</td> <td>Legitimate interest</td> </tr> <tr> <td>Marketing communications</td> <td>Personal information such as your name and contact details when you register for an account or sign-up for marketing communications</td> <td>Consent provided by you</td> </tr> <tr> <td>Data analysis</td> <td>Profiling and selecting customers in order to send relevant, targeted communications and information to improve our services</td> <td>Consent provided by you</td> </tr> <tr> <td>Interactions with our website and our app</td> <td>Website visits and online behaviour, including app usage</td> <td>Legitimate interest</td> </tr> <tr> <td>On board Wi-Fi data connection</td> <td>To provide you with a Wi-Fi service on board our services</td> <td>Performance of a contract</td> </tr> <tr> <td>Customer contact centre</td> <td>To support in any queries with bookings, travel assistance or other issues</td> <td>Performance of a contract</td> </tr> <tr> <td>Email analysis</td> <td>Email engagement statistics</td> <td>Consent provided by you</td> </tr> <tr> <td>Smart ticketing</td> <td>Administration of your tickets and handling queries relating to your tickets</td> <td>Performance of a contract and legitimate interests</td> </tr> <tr> <td>Customer research panel</td> <td>Joining our customer research panel</td> <td>Consent provided by you</td> </tr> <tr> <td>Social media</td> <td>Your messages to us via social media channels</td> <td>Legitimate interest</td> </tr> <tr> <td>Prize draw/giveaways/competition forms</td> <td>To publish the name, county and winner of a prize draw or competition and if relevant, the winning entry in accordance with the requirements of the CAP Code.</td> <td>Legitimate interest to ensure compliance with the UK Code of Non-broadcast Advertising, Sales Promotion and Direct Marketing (CAP Code)</td> </tr> <tr> <td>Catering purchases on board</td> <td>To receive electronic receipts for Catering purchases made on board the train</td> <td>Consent provided by you</td> </tr> <tr> <td>Stakeholders – keeping you informed</td> <td>To provide you with information about our goods and services that may interest you or them</td> <td>Consent provided by you</td> </tr> <tr> <td>Stakeholders – supporting Rail Partnerships</td> <td>To support Community Rail Partnerships</td> <td>Consent provided by you</td> </tr> <tr> <td>Stakeholders – supporting community causes</td> <td>To support causes within the community</td> <td>Consent provided by you</td> </tr> </tbody> </table> <h4>Information provided by you in relation to the provision of Customer Services</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Travel assistance</td> <td>To arrange and carry our extra assistance for your journey</td> <td>Equality Act 2010, working with other Rail Industry partners to ensure compliance where complimentary services are supplied under contract. Please see our Disables People’s Protection Policy</td> </tr> <tr> <td>Compliments, suggestions, complaints, reporting accidents and appeals</td> <td>To respond, investigate and make the necessary enquiries regarding your initial correspondence.</td> <td>Performance of a contract</td> </tr> <tr> <td>To respond, investigate and make the necessary enquiries regarding the appeal.</td> <td>Processing is necessary to protect the vital interests</td> </tr> <tr> <td>To record and pass on details of accidents or injuries that have happened on our services to our Safety Team.</td> <td>Legal obligation</td> </tr> <tr> <td>Claims for Compensation and Refunds</td> <td>To provide compensation in line with our Delay Repay Scheme. To handle the claims for compensation and refunds.</td> <td>To provide compensation in line with our Passenger Charter and National Rail Conditions of Travel.</td> </tr> <tr> <td>Revenue Protection & Prosecutions Policy</td> <td>Preventing and reducing fare evasion and offenses of violence against its workforce, which may involve prosecution of perpetrators.</td> <td>For fare evasion – National Conditions of Travel and National Railway Byelaws (2005) Regulations of Railways Act 1889. For serious and systematic fare evasion or revenue fraud – Fraud Act 2006. For Assault against our employees is an offence – Criminal Justice Act 1988, Offences against the Person Act 1861, Public Order Act 1986. Please see our Prosecutions Policy.</td> </tr> </tbody> </table> <h4>Information provided by you to our Human Resources Department</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Recruitment</td> <td>For pre-appointment assessment for either job vacancies, apprenticeships, placements or our graduate training program.</td> <td>Necessary for the performance of a contract with you or to take steps to enter into a contract.</td> </tr> <tr> <td>To receive relevant notifications regarding job vacancies with Grand Central or other vacancies within the DB and Arriva organisations.</td> <td>Consent provided by you</td> </tr> </tbody> </table> <h4>Information provided by you in relation to Subject Access Requests</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Subject Access Request</td> <td>To process and investigate any complaint, subject access request and other general requests under the General Data Protection Regulation.</td> <td>Consent provided by you. Legal obligation to process your personal information – General Data Protection Regulation (GDPR)</td> </tr> </tbody> </table> <h4>Information provided by you in relation to you visiting a Grand Central location</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Visitors</td> <td>To enable visitors to gain entry/access into Grand Central location</td> <td>Legitimate interest</td> </tr> </tbody> </table> <h3>Information we collect about you</h3> <p>We use your personal information as follows: Information we collect about you for Safety purposes</p> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Body worn cameras</td> <td>Images are recorded for the purpose of Customer, Security, Staff Security, Crime Prevention and Public Safety on trains where body worn cameras are in use.</td> <td>Necessary for the Legitimate interest, public interest task and/or legal obligation (prevention and detection of crime).