ITAL Group Limited is committed to compliance with all relevant UK laws in respect of personal data, and to protecting the “rights and freedoms” of individuals whose information ITAL Group Limited collects in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
This section of the website explains what information we collect about our customers and the procedures we have in place to safeguard their privacy.
Who are we?
We are ITAL Group Limited; we provide support services to the transport industry, and in particular the railway industry.
ITAL Group Limited consists of two operating divisions: Independent Revenue Protection and Support (IRCAS) and the Appeals Service (AS).
Data Processors and Data Controllers
We are Data Processors, and in some cases the Data Controllers, as defined under the UK General Data Protection Regulation. We are only allowed to process your personal data in accordance with the regulations and for the purposes notified to the Information Commissioner. You can find more information at the Information Commissioner's website at www.ico.org.uk. The transport operating company that took your details are also the Data Controllers.
What personal information do we collect?
We collect the information that you give to a Transport operating company or parking operator, when being issued in relation to a matter such as a Penalty Fare Notice, Unpaid Fare Notice or Penalty Notice, when you complete one of our forms, provide information via the website or answer our questions over the phone. We may collect information when you use our services e.g. make payments online. In addition, we may also obtain information about you from other lawful sources e.g. ITAL Group partners.
The legal basis for processing your data
At least one of the conditions of the UK General Data Protection Regulation must be met in the case of processing your personal data. The conditions we satisfy are Legal Obligation, Public Interest and Legitimate Interest.
Do we collect sensitive personal data?
On occasion, we may need to collect what is called sensitive personal data. When required by law we will obtain your explicit consent to do this at the time when we collect the information.
What do we use the personal data for?
The personal information that we collect is used for the following purposes,
To ensure that we follow your instructions correctly and to improve our customer service, we may monitor and/or record any communication between you and us. By using this website and its services, you consent to the collection and use of the information you provide for the purposes set out above.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Under the UK General Data Protection Regulation, you are entitled to see the personal information we hold about you and you may ask to make any necessary changes to ensure that it is accurate and kept up to date. To make such a request either contact the train operating company or IRCAS in writing at IRCAS, Regus, Building 1000 Lakeside, Western Road, Portsmouth, PO6 3EZ or firstname.lastname@example.org. Please clearly mark the envelope, or subject heading in the email, Subject Access Request.
Do we use your information for marketing purposes?
How we will contact you
This may be by post, e-mail, telephone or text messaging to SMS enabled devices depending on the information you have provided to us. If you are under the age of 18 contact may be sent to your Parent/Guardian.
How long do we keep your personal data?
We will retain your information for as long as necessary to fulfil the purpose(s) above, and in accordance with the law.
In general, this will be:
If you require your data to be deleted, please contact us in writing with your request, after the appropriate period of time shown above.
When do we disclose your information to third parties, and why?
We will only disclose your information to other parties in the following limited circumstances:
Data Protection Officer
ITAL Group Limited
Building 1000 Lakeside
What are cookies?
A cookie (web cookie, or browser cookie) is a small file which is stored on your computer when you visit a website. These files are used by the website for a number of things but mainly to track or trace where you have been on the website and what you are searching for.
Cookies are also used to enable you to submit payments and appeals online. With cookies disabled you would otherwise need to do this by contacting our support teams by phone or letter.
For a more details, you can read about cookies on Wikipedia.
In order to achieve this we use the popular Google Analytics system.
How to Disable Cookies
This website works best with cookies enabled, however if you wish to disable cookies, you can do this in your browser. Here are instructions on disabling cookies. This links to an instructional document maintained by a website which has no connection to AS.