Data Protection Statement

Complying with our obligations under the Data Protection Act 1998 (‘the DPA') and related legislation is important to us, and we have taken steps to ensure that we do.

This section of the website explains what information we collect about our customers and the procedures we have in place to safeguard their privacy.

Who are we?

We are ITAL Group; we provide support services to the transport industry and in particular the railway industry.

ITAL Group consists of two operating divisions: Independent Revenue Protection and Support (IRCAS), and Appeals Service (AS).

Data controllers

We are data controllers, as defined under the DPA. We are only allowed to process your personal data in accordance with the DPA and for the purposes notified to the Information Commissioner.
You can find more information at the Information Commissioner's website at

What personal information do we collect?

We collect the information that you give to a transport operating company when issued with a Penalty Fare or Unpaid Fare Notice, when you complete one of our forms, provide information via the website or answer our questions over the phone. We may collect information when you use our services e.g. make payments online. In addition, we may also obtain information about you from other lawful sources e.g. ITAL Group partners. We will amend or delete any personal data relating to you that are found to be incorrect or out of date. If you are aware of any changes that should be made to your personal data, please contact us at the address below as soon as possible. You have a right to see the personal data held on you and we will provide this information for the fee permitted by law. Please send your request in writing to the address given below.

Do we collect sensitive personal data?

On occasion, we may need to collect what is called sensitive personal data. When required by law we will obtain your explicit consent to do this at the time when we collect the information.

What do we use the personal data for?

The personal information that we collect is used for the following purposes,

  • to provide you with the service requested
  • for the ongoing administration of the service
  • to allow us to improve the products and services we offer to our customers, the transport providers
  • for research and statistical analysis
  • for the prevention and detection of crime and fare evasion and other travel irregularity
  • to enable us to comply with our legal and regulatory obligations and those of our customers

To ensure that we follow your instructions correctly and to improve our customer service, we may monitor and/or record any communication between you and us. By using this website and its services you consent to the collection and use of the information you provide for the purposes set out above.

Do we use your information for marketing purposes?


How we will contact you

This may be by post, e-mail, telephone or text messaging to SMS enabled devices depending on the information you have provided to us.

How long do we keep your personal data?

We will retain your information for as long as necessary to fulfil the purpose(s) above, and in accordance with the law.

In general, this will be:

  • Seven years for data relating to Penalty Fare Notices, Unpaid Fare Notices, reports for possible prosecution, and Yellow Cards
  • One year for data relating to name and address checking enquiries by our customers' inspectors

When do we disclose your information to third parties, and why?

We will only disclose your information to other parties in the following limited circumstances:

  • where we are legally obliged to do so, e.g. to law enforcement and regulatory authorities
  • where there is a duty to disclose in the public interest
  • where disclosure is necessary to protect our interest or that of our customers e.g. to prevent or detect crime and fare evasion or other travel irregularity
  • where you give us permission to do so

Contact us

ITAL Group
PO BOX 212
GU32 9BQ