The summary
This site does not require you to log in, sign up, or give us any personal information to use it. We do not set cookies on your device, do not run third-party advertising, and do not sell or share data with anyone for marketing purposes. The only things we record are anonymous page-view counts and your search or location queries while we look up the answer.
If that is enough detail for you, you can stop reading. The rest of this page explains the same thing in the level of detail UK GDPR requires.
The data controller
Data we process
We process the following limited categories of data when you use the site:
Anonymous traffic data. Cloudflare Web Analytics records aggregate visit counts, pages viewed, approximate location at country level, browser type, and referring page. It does this without setting cookies and without assigning you a persistent identifier. We cannot trace these visits back to an individual.
Search and lookup queries. When you use the search box, the "Near me" feature, or the journey planner, the postcode, town, or address you type is sent to our server so we can look up the answer. We do not store these queries — they are processed in memory and discarded once the response is returned.
Approximate location (only if you allow it). The "Near me" feature can use your browser's geolocation if you grant permission. The coordinates are sent to our server only to find the closest service stations and are not stored or logged. You can decline the permission prompt and use a postcode or town name instead.
Email correspondence. If you email us via the addresses on our contact page, your email address and the contents of your message are received in our inbox and retained as long as the conversation is active. We do not add you to any marketing list and do not share your email with third parties.
We do not collect names, dates of birth, payment information, or any other personal data. The site does not have user accounts.
Lawful basis
We rely on the following lawful bases under UK GDPR Article 6:
Legitimate interests for anonymous traffic measurement, search query processing, and operating the site. Our legitimate interest is understanding how the site is used so we can improve it, and answering the queries you make of it. The processing is minimal, anonymous in aggregate, and could not reasonably be expected to override your rights.
Consent for browser geolocation. You explicitly grant permission via your browser before we receive your coordinates, and can revoke that permission at any time in your browser settings.
Legitimate interests for handling email correspondence you initiate with us, in order to respond to your enquiry.
Processors and third parties
We use a small number of service providers (data processors) who handle data on our behalf under contract:
Cloudflare, Inc. hosts the site (Cloudflare Pages), runs the database (Cloudflare D1), and provides our anonymous analytics (Cloudflare Web Analytics). All site traffic passes through Cloudflare's global network. See Cloudflare's privacy policy.
Ideal Postcodes Ltd (postcodes.io). When you enter a UK postcode in our search, "Near me", or journey planner, we send the postcode (and only the postcode) to postcodes.io to convert it into a latitude and longitude. No identifying information about you is sent. postcodes.io is a UK-based, free postcode lookup service.
We do not share data with advertisers, brokers, social networks, or any other third party for marketing purposes.
Where data is processed
Cloudflare is a global infrastructure provider. While our database's primary location is set automatically by Cloudflare and is typically in the United States, requests are served from the Cloudflare data centre nearest to you, which is usually within the UK or EU. This means that some processing — particularly write operations to the database — occurs outside the UK.
These transfers are covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, which Cloudflare has in place as part of its standard contracts. We have assessed this transfer mechanism as appropriate for the limited and largely anonymous data involved.
Retention
Cloudflare Web Analytics retains aggregate, anonymous data for up to six months. We cannot retrieve individual records from this dataset because none exist.
Search, location, and journey planner queries are not retained — they are discarded as soon as the page response is sent.
Email correspondence is kept for as long as the matter remains active and for a reasonable period thereafter, typically up to two years, in case of follow-up. After that, it is deleted unless retention is required for a legal reason.
What you can ask us to do
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you (right of access)
- Ask us to correct data that is wrong (rectification)
- Ask us to delete data we no longer need (erasure)
- Ask us to restrict how we use your data (restriction)
- Object to our processing on legitimate-interest grounds
- Receive your data in a portable format (portability)
Because we hold so little data tied to any individual — essentially only the email correspondence you send us — most of these rights are simple to exercise in practice. Email with what you would like us to do.
We do not make automated decisions about you. Nothing on this site profiles, scores, or judges you in any way that has legal or similarly significant effects.
Complaints
If you think we have handled your data badly, please tell us first — email and we will investigate. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO):
ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Use by people under 13
This site is not aimed at children. We do not knowingly collect personal data from anyone under the age of 13. If you believe a child has sent us personal information, please email us and we will delete it.
Updates to this policy
We may update this policy when our processing changes, or to reflect new legal requirements. The "last reviewed" date below shows when the current version took effect. Substantive changes will be flagged at the top of this page for at least 30 days after they go live.
This policy was last reviewed on 9 May 2026.