</td> </tr> </tbody> </table> <h4>Information we collect about you as Customer or Stakeholder</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Purchase of tickets</td> <td>Transactional information (such as your payment details when you buy tickets, the purchase and usage of Wi-Fi)</td> <td>Performance of contract, legal requirement in relation to Limitation Act 1980</td> </tr> <tr> <td>Marketing communications</td> <td>Personal information such as your name and contact details when you register for an account or sign-up for marketing communications</td> <td>Consent provided by you</td> </tr> <tr> <td>Targeted communications</td> <td>Profiling and selection customers in order to send relevant, targeted communication and information and improve services</td> <td>Consent provided by you</td> </tr> <tr> <td>Customer contact centre</td> <td>To assist customers with any queries regarding their bookings, passenger assist requests and other issues</td> <td>Performance of a contract</td> </tr> <tr> <td>Smart ticketing</td> <td>Administration of your tickets and handling queries relating to your tickets</td> <td>Performance of a contract and legitimate interests</td> </tr> <tr> <td>Behaviour</td> <td>Website visits and online behaviour, including app usage</td> <td>Legitimate interest</td> </tr> <tr> <td>Engagement</td> <td>Email engagement statistics</td> <td>Consent provided by you</td> </tr> <tr> <td>Customer research panel</td> <td>Feedback via our Customer Research Panel (All submissions are made anonymous for analysis and reporting)</td> <td>Legitimate interest</td> </tr> <tr> <td>Prize draw/giveaways/competition forms</td> <td>To publish the name, county and winner of a prize draw or competition and if relevant, the winning entry in accordance with the requirements of the CAP Code</td> <td>Legitimate interest to ensure compliance with the UK Code of Non-broadcast Advertising, Sales Promotion and Direct Marketing (CAP Code)</td> </tr> <tr> <td>Social media</td> <td>Your messages to us via social media channels</td> <td>Legitimate interest</td> </tr> <tr> <td>Competitions</td> <td>Competition entry winners</td> <td>Consent provided by you</td> </tr> <tr> <td>Customer experience</td> <td>To gauge the experience and use feedback for service improvements such as surveys</td> <td>Consent provided by you</td> </tr> <tr> <td>Customer relations call recording</td> <td>To record calls for monitoring and training purposes. Potentially used as evidence in fraudulent cases. (Note this does not include payment details)</td> <td>Performance of a contract and legitimate interest</td> </tr> </tbody> </table> <h4>Information we collect about you as a potential employee</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Recruitment</td> <td>To send you relevant job vacancy updates</td> <td>Consent provided by you</td> </tr> </tbody> </table> <h3>Information we receive from other sources</h3> <p>We may combine this information with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).</p> <p>If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under Section 11, “Questions about this Privacy Policy”</p> <h4>Information we receive from other sources for Safety purposes</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Accidents, Incidents, Assaults or Dangerous Occurrences</td> <td>To meet our statutory obligations for the reporting of accidents, incidents, assaults or dangerous occurrences</td> <td>The processing of the personal information is necessary for compliance with a legal obligation set by Office of Rail and Road Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR)</td> </tr> <tr> <td>Body worn cameras</td> <td>Images are required for evidential purposes in legal or disciplinary proceedings</td> <td>Necessary for the Legitimate interest, public interest task and/or legal obligation (prevention and detection of crime).</td> </tr> <tr> <td>Safety claims</td> <td>To handle your claim in accordance with Claim Allocation and Handling Agreement (CAHA) for losses, property damage or personal injury</td> <td>Necessary for the performance of the contract. Licence obligations of the Office Rail and Road – Claim Allocation and Handling Agreement (CAHA)</td> </tr> </tbody> </table> <p>Information we receive from other sources as a Customer</p> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Smart ticketing</td> <td>Administration of your tickets and handling queries relating to your tickets, which may contain other Train Operating Companies’ products</td> <td>Performance of a contract and legitimate interests</td> </tr> <tr> <td>Guest Checkout</td> <td>You can use our booking service without registering as a new user on our mobile site, website or through our app. Transactions as a guest would however not be displayed in your account if you are a registered user, but subsequently choose to checkout as Guest. All personal data collected when booking as a Guest will be processed in accordance with this Privacy Policy.</td> <td>Performance of a contract</td> </tr> </tbody> </table> <p>Information we receive from other sources for the provision of Customer Services</p> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Travel Assistance</td> <td>To carry out assistance for your journey</td> <td>Performance of a contract</td> </tr> <tr> <td>Compliments, suggestions, complaints and appeals</td> <td>To respond, investigate and make the necessary enquiries regarding your initial correspondence</td> <td>Performance of a contract</td> </tr> <tr> <td>To respond, investigate and make the necessary enquiries regarding the appeal</td> <td>Processing is necessary to protect the vital interests</td> </tr> <tr> <td>Claims for compensation and refunds</td> <td>To assist with the compensation claims by sharing the information with the appropriate other train operators</td> <td>To provide compensation in line with our Passenger Charter and National Rail Conditions of Travel</td> </tr> <tr> <td>Revenue, Protection & Prosecutions</td> <td>To support revenue protection related investigations that may lead to prosecutions.