Learn how LA Trading protects intellectual property rights. Review our guidelines on content ownership, copyright infringement, and reporting procedures.
LA-TRADING is committed to maintaining the highest standards of data protection and privacy in its internal
taxi advertising operations. We fully comply with the UK General Data Protection Regulation (UK GDPR) and
the Data Protection Act 2018, ensuring that all personal data we handle is processed lawfully, fairly, and
transparently.
This policy applies to all advertising services provided by LA-TRADING within licensed taxis, including the
operation of in-vehicle advertising screens, QR code systems, lead generation forms, and all associated
processing of personal data from passengers and business clients.
Our data protection practices are guided by the following principles:
Lawfulness, Fairness, and Transparency: We clearly communicate how personal data is processed.
Consent: We always seek valid consent for any personal data collected for lead generation.
Purpose Limitation: Data is used solely for the purpose for which it was collected — to connect passengers
with client offers.
Data Minimisation: We collect only what is necessary for the agreed purpose.
Storage Limitation: Data is retained for no longer than necessary.
Security: We protect personal data with robust technical and organisational measures.
Accountability: We maintain clear evidence to demonstrate compliance with GDPR obligations.
4.1 Passenger Data Collection
When passengers choose to engage with an advert using a QR code, they may voluntarily submit their
personal details (e.g., name, email, phone number) via an online form linked to the advert.
Consent: Before submitting any personal data, passengers must actively agree to the use of their data
solely for the specific advertising purpose.
Purpose: Data is collected only to notify our client that a lead has come through and to enable the client to
follow up as agreed.
No Additional Use: LA-TRADING does not use this data for unrelated marketing or profiling.
4.2 Lead Data Handling
When personal data is submitted:
We securely receive the lead information.
We immediately notify and share the relevant details with the advertiser for prompt follow-up.
We store lead data securely on our internal system for no longer than one year, unless required by law for
contractual or audit purposes.5. Data Retention Schedule
To protect all data under our control, we maintain strict security safeguards:
Access controls: Only authorised staff can access lead data.
Encryption: Secure storage and encrypted transmission where applicable.
Regular updates: System security is kept up to date with industry standards.
Confidentiality: All staff are bound by confidentiality agreements.
Each lead generation form clearly explains how data will be used and requests explicit consent.
Passengers must tick a box to confirm they understand their data will be shared with the specific
advertiser.
A link to our Privacy Notice is provided at the point of data collection.
8. Incident Handling & Breach Notification
Reporting: Any suspected data breach must be reported internally to the Data Protection Contact within
24 hours.
Assessment: The breach is assessed for risk to individuals’ rights.
Action: We take immediate action to contain any breach.
Notification: Where required, the ICO is notified within 72 hours, and affected individuals are informed
promptly.
Records: All incidents are logged for accountability and lessons learned.
All staff complete initial GDPR training at induction.
Annual refresher training is mandatory for all staff handling data.
Training is recorded in our internal GDPR Training Log, including:
Employee name
Date of training
Type of training
Trainer or platform used
Advertisers working with LA-TRADING must comply with all relevant data protection laws. We:
Require advertisers to confirm compliance in writing.
Provide guidance on privacy and consent best practices.
Ensure any onward processing is consistent with the original consent given by the passenger.
Data Type | Retention Period | Notes |
Passenger lead data (name, email, phone) | Up to 12 months | Deleted after 12 months unless a legal requirement applies |
Advertiser contact and contract data | Contract duration (1 month, 3 months, 6 months, or as determined by the company) + 6 years | For financial and legal record- keeping |
Anonymised usage data | Indefinite | Used only for aggregate reporting and performance |
Staff GDPR training records | Employment duration + 1 year | For compliance tracking |
We maintain:
An up-to-date Record of Processing Activities (RoPA) under Article 30 UK GDPR.
Documented policies and evidence of data protection measures.
Regular internal audits and policy reviews to ensure compliance.
For any questions, data access requests, or to report an incident, contact:
Data Protection Contact: Justin Down
Email: Justin @ la-trading.co.uk
Address: Unit 4, Churchill Court, 33 Palmerston Road, Bournemouth, BH1 4HN
This policy is reviewed annually and updated as needed to maintain compliance with current legislation and
best practices. Approved by:
Justin E. Down
Managing Director
Justin @ la-trading.co.uk
You can get in touch with us directly and we’d be happy to help!
