Privacy policy

1. How we obtain your personal information

1.1 In setting up Rail Partners Limited, personal information relating to members and stakeholders of Rail Delivery Group was transferred from Rail Delivery Group to Rail Partners Limited. We may receive some of your personal information from other third parties, such as from companies providing contracted services to support Rail Partners core functions.

1.2 You may give us personal information about yourself by using the online forms provided on our website, setting up an account with us, using bulletin boards or forums on our website, or by contacting us by phone, email or other means. This includes, for example, where you provide your personal information to us in order to receive information or services from us. If you are a supplier, you may also give us personal information about you when you are offering or providing services to us.

1.3 We may also receive information about you from third parties such marketing agencies, market research companies, our suppliers, contractors and consultants, group companies, public websites and public agencies, which we refer to as "third party sources" or "suppliers" throughout this policy.

2. Collection of your personal information and how we use it

Please go to the section or sections below that best describes our relationship with you to find out the information that we collect about you and how we use this information. We refer to this as "personal information" throughout this policy.

2.1 Visitors to our website

(a) What personal information we collect about you
We, or third parties on our behalf, may collect and use any of the following information about you:
(i) your name including your title;
(ii) your postal address;
(iii) your email address;
(iv) your telephone number;
(v) your employer details;
(vi) information provided when you correspond with us;
(vii) any updates to information provided to us;
(viii) personal information we collect about you or that we obtain from our third party sources;
(ix) the following information created and recorded automatically when you visit our website:

(A) Technical information.

This includes: the Internet Protocol (IP) address used to connect your computer to the internet address; the website address and country from which you access information; the files requested; browser type and version; browser plug-in types and versions; operating system; and platform. We use this personal information to administer our website, to measure the efficiency of our systems and to undertake an analysis on the locations from which people access our webpages;

(B) Information about your visit and your behaviour on our website

(for example, the pages that you click on). This may include the website you visit before and after visiting our website (including date and time), time and length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, traffic data, location data, weblogs and other communication data and information provided when requesting further service or downloads.

(b) How we use your personal information
We will collect, use and store the personal information listed above for the following reasons:
(i) to allow you to access and use our website;
(ii) to receive enquiries from you through the website about our services or activities;
(iii) for improvement and maintenance of our website and to provide technical support for our website;
(iv) to ensure the security of our website;
(v) to recognise you when you return to our website, to store information about your preferences, and to allow us to customise the website according to your individual interests; and
(vi) to evaluate your visit to the website and prepare reports or compile statistics to understand the type of people who use our website, how they use our website and to make our website more intuitive. Such details will be anonymised as far as reasonably possible and you will not be identifiable from the information collected.
Please see sections 2.7 and 2.8 for more details about how we use your personal information.

( c) A word about cookies
(i) Some pages on our website use cookies, which are small files placed on your internet browser when you visit our website. We use cookies in order to offer you a more tailored experience in the future, by understanding and remembering your particular browsing preferences.
(ii) For detailed information on the cookies we use and the purposes for which we use them, please refer to our cookies policy here.

2.2 Members, stakeholders, and employees of members and stakeholders

(a) What personal information we collect about you We, or third parties on our behalf, may collect and use any of the following information about you:
(i) your name including your title;
(ii) your postal address;
(iii) your email address;
(iv) your telephone number;
(v) your employer details;
(vi) information provided when you correspond with us;
(vii) any updates to information provided to us;
(viii) personal information we collect about you or that we obtain from our third party sources;
(ix) health and safety information, including any accidents you have at one of our sites;
(x) CCTV recordings, if you visit one of our sites;
(xi) information you provide to help us provide you with improved services, for example if we ask you to fill in a survey or questionnaire.

(b) How we use your personal information
We will collect, use and store the personal information listed above for the following reasons:
(i) to provide you or your employer with our services;
(ii) to facilitate delivery of our services to you or your employer;
(iii) to deal with any enquiries or issues you or your employer have about our services or activities that you or your employer request from us;
(iv) to send you certain communications (including by email or post) about our activities and services such as administrative messages (for example, setting out changes to our terms and conditions and keeping you or your employer informed about our fees and charges);
(v) to ensure your safety and security and that of others, by the use of CCTV;
(vi) to carry out statistical analysis and market research on people who may be interested in our activities and services; and
(vii) if it is in our legitimate interests for business development and marketing purposes, to contact you (including by telephone or post) with information about our activities and services or the activities and services of our suppliers which either you request, or which we feel will be of interest to you or your employer.
Please see sections 2.7 and 2.8 for more details about how we use your personal information.

( c) Source of personal information. In setting up Rail Partners Limited, personal information relating to members and stakeholders of Rail Delivery Group was transferred from Rail Delivery Group to Rail Partners Limited. We may receive some of your personal information from other third parties, such as from suppliers on contract to Rail Partners Limited working on our behalf.

(d) Special categories of data. We do not collect special categories of data (for example, trade union membership, political opinion, racial or ethnic origin or health data) and we politely request that you refrain from sending us any, as we will not request any from you.

(e) Information we need to provide services to you or your employer. We need certain types of personal information so that we can provide services to you and perform contractual and other legal obligations that we have to you. If you do not provide us with such personal information, or if you ask us to delete it, we may no longer be able to provide you with our services.