</td> <td>National Conditions of Travel and National Railway Byelaws</td> </tr> </tbody> </table> <h4>Information we receive from other sources in our Human Resources department</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Recruitment</td> <td>We may receive references from previous employers. We may also receive reports from external suppliers for pre-employment testing or medical reports</td> <td>Necessary for the performance of a contract with you or to take steps to enter into a contract</td> </tr> </tbody> </table> <h4>Information we receive from other sources in relation to Subject Access Requests</h4> <table> <thead> <tr> <th scope="col">Area</th> <th scope="col">Purpose of Processing</th> <th scope="col">Legal Basis for Processing</th> </tr> </thead> <tbody> <tr> <td>Subject Access Request</td> <td>Processing and investigating of Data Protection complaints received from the Information Commissioner’s Office</td> <td>Consent provided by you. Legal obligation to process your personal information – General Data Protection Regulation (GDPR)</td> </tr> </tbody> </table> <p>Never publish <a href="https://html-cleaner.com/" target="_blank">dirty HTML code</a> and double check your content before publishing articles on the web!</p> <ol start="5"> <li> <h2><a id="who-do-we-share-your-information-with"></a>Who do we share your information with?</h2> </li> </ol> <p>We may disclose your personal data to the following categories of recipient for the purposes described in this Privacy Policy.</p> <h3>Sharing your information for Safety Purposes</h3> <ul> <li>With Rail Safety and Standard Board, Rail Accident Investigation Branch, Office of Rail and Road, Government appointed enquires, legal representors and other Rail Industry Partners to meet our statutory obligations for the reporting of accidents, incidents, assaults or dangerous occurrences</li> <li>With British Transport Police, legal, other Rail Industry Partners, CCTV images required for evidential purposes in legal or disciplinary proceedingS</li> <li>With Solicitors, Transcare Law, Office of Road and Rail, consumer watchdogs, and other Rail Industry Partners in accordance with Claim Allocation and Handling Agreement (CAHA) for losses property damage or personal injury</li> <li>With Emergency Services as required during emergency situations on board our services, to provide you with medical assistance if required</li> </ul> <h3>Sharing your information as Passenger/Member of the Public or Stakeholder</h3> <h4>Service Providers</h4> <ul> <li>We use third party service providers to carry out many of the activities listed in Section 4, “How we use your personal data and the legal basis for such processing”. This includes our Customer Relationship Management (CRM) provider Acteol as well advertising and behaviour tracking from Google and Microsoft.</li> <li>Our service providers act on our instructions, and we ensure that they take measures to keep your personal data safe</li> <li>We don’t allow our service providers to use your personal data for any purpose other than carrying out the service in question, and we only provide them with those parts of your personal data that they actually need</li> <li>Other UK Rail Operators in order that they can provide support in respect of your Smartcard products, from any given location regardless of the retailer</li> <li>Fraudulent payment detection. We use a US based payment provider who is PCI DSS Level 1 accredited who may interrogate your payment data. Your payment data is used only for the transaction and your data is not retained any longer than is required for payment processing, fraud detection/prevention and auditing</li> <li>All payments for ticket purchase through Visa and Mastercard are processed by Silverrail</li> <li>Apptentive, Inc for the purpose of managing feedback in respect of the Grand Central app</li> <li>Chiltern Railways and group bookings/carnet ticket sales</li> <li>Whoosh Media and Wi-Fi portal provision</li> <li>Icomera and Wi-Fi provision</li> </ul> <h4>Other UK Rail Operators</h4> <ul> <li>We share your personal data with some operators for ticket fulfilment purposes</li> <li>We may share your email address or phone number with some operators so that they can contact you with service messages, for example if a train is cancelled.</li> <li>We may also need to share some of your personal data with any other transport carriers or other service providers who provide you with any part of the services that you’ve booked through us.</li> </ul> <h4>The Authorities</h4> <ul> <li>In some circumstances we have a legal obligation to share parts of your personal data with police or customs authorities, regulatory authorities, government & law enforcement agencies. This may include, but is not limited to, fraud prevention and detection.</li> <li>We may also disclose your personal data to any competent law enforcement body, regulator, government agency such as Department for Transport (DFT) or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation; (ii) to exercise, establish or defend or legal rights; or (iii) to protect your vital interests or those of any other person;</li> </ul> <h3>Sharing your information for the provision of Customer Services</h3> <ul> <li>To carry out assistance for your journey we work closely with Office of Road and Rail, Rail Delivery Group, Rail Industry partners and Taxi companies in order to continually improve the levels of service we offer customers who require such assistance when making a journey</li> <li>To allow complaints and appeals to be processed by the appropriate company in accordance with the Railways Passenger Charter</li> <li>To provide compensation for delays in line with our Passenger Charter and National Rail Conditions of Travel</li> <li>Preventing and reducing the fare evasion and offences of violence against its workforce, which may involve prosecution of perpetrators in accordance with National Conditions of Travel and National Railway Byelaws.