Privacy policy

The purpose of this policy is to make you aware of how we will manage your personal data.
You can use the short cut links below to go directly to specific sections.

Who we are

Train Information Services Limited (TISL) manages the National Rail Enquiries (NRE) website on behalf of Britain’s train companies. TISL’s registered address is 200 Aldersgate Street, London EC1A 4HD.

National Rail Enquiries is a trade mark of TISL.  TISL also trades under the name Rail Delivery Group.

Our lawful basis for collecting your data

We collect personal data from you when you create an online account with the NRE, so that you can use our services. Collecting your data is necessary for us to perform the services for you.

We will treat your data in an appropriate and lawful manner, in accordance with data protection laws.

What data we collect

If you use this site to search for journeys without using an account, we do not keep any of your information.

If you register for an account then we request your name and optionally some contact information.
If you also choose to add journey alerts, specific journeys and/or stations to your account, we will save the information you provide so you do not have to repeat it.

NRE uses cookies to make the site work for you. To find out more about cookies, read our Cookie Policy.

Sharing information with other data processors

Any information you provide will only be used by NRE, train operating companies and by our suppliers: AWS (website hosting), IMImobile (digital provider for iPad app and SMS alerting), KCOM (support our website hosting and mobile apps), Eckoh, (automated phone service), Indicia (who provide out customer database), Salesforce (who send our marketing emails), Vodafone (who send out txt messages), Intelenet (who provide customer support) and Thales (digital services provider).

If you participate in a survey with us your survey responses will be processed by our survey supplier (Survey Monkey).

We will not share your details with any other third parties unless you provide us with your consent. If you consent to marketing, you can find out more about the communications you’ll receive in our Marketing & Contact Policy.

Keeping your data safe

We protect your privacy by ensuring we have the appropriate security measures in place. We ensure that our suppliers process your data in an appropriate, lawful and safe manner, and within the EU only.

If you participate in a survey with us your data will be held with our supplier (Survey Monkey) in the United States under an EU approved data protection framework. It will be anonymised for reporting purposes and then deleted after 30 days.

What we do with your data

The data we have collect is used to maintain your NRE account and provide you with the optional services you have requested. We will also use your details to advise of any changes to our terms and conditions and/or privacy policy.

We do some analysis on our customer data for sales analysis and marketing research. 

We do not use your data for automated decision making. However we do demographic, geographic and attitude analysis to understand who our customers are in groups rather than as individuals.

How long do we keep your data?

Your account will be active while you keep using it. If you have not logged into your account for two years we will delete your account and any associated information.

If you set up an account but do not validate your account from the email we sent you, the data you have entered will be held for 30 days. After that time, it will be deleted.

Your rights

Subject access request

You have the right to request that we give you a copy of the data we hold about you. This is called a ‘Subject Access Request’.

Deletion of personal information

You have the right to request that we delete any data that we hold on you.

Restrict processing of personal information

You have the right to request that we restrict processing of your information:

  • if you believe the information that we hold is incorrect, or
  • if you can show that our processing is unlawful, or
  • if you want us to stop processing your data but you do not want us to erase it (for example, you may wish us to hold it for legal reasons, to defend a legal claim).
  • Right to rectification

    If your details are incorrect, incomplete or have changed, you can change these at any time by logging in to your account.

    How to contact us

    To exercise any of your rights, please contact:

    The Data Protection Lead
    ATOC Ltd, 200 Aldersgate Street, London EC1 4HD.
    Email: nreprivacy@raildeliverygroup.com
    Tel: 0207 841 8000.

    Please include your name and email address, so that we can deal with your request.

    You can also contact us to request that we update your information.

    Complaints

    You have the right to complain about our processing to the Information Commissioner if you believe we are not processing your data in a proper manner - see https://ico.org.uk/concerns/handling/ for more information.

     

National Rail Enquires Contact Centre & Train Tracker™ service

National Rail Enquiries Contact Centre and Train Tracker™ service:  All calls are recorded for the purposes of quality assurance; we also store your telephone number in Train Tracker to identify your previous journey details, which speeds up the process and enhances your overall customer experience. We will not share your details with any other third parties.

If you do not wish your telephone number to be stored, you can block your number by using the prefix of ‘141’ (mobile and landline) before dialling us. Alternatively, you can contact your provider to withhold your number on all your calls.