Privacy policy

Paxeto is the data controller for the personal data described here. Each transfer agency we introduce you to is a separate, independent controller for the data it receives from us, and handles it under its own privacy policy.

• Your name, email address and phone number.
• Your journey: airport, destination, direction, date, time, number of passengers and bags, and flight number if you give one.
• Anything you write in the message field.
• A one-way hashed form of your IP address, used for rate limiting and spam detection. We do not store raw IP addresses.
• The page you submitted the form from.

This is the important part, and it changed in September 2026. We no longer hand your contact details to agencies when you submit a request. We disclose them only when you choose to, and the site is built so that we cannot do it any other way:

• Your journey - airport, destination, date, time, number of passengers and bags, flight number and your message - is shown to licensed agencies covering that airport, or to the one agency you named, so they can send you a price. Your name, phone number and email are not part of that.
• Your name, phone number and email go to an agency when you press “share my details” for that agency, and to the agency whose price you choose. You may share with as many as you like, and with none.
• Messages you send through the site are visible to the agency you send them to. Contact details typed into a message are removed before it is stored, so this remains your decision to make with the button rather than by accident.
• A review you write is read by our moderators and, once published, shown publicly on that agency’s page under the display name you choose. Your phone number and email are never shown with it. The agency may reply in public. You can edit a review, which sends it back to moderation, or withdraw it, which deletes it. A review is only possible for an agency we actually introduced you to.

Recipient categories: licensed private hire, taxi and chauffeur operators; our email delivery provider; our hosting and database provider; and our bot protection provider. We do not sell personal data and we do not share it for advertising.

Every disclosure is logged individually - which enquiry, which agency, which fields, on what date and under which version of the consent wording you agreed to.

Consent, which you give with the tick box on the enquiry form. The wording currently in use reads:

I agree that my journey details will be shown to licensed transfer agencies covering my airport so they can send me a price. My name, phone number and email are not shown to any of them until I choose to share them. I understand Paxeto is a directory and introduction service, is not a transport operator, and that any agreement will be between me and the agency I choose.

We store which version of that wording you agreed to, so we can always show what you were actually told. You can withdraw consent at any time. Because nothing identifying you reaches an agency until you share it, withdrawing usually means nothing has to be recalled at all - but we cannot recall details you have already shared with an agency, so you would need to ask that agency directly.

If you register an agency we hold your name, email, phone number, business details and the licence and insurance documents you upload. Documents are stored privately and are readable only by our reviewers; every access is logged. We keep them while your listing is active and for six years afterwards, because they evidence the checks we carried out.

Enquiry data is deleted 24 months after submission by an automated job. Records that an introduction took place are kept in an aggregated form that does not identify you, because we need them for billing and dispute handling.

• Access - ask for a copy of what we hold about you.
• Rectification - ask us to correct something that is wrong.
• Erasure - ask us to delete it. We erase across requests, quotes, messages and the record of who you shared your details with.
• Objection and restriction - ask us to stop or limit our use of it.
• Withdraw consent - at any time, for the future.
• Complain to a supervisory authority. In the UK that is the Information Commissioner’s Office.

Email us with “data request” in the subject line and the address you used. We reply within one month.

We set a session cookie for agency and admin sign-in. That is a strictly necessary cookie and it is not used for tracking. We do not run advertising cookies. Our bot protection provider may set its own cookie on the enquiry form.