</li> </ul> <h3>Sharing your information – Human Resources department</h3> <ul> <li>For external suppliers to support us in our pre-appointment assessment for either job vacancies, apprenticeships, placements or our graduate training program </li> </ul> <h3>Sharing your information in relation to Individual Rights Requests</h3> <ul> <li>Information Commissioner Office – for the purposes of reporting, processing and investigating of Data Protection complaints or incidents received from the Information Commissioner’s Office.</li> </ul> <h3>Other</h3> <ul> <li>We may also transfer your personal data to a buyer or potential buyer (and its agents and advisers) of Grand Central in connection with any reorganisation, restructuring, merger or sale, or other transferring of assets provided that we inform any receiving party it must use your personal information only for the purposes disclosed in this Privacy Policy.</li> <li>We may disclose your data to any other person to whom you request us to make disclosure or if you consent to such disclosure.</li> </ul> <ol start="6"> <li> <h2><a id="data-retention"></a>Data Retention</h2> </li> </ol> <p>We will not retain your personal data for longer than is necessary to fulfil the purposes for which we collected that personal information, unless the law permits or requires that we retain it for longer.</p> <p>The table below explains in more detail how long Grand Central will store different types of customer information for:</p> <h3>Data Retention – Safety Purposes</h3> <table> <thead> <tr> <th scope="col">Customer Information</th> <th scope="col">Retention Period</th> </tr> </thead> <tbody> <tr> <td>Reporting of accidents, incidents, assaults or dangerous occurrences</td> <td>As per the statutory provision (see Social Security (claims and payments) Regulations 1971; Regulation 25. Social Security Act 1992; OR Section 8. Limitation Act 1980)</td> </tr> <tr> <td>Records relating to accident/injury</td> <td>As per the statutory provision - generally from the date of the incident plus 12 years. A further retention period may need to be considered. </td> </tr> <tr> <td>CCTV and Body worn cameras</td> <td>Maximum 30 days dependant of system capabilities from record creation, unless there is a specific request relating to the CCTV/camera footage. Where there is a specific request which includes crime, terrorism and HM Coroner relating to the CCTV/camera footage, the footage will be kept for the duration of the claim matter, plus an additional six years after the claim is closed.</td> </tr> <tr> <td>Safety claims</td> <td>For the duration of the claim, plus an additional 6 years after the claim is closed</td> </tr> <tr> <td>CCTV/body worn camera footage relating to a claim</td> <td>For the duration of the claim matter, plus additional 6 years after the claim is closed.</td> </tr> <tr> <td>Claimant bank details</td> <td>Until Payment is made in full to the claimant. </td> </tr> </tbody> </table> <h3>Data retention relating to the provision of Customer or Stakeholder</h3> <table> <thead> <tr> <th scope="col">Customer Information</th> <th scope="col">Retention Period</th> </tr> </thead> <tbody> <tr> <td>For customers who have made an online transaction in the last 6 years</td> <td>Transaction history – we will keep customer information associated with transactional data for 6 years from the date of the customers last transaction. After which point, all personal customer information will be deleted, but statistical information will be retained on a completely anonymised basis.</td> </tr> <tr> <td>Anonymised website data</td> <td>We will keep anonymised website data (including but not limited to traffic data, location data, operating systems and browsing information) for 38 months. This data helps us with the ongoing improvement and development of our website and does not identify users individually (for example through a MAC address, IP address or cookie data).</td> </tr> <tr> <td>Stakeholder – General</td> <td>For no longer than the necessary for the purposes for which the personal data was collected.</td> </tr> <tr> <td>Stakeholder – Community Rail</td> <td>For no longer than the necessary for the purposes for which the personal data was collected.</td> </tr> <tr> <td>Stakeholder – Supporting causes in the community</td> <td>For a period of 6 years after the support is provided.</td> </tr> <tr> <td>Contact centre call recording</td> <td>3 months</td> </tr> </tbody> </table> <h3>Data retention relating to the provision of Customer Services</h3> <table> <thead> <tr> <th scope="col">Customer Information</th> <th scope="col">Retention Period</th> </tr> </thead> <tbody> <tr> <td>Travel Assistance bookings</td> <td>For a period of 2 years (as advised by Rail Delivery Group)</td> </tr> <tr> <td>Compliments, suggestions, complaints and appeals</td> <td>For no longer than the necessary purposes for which the personal data was collected (maximum period of 6 years)</td> </tr> <tr> <td>Compensation and refunds</td> <td>6 years from the date of the transaction or payment made</td> </tr> <tr> <td>Revenue protection and prosecutions policy</td> <td>For a period of 6 years following the end case completion</td> </tr> </tbody> </table> <h3>Data retention – Human Resources department</h3> <table> <thead> <tr> <th scope="col">Customer Information</th> <th scope="col">Retention Period</th> </tr> </thead> <tbody> <tr> <td>Job applications and interview records for unsuccessful candidates</td> <td>6 months after notifying unsuccessful candidates. The applicant should be informed of GC’s retention period when they complete the application</td> </tr> </tbody> </table> <h3>Data retention – Individual Rights Access</h3> <table> <thead> <tr> <th scope="col">Customer Information</th> <th scope="col">Retention Period</th> </tr> </thead> <tbody> <tr> <td>Individual Rights Requests</td> <td>We hold the data for 2 years</td> </tr> </tbody> </table> <ol start="7"> <li> <h2><a id="information-security"></a>Information Security</h2> </li> </ol> <p>We apply appropriate administrative, technical and organisational security measures to protect your personal data that is under our control from unauthorised access, collection, use, disclosure, copying, modification or disposal. All information you provide to us is stored on secure servers. Grand Central is part of the Arriva plc Group, which trains its employees regarding our data privacy policies and procedures and permit authorised employees to access personal data on a need to know basis, as required for their role. We also take steps to ensure that any service provider that we engage to process personal data on our behalf takes appropriate technical and organisational measures to safeguard such personal data.</p> <ol start="8"> <li> <h2><a id="transferring-information-internationally"></a>Transferring Information Internationally</h2> </li> </ol> <p>Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.<br /> <br /> Specifically, we may use third party service providers located in India, Ireland, Germany, Sweden, Tunisia, and the US. This means that, when we collect your personal information, it may be processed in these countries. However, we have taken appropriate safeguards to require that your personal data will remain protected in accordance with this Privacy Policy. These safeguards include implementing the European Commission’s Standard Contractual Clauses for transfers of personal information to our third party service providers and further details can be provided upon request.</p> <ol start="9"> <li> <h2><a id="updates-to-this-privacy-policy"></a>Updates to this Privacy Policy</h2> </li> </ol> <p>We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.</p> <p>You can see when this Privacy Policy was last updated by checking the “last updated” date displayed at the top of this Privacy Policy.</p> <ol start="10"> <li> <h2><a id="your-data-protection-rights"></a>Your Data Protection Rights</h2> </li> </ol> <p>You have the following data protection rights:</p> <ul> <li>If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting Grand Central, via <a href="/cdn-cgi/l/email-protection#6106020500150011130e15040215080e0f210613000f0502040f1513000d1300080d4f020e0c"><span class="__cf_email__" data-cfemail="0a6d696e6b7e6b7a78657e6f697e6365644a6d786b646e696f647e786b66786b636624696567">[email protected]</span></a> or via <u><a href="https://grandcentralrail.my-pref.com/">our preference centre</a></u>.</li> <li>Please note: We retain personal information from deactivated accounts to comply with law, prevent fraud, collect any fees owed, resolve disputes, assist with any investigations, enforce our terms and conditions, and take other actions otherwise permitted by law. We may also retain some pseudonymous data for analytics purposes so we can understand, for example, how many visitors we have had to the Website or Booking Service.</li> <li>In addition, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us at <u><a href="/cdn-cgi/l/email-protection#91f6f2f5f0e5f0e1e3fee5f4f2e5f8feffd1f6e3f0fff5f2f4ffe5e3f0fde3f0f8fdbff2fefcb1"><span class="__cf_email__" data-cfemail="b3d4d0d7d2c7d2c3c1dcc7d6d0c7dadcddf3d4c1d2ddd7d0d6ddc7c1d2dfc1d2dadf9dd0dcde">[email protected]</span></a></u> or the postal address below.</li> <li>If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. You can update your consent preferences at any time by logging into your account. Please note it can take up to 48 hours for this information to be updated.<br /> We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.</li> </ul> <p>If you wish to withdraw consent from marketing communications, or close your online account with Grand Central, please contact us at any time at <a href="/cdn-cgi/l/email-protection#bfd8dcdbdecbdecfcdd0cbdadccbd6d0d1ffd8cdded1dbdcdad1cbcdded3cdded6d391dcd0d2"><span class="__cf_email__" data-cfemail="1a7d797e7b6e7b6a68756e7f796e7375745a7d687b747e797f746e687b76687b737634797577">[email protected]</span></a>. Please note that this may take up to 30 days.</p> <ol start="11"> <li> <h2><a id="questions"></a>Questions about this Privacy Policy</h2> </li> </ol> <p>If you have any question, concerns or complaints about this Privacy Policy or our handling of your personal data, you can contact us by email using <u><a href="/cdn-cgi/l/email-protection#cbaca8afaabfaabbb9a4bfaea8bfa2a4a58bacb9aaa5afa8aea5bfb9aaa7b9aaa2a7e5a8a4a6eb"><span class="__cf_email__" data-cfemail="3156525550455041435e45545245585e5f715643505f5552545f4543505d4350585d1f525e5c">[email protected]</span></a></u> or by post to the following address:</p> <p>GC Data Protection Champion<br /> Grand Central Railway<br /> 3<sup>rd</sup> Floor, Northern House<br /> Rougier Street<br /> York<br /> YO1 6HZ</p> <p>If you are unsatisfied with the response, you can contact Arriva plc's Data Protection Officer at <u><a href="/cdn-cgi/l/email-protection#21454055400f51534e55444255484e4f614053534857400f424e0f544a"><span class="__cf_email__" data-cfemail="167277627738666479627375627f7978567764647f607738757938637d">[email protected]</span></a></u>.</p> <p>You have the right to complain to a data protection authority about our collection and use of your personal information. If you are based in the European Economic Area, please contact your local data protection authority. (Contact details for data protection authorities in the European Economic Area, Switzerland and certain non-European countries are available on the EU Commission's website via the following link): <u><a href="http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm">http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm</a></u>).</p> </div> </div> </main> <aside class="sidebar layout__region"> <div data-block-plugin-id="gc_quick_links_block"> <div class="page-block page-block--quick-links"> <h3>Service status</h3> <ul> <li><a href="/travelling-with-gc/live-arrivals-and-departures">Live arrivals and departures</a></li> <li><a href="/travelling-with-gc/disruptions">Live Service Status</a></li> <li><a href="/updates">Book with Confidence</a></li> </ul> </div> </div> <div data-block-plugin-id="gc_quick_links_block"> <h2>Quick Links</h2> <div class="page-block page-block--quick-links"> <h3>Related content</h3> <ul> </ul> </div> </div> </aside> </div> </div> </article> </div> </div> </main> </div> <footer class="footer"> <div class="container-fluid"> <div class="newsletter dark"> <div class="container"> <div id="newsletter__form" class="newsletter__form"> <div class="newsletter__form__text"> I would like to receive special offers and marketing information from Grand Central:<br> You can opt out at any time and for more information please read our <a href="/privacy-policy">Privacy Policy</a>.</div> <form id="newsletter_form_id" > <input autocomplete="off" data-drupal-selector="form-8e1kcmvtiv8fqfz-2wnmckda2o9o-p7rwncfjgp6bhi" type="hidden" name="form_build_id" value="form-8e1KCMvTIV8FqFZ_2wNmcKdA2O9O_p7rwncFjgp6BhI" /> <input data-drupal-selector="edit-newsletter-form" type="hidden" name="form_id" value="newsletter_form" /> <div class="newsletter__form__input-wrapper"> <div class="js-form-item form-item js-form-type-email form-item-email js-form-item-email form-no-label"> <input class="input form-email required" placeholder="Email..." aria-label="Email" data-drupal-selector="edit-email" type="email" id="edit-email" name="email" value="" size="60" maxlength="254" required="required" aria-required="true" /> </div> <div id="newsletter__ajax-response-email"></div> </div> <input class="button--ghost newsletter-submit button js-form-submit form-submit" data-drupal-selector="submit" type="submit" id="submit" name="newsletter_submit" value="Sign up" /> <div id="newsletter__ajax-response"></div> <div id="newsletter__form__modaloverlay"></div> <div id="newsletter__form__modal"> <div id="newsletter__form__modal__container"> <div class="modal_header_container"> <h3 class="text-align-center">Please complete sign up</h3> <h4 class="text-align-center">Submitted email address:<br/><span id="modal_header_email"></span></h4> </div> <div class="text_inputs-wrapper"> <div> <span>Name</span> <div class="js-form-item form-item js-form-type-textfield form-item-name js-form-item-name form-no-label"> <input class="input form-text required" placeholder="First name..." aria-label="First name" data-drupal-selector="edit-name" type="text" id="edit-name" name="name" value="" size="60" maxlength="128" required="required" aria-required="true" /> </div> <div id="newsletter__ajax-response-name"></div> </div> <div> <span>Surname</span> <div class="js-form-item form-item js-form-type-textfield form-item-surname js-form-item-surname form-no-label"> <input class="input form-text required" placeholder="Surname..." aria-label="Surname" data-drupal-selector="edit-surname" type="text" id="edit-surname" name="surname" value="" size="60" maxlength="128" required="required" aria-required="true" /> </div> <div id="newsletter__ajax-response-surname"></div> </div> </div> <div class="policy_text_container"> <div class="js-form-item form-item js-form-type-checkbox form-item-policy js-form-item-policy"> <input class="input form-checkbox required" data-drupal-selector="edit-policy" type="checkbox" id="edit-policy" name="policy" value="1" required="required" aria-required="true" /> <label for="edit-policy" class="option js-form-required form-required">Tick here to receive special offers and marketing information from Grand Central. You can opt out at any time and for more information please read our <a href="/privacy-policy">Privacy Policy.</a></label> </div> </div> <div class="policy_button_container"> <div id="accept_policy" class="button disabled">Submit</div> <div id="cancel_policy" class="button button--ghost">Cancel</div> </div> </div> <div id="newsletter__form__modal__thankyou_container"> <div class="policy_text_container"> <h3 class="text-align-center">Thank you for signing up!</h3> </div> <div class="policy_button_container"> <div id="close_thankyou" class="button button--ghost">Close</div> </div> </div> </div> </form> </div> <noscript>This form needs Javascript to work properly.</noscript> </div> </div> <div class="container"> <ul class="menu menu--footer"> <li> <span>Check your journey</span> <ul> <li> <a href="/travelling-with-gc/live-arrivals-and-departures" data-drupal-link-system-path="node/121641">Live arrivals and departures</a> </li> <li> <a href="/travelling-with-gc/disruptions" data-drupal-link-system-path="node/121631">All national disruptions</a> </li> <li> <a href="/travelling-with-gc/timetables" data-drupal-link-system-path="node/121681">Timetables</a> </li> <li> <a href="/travelling-with-gc/on-board" data-drupal-link-system-path="node/121646">On board</a> </li> </ul> </li> <li> <span>Tickets and offers</span> <ul> <li> <a href="/tickets/train-fares-policy" data-drupal-link-system-path="node/121876">Ticket types</a> </li> <li> <a href="/tickets/railcards" data-drupal-link-system-path="node/121476">Railcards</a> </li> <li> <a href="/tickets/multi-buy-tickets" data-drupal-link-system-path="node/121481">Multi-buy tickets</a> </li> <li> <a href="/tickets/ticket-types/first-class-and-business-travel" data-drupal-link-system-path="node/121506">First Class travel</a> </li> <li> <a href="/arriva-bus-connections" data-drupal-link-system-path="node/121921">Arriva Bus connections</a> </li> <li> <a href="/student-discount" title="Student discount" data-drupal-link-system-path="node/230061">Student Central - get 25% off train travel</a> </li> </ul> </li> <li> <span>Destinations and routes</span> <ul> <li> <a href="/top-destinations" data-drupal-link-system-path="node/121881">Top destinations</a> </li> <li> <a href="/popular-routes" data-drupal-link-system-path="node/121716">Popular routes</a> </li> <li> <a href="/blog" title="Grand Central blog" data-drupal-link-system-path="node/162526">Blog</a> </li> <li> <a href="/stations" data-drupal-link-system-path="node/121711">Stations</a> </li> </ul> </li> <li> <span>Help</span> <ul> <li> <a href="/help" data-drupal-link-system-path="node/121751">Help & Contact</a> </li> <li> <a href="/help/refunds-and-compensation" data-drupal-link-system-path="node/121761">Get a refund</a> </li> <li> <a href="https://compensation.grandcentralrail.com/user/login">Compensation form</a> </li> <li> <a href="/help/lost-property" data-drupal-link-system-path="node/121786">Lost property</a> </li> <li> <a href="/travelling-with-gc/on-board" data-drupal-link-system-path="node/121646">On board our trains</a> </li> <li> <a href="/help/travel-assistance" data-drupal-link-system-path="node/121771">Travel assistance & Passenger Assist</a> </li> <li> <a href="/help/passenger-charter" data-drupal-link-system-path="node/121896">Passenger charter</a> </li> <li> <a href="https://www.grandcentralrail.com/customerpledges" title="Customer Pledges">Customer Pledges</a> </li> </ul> </li> <li> <span>Useful links</span> <ul> <li> <a href="/about-us" data-drupal-link-system-path="node/121616">About Grand Central</a> </li> <li> <a href="/news" data-drupal-link-system-path="node/121906">News/Press</a> </li> <li> <a href="/careers-grand-central" data-drupal-link-system-path="node/121871">Careers at Grand Central</a> </li> <li> <a href="/about-us/how-are-we-doing" data-drupal-link-system-path="node/259071">How are we doing?</a> </li> <li> <a href="/news/media-centre" title="Media Centre" data-drupal-link-system-path="node/183736">Media centre & downloads</a> </li> </ul> </li> </ul> <hr style="-ms-grid-row:3;" /> <div class="footer-menu-container"> <ul class="menu menu--horizontal-bold"> <li> <a href="/help/contact-us" data-drupal-link-system-path="node/123066">Contact us</a> </li> <li> <a href="/help/faqs" data-drupal-link-system-path="node/122821">FAQs</a> </li> <li> <a href="/app" data-drupal-link-system-path="node/132291">Get the Grand Central app</a> </li> </ul> <ul class="menu menu--horizontal"> <li> <a href="/accessibility" data-drupal-link-system-path="node/122041">Accessibility</a> </li> <li> <a href="https://www.arriva.co.uk/responsible-business/gender-pay">Arriva gender pay report</a> </li> <li> <a href="/cookie-policy" data-drupal-link-system-path="node/132611">Cookie policy</a> </li> <li> <a href="https://www.arriva.co.uk/site-services/modern-slavery-statement">Modern slavery statement</a> </li> <li> <a href="https://grandcentralrail.my-pref.com/">Preference centre</a> </li> <li class="active-trail"> <a href="/privacy-policy" data-drupal-link-system-path="node/131076" class="is-active">Privacy policy</a> </li> <li> <a href="/supplier-information" data-drupal-link-system-path="node/162906">Supplier information</a> </li> <li> <a href="/terms-and-conditions" data-drupal-link-system-path="node/132841">Terms & conditions</a> </li> </ul> </div> <div class="footer-icons-container"> <ul> <li><a href="https://apps.apple.com/gb/app/grand-central-railway/id1457570746" target="_blank"><img src="/sites/default/themes/grandcentral_atomic/assets/images/app-store@2x.png" alt="App Store" /></a></li> <li><a href="https://play.google.com/store/apps/details?id=com.ormlondon.grandcentral " target="_blank"><img src="/sites/default/themes/grandcentral_atomic/assets/images/google-play@2x.png" alt="Google Play" /></a></li> <li><a href="#" target="_blank"><img src="/sites/default/themes/grandcentral_atomic/assets/images/nre-accredited@2x.png" alt="NationalRail Accreditation" /></a></li> </ul> </div> <div class="connect-bar"> Connect with Grand Central <ul> <li><a href="https://twitter.com/GC_Rail" title="Twitter"><span class="icon icon--twitter"></span> </a></li> <li><a href="https://www.facebook.com/grandcentralrail" title="Facebook"><span class="icon icon--facebook"></span> </a></li> <li><a href="https://www.instagram.com/grandcentralrail/" title="Instagram"><span class="icon icon--instagram"></span> </a></li> </ul> </div> </div> <div id="block-safespace" data-block-plugin-id="safe_space"> <div class="safe-spaces-container container-fluid"> <div class="container safe-spaces-container-inner"> <button class="safe-spaces-trigger" data-launch-safespace="" data-target-element="body" data-bind="safeSpaces: {}" title="Show safe spaces website"> <img src="/sites/default/modules/custom/safe_space_integration/assets/images/safe-spaces-logo-white.png" alt="Safe Space - Together we will end domestic abuse" class="safe-spaces-logo" > <p class="safe-spaces-text">Together we can end domestic abuse</p> </button> </div> </div> </div> </div> </footer> </div> <script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"node\/131076","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"gtm":{"tagId":null,"settings":{"data_layer":"dataLayer","include_classes":false,"allowlist_classes":"","blocklist_classes":"","include_environment":false,"environment_id":"","environment_token":""},"tagIds":["GTM-W3VWZM5"]},"gtag":{"tagId":"","consentMode":false,"otherIds":[],"events":[],"additionalConfigInfo":[]},"ajaxPageState":{"libraries":"eJx9kWFuwyAMhS9Eg7RK0-6xAyCHOIwU7BQ7UXP7uWq3qV22P4Dfw0_yZ2gtrxBAueboI_MpoxwmcXAzqGHQBiuWZR5AUfxfRhe5VqDhu1XUKihMGM6qPmOoKAIJHYighkwTRuXmo0hnUZkkHI9vr8_29OCGl6OLUNCirfP-6PQDK7rIDX0mxUZQuum8YNu6kVt1Q5a2zJqZQg9E2PwvxeESbvPbVeeSgSL6PTEMOMJS1CXmVAwDJJ_seK47mODyKFaXmlGJSDZS-cIOQ810EN1KprT7IxXuoVz38o-7GxCZxpzEv--ZBTZeNPSF40l8szeKu4sGKPJqBL1tMHJxAiMGmcEAXBlb0JWe_5GdbKJYfQ-Cn4ul61c","theme":"grandcentral_atomic","theme_token":null},"ajaxTrustedUrl":{"\/privacy-policy?ajax_form=1":true},"cohesion":{"currentAdminTheme":"claro","front_end_settings":{"global_js":{"matchHeight":1,"parallax_scrolling":1,"cohMatchHeights":1}},"google_map_api_key":"","google_map_api_key_geo":null,"animate_on_view_mobile":null,"add_animation_classes":null,"responsive_grid_settings":{"gridType":"desktop-first","columns":12,"breakpoints":{"xl":{"width":1400,"innerGutter":30,"outerGutter":30,"widthType":"fixed","previewColumns":12,"label":"Television","class":"coh-icon-television","iconHex":"F26C","boxedWidth":1340},"lg":{"width":1170,"innerGutter":30,"outerGutter":30,"widthType":"fixed","previewColumns":12,"label":"Desktop","class":"coh-icon-desktop","iconHex":"F108","boxedWidth":1110},"md":{"width":1024,"innerGutter":30,"outerGutter":30,"widthType":"fixed","previewColumns":12,"label":"Laptop","class":"coh-icon-laptop","iconHex":"F109","boxedWidth":964},"sm":{"width":768,"innerGutter":30,"outerGutter":30,"widthType":"fixed","previewColumns":12,"label":"Tablet","class":"coh-icon-tablet","iconHex":"F10A","boxedWidth":708},"ps":{"width":565,"innerGutter":30,"outerGutter":30,"widthType":"fixed","previewColumns":12,"label":"Mobile landscape","class":"coh-icon-mobile-landscape","iconHex":"E91E","boxedWidth":505},"xs":{"width":320,"innerGutter":20,"outerGutter":20,"widthType":"fluid","mobilePlaceholderWidth":320,"mobilePlaceholderType":"fluid","previewColumns":12,"label":"Mobile","class":"coh-icon-mobile","iconHex":"F10B","boxedWidth":280}}},"use_dx8":true,"sidebar_view_style":"thumbnails","log_dx8_error":false,"error_url":"\/cohesionapi\/logger\/jserrors","dx8_content_paths":[["settings","content"],["settings","content","text"],["settings","markerInfo","text"],["settings","title"],["markup","prefix"],["markup","suffix"],["markup","attributes",["value"]],["hideNoData","hideData"],["hideNoData","hideData","text"]]},"eu_cookie_compliance":{"cookie_policy_version":"1.0.0","popup_enabled":false,"popup_agreed_enabled":false,"popup_hide_agreed":true,"popup_clicking_confirmation":true,"popup_scrolling_confirmation":false,"popup_html_info":false,"use_mobile_message":false,"mobile_popup_html_info":false,"mobile_breakpoint":768,"popup_html_agreed":false,"popup_use_bare_css":false,"popup_height":"auto","popup_width":"100%","popup_delay":1000,"popup_link":"https:\/\/www.grandcentralrail.com\/cookie-policy","popup_link_new_window":true,"popup_position":false,"fixed_top_position":false,"popup_language":"en","store_consent":false,"better_support_for_screen_readers":false,"cookie_name":"","reload_page":false,"domain":"","domain_all_sites":false,"popup_eu_only":false,"popup_eu_only_js":false,"cookie_lifetime":100,"cookie_session":0,"set_cookie_session_zero_on_disagree":0,"disagree_do_not_show_popup":false,"method":"default","automatic_cookies_removal":true,"allowed_cookies":"","withdraw_markup":"\u003Cbutton type=\u0022button\u0022 class=\u0022eu-cookie-withdraw-tab\u0022\u003EPrivacy settings\u003C\/button\u003E\n\u003Cdiv aria-labelledby=\u0022popup-text\u0022 class=\u0022eu-cookie-withdraw-banner\u0022\u003E\n \u003Cdiv class=\u0022popup-content info eu-cookie-compliance-content\u0022\u003E\n \u003Cdiv id=\u0022popup-text\u0022 class=\u0022eu-cookie-compliance-message\u0022 role=\u0022document\u0022\u003E\n \u003Ch2\u003EWe use cookies on this site to enhance your user experience\u003C\/h2\u003E\u003Cp\u003EYou have given your consent for us to set cookies.\u003C\/p\u003E\n \u003C\/div\u003E\n \u003Cdiv id=\u0022popup-buttons\u0022 class=\u0022eu-cookie-compliance-buttons\u0022\u003E\n \u003Cbutton type=\u0022button\u0022 class=\u0022eu-cookie-withdraw-button \u0022\u003EWithdraw consent\u003C\/button\u003E\n \u003C\/div\u003E\n \u003C\/div\u003E\n\u003C\/div\u003E","withdraw_enabled":false,"reload_options":0,"reload_routes_list":"","withdraw_button_on_info_popup":false,"cookie_categories":[],"cookie_categories_details":[],"enable_save_preferences_button":true,"cookie_value_disagreed":"0","cookie_value_agreed_show_thank_you":"1","cookie_value_agreed":"2","containing_element":"body","settings_tab_enabled":false,"olivero_primary_button_classes":"","olivero_secondary_button_classes":"","close_button_action":"close_banner","open_by_default":false,"modules_allow_popup":true,"hide_the_banner":false,"geoip_match":true},"content":{"aceBookingUrl":"https:\/\/buy.grandcentralrail.com"},"ajax":{"submit":{"callback":"::ajaxSubmit","event":"click","progress":{"type":"throbber"},"url":"\/privacy-policy?ajax_form=1","httpMethod":"POST","dialogType":"ajax","submit":{"_triggering_element_name":"newsletter_submit","_triggering_element_value":"Sign up"}}},"IEMessage":"Your web browser is no longer supported by this page.\n If you\u0027d like to purchase a ticket please upgrade to a more modern browser or\n \u003Ca href=\u0027https:\/\/buy.grandcentralrail.com\u0027\u003Ebook tickets directly here\u003C\/a\u003E.","user":{"uid":0,"permissionsHash":"e37b94d8a13ad0416ef4eeec087b9934ea917fbf05c48bdd8167ead141a5f893"}}</script> <script src="/core/assets/vendor/once/once.min.js?v=1.0.1"></script> <script src="/core/misc/drupalSettingsLoader.js?v=10.2.7"></script> <script src="/core/misc/drupal.js?v=10.2.7"></script> <script src="/core/misc/drupal.init.js?v=10.2.7"></script> <script src="/core/misc/debounce.js?v=10.2.7"></script> <script src="/modules/contrib/blazy/js/dblazy.min.js?sno1vt"></script> <script src="/modules/contrib/blazy/js/plugin/blazy.once.min.js?sno1vt"></script> <script src="/modules/contrib/blazy/js/plugin/blazy.sanitizer.min.js?sno1vt"></script> <script src="/modules/contrib/blazy/js/plugin/blazy.dom.min.js?sno1vt"></script> <script src="/libraries/easing/jquery.easing.min.js?v=1.3"></script> <script src="/libraries/slick-carousel/slick/slick.min.js?v=1.x"></script> <script src="/core/assets/vendor/tabbable/index.umd.min.js?v=6.2.0"></script> <script src="/modules/custom/grandcentral_configs/js/cookie-settings.js?v=1.x"></script> <script src="https://code.jquery.com/ui/1.12.1/jquery-ui.js"></script> <script src="https://cdn.jsdelivr.net/npm/vue@2"></script> <script src="/sites/default/themes/grandcentral_atomic/assets/js/scripts.js?sno1vt"></script> <script src="/core/assets/vendor/js-cookie/js.cookie.min.js?v=3.0.5"></script> <script src="/modules/contrib/eu_cookie_compliance/js/eu_cookie_compliance.min.js?v=10.2.7" defer></script> <script src="/modules/contrib/google_tag/js/gtm.js?sno1vt"></script> <script src="/modules/contrib/google_tag/js/gtag.js?sno1vt"></script> <script src="/core/misc/progress.js?v=10.2.7"></script> <script src="/core/assets/vendor/loadjs/loadjs.min.js?v=4.2.0"></script> <script src="/core/misc/announce.js?v=10.2.7"></script> <script src="/core/misc/message.js?v=10.2.7"></script> <script src="/core/misc/ajax.js?v=10.2.7"></script> <script src="/themes/contrib/stable/js/ajax.js?v=10.2.7"></script> <script src="/modules/contrib/google_tag/js/gtag.ajax.js?sno1vt"></script> <script src="/sites/default/modules/custom/safe_space_integration/assets/js/main.js?sno1vt"></script> <script src="/core/assets/vendor/jquery-form/jquery.form.min.js?v=4.3.0"></script> <script src="/modules/contrib/slick/js/slick.load.min.js?v=10.2.7"></script> <script src="/sites/default/modules/custom/grandcentral_layout_blocks/js/routes_scripts.js?sno1vt"></script> <script src="/modules/custom/arriva_standalone_qtt/assets/js/ie_message.js?sno1vt"></script> <script src="/sites/default/modules/custom/disruption_banner/js/disruption_banner.js?sno1vt"></script> </js-bottom-placeholder> <!-- Start of grandcentral1523887212 Zendesk Widget script --> <script id="ze-snippet" src="https://static.zdassets.com/ekr/snippet.js?key="> </script> <!-- End of grandcentral1523887212 Zendesk Widget script --> </body> </html>