(b) How we use your personal information
We will collect, use and store the personal information listed above for the following reasons:
(i) to allow you to access and use our website;
(ii) to receive enquiries from you through the website about our services or activities;
(iii) for improvement and maintenance of our website and to provide technical support for our website;
(iv) to ensure the security of our website;
(v) to recognise you when you return to our website, to store information about your preferences, and to allow us to customise the website according to your individual interests; and
(vi) to evaluate your visit to the website and prepare reports or compile statistics to understand the type of people who use our website, how they use our website and to make our website more intuitive. Such details will be anonymised as far as reasonably possible and you will not be identifiable from the information collected.
Please see sections 2.7 and 2.8 for more details about how we use your personal information.

( c) A word about cookies
(i) Some pages on our website use cookies, which are small files placed on your internet browser when you visit our website. We use cookies in order to offer you a more tailored experience in the future, by understanding and remembering your particular browsing preferences.
(ii) For detailed information on the cookies we use and the purposes for which we use them, please refer to our cookies policy here.

2.3 Prospective members or stakeholders (or their employees) to whom we send marketing communications

(a) We, or third parties on our behalf, may collect and use any of the following information about you:
(i) your name including your title;
(ii) your postal address;
(iii) your email address;
(iv) your telephone number;
(v) information about your preferences for how we contact you or support you.

(b) How we use your personal information
We will collect, use and store the personal information listed above, if you have consented or, otherwise, if it is in our legitimate interests, for business development and marketing purposes, to contact you (including by telephone, email or post) with information about our services which either you request, or which we feel will be of interest to you (including newsletters).
Please see sections 2.7 and 2.8 for more details about how we use your personal information.

( c) Source of personal information. We may receive some of your personal information from third parties, such as marketing agencies.

2.4 People who contact us with enquiries

(a) We, or third parties on our behalf, may collect and use any of the following information about you:
(i) your name including your title;
(ii) your postal address;
(iii) your email address;
(iv) your telephone number;
(v) information provided when you correspond with us;
(vi) any updates to information provided to us.

(b) How we use your personal information
We will collect, use and store the personal information listed above to deal with any enquiries or issues you have about our services, including any questions you may have about how we collect, store and use your personal information, or any requests made by you for a copy of the information we hold about you. If we do not have a contract with you, we may process your personal information for these purposes where it is in our legitimate interests for dealing with your requests or enquiries.
Please see sections 2.7 and 2.8 for more details about how we use your personal information.

2.5 Our suppliers, and employees of our suppliers

(a) We, or third parties on our behalf, may collect and use any of the following information about you:
(i) your name including your title;
(ii) work contact information (phone number, postal address, mailing address, email address);
(iii) your job title;
(iv) information provided when you correspond with us;
(v) any updates to information provided to us;
(vi) personal information we collect about you from third party sources such as LinkedIn:
(vii) CVs, pitch and tender information;
(viii) proof of identification and address;
(ix) visa or work permit documentation;
(x) details of compensation, expense claims and bank details;
(xi) information required to access company systems and applications (such as system ID);
(xii) work hours (overtime and hours worked);
(xiii) if you attend our sites, CCTV recordings.

(b) How we use your personal information We will collect, use and store the personal information listed above for the following reasons:
(i) to enable us to purchase and receive products and services from you (including supplier due diligence, payment and expense reporting and financial audits);
(ii) to deal with enquiries from you;
(iii) to confirm information on CVs and performance reference checks, to assess you or your employer's suitability to work for us;
(iv) for equal opportunities monitoring;
(v) for health and safety records and management; and
(vi) for CCTV monitoring and other security of company facilities.
Please see sections 2.7 and 2.8 for more details about how we use your personal information.

( c) Source of personal information. We may receive some of your personal information from third party sources, such as your employer or your employer's company website. We may also collect this personal information from publicly available sources, such as LinkedIn.

(d) Special categories of data. Some of the personal information that we collect about you or which you provide to us about you or your employees may be special categories of data. Special categories of data include information about your physical and mental health, sexual orientation, racial or ethnic origin, political opinions, philosophical belief, trade union membership and biometric data.

(e) Information we need to provide services to you. Please note that we need certain types of personal information so that you or your employer can provide services to us. If you do not provide us with such personal information, or if you or your employer ask us to delete it, you may no longer be able to provide services to us.

2.6 Whatever our relationship with you is, we may also collect, use and store your personal information for the following additional reasons:

(a) to deal with any enquiries or issues you have about how we collect, store and use your personal information, or any requests made by you for a copy of the information we hold about you. If we do not have a contract with you, we may process your personal information for these purposes where it is in our legitimate interests for dealing with your requests or enquiries;

(b) for internal corporate reporting, business administration, ensuring adequate insurance coverage for our business, ensuring the security of company facilities, research and development, and to identify and implement business efficiencies. We may process your personal information for these purposes where it is in our legitimate interests to do so;

( c) to comply with any procedures, laws and regulations which apply to us – this may include where we reasonably consider it is in our legitimate interests or the legitimate interests of others to comply, as well as where we are legally required to do so;

(d) to establish, exercise or defend our legal rights – this may include where we reasonably consider it is in our legitimate interests or the legitimate interests of others, as well as where we are legally required to do so.

4. How and why we share your personal information with others

4.1 We will share your personal information with the following third parties or categories of third parties:

(a) other members or stakeholders (for example, to connect a member or stakeholder from one company with a member or stakeholder from another company where there is a legitimate business reason to do so);

(b) train owning groups and operators;

( c) suppliers, service providers and sub-contractors, including utility providers, suppliers of technical and support services, insurers, logistic providers, and cloud service providers;

(d) public agencies and the emergency services;

(e) companies that assist in our marketing, advertising and promotional activities;

(f) analytics and search engine providers that assist us in the improvement and optimisation of our website.

4.2 We will always ensure that any third parties with whom we share your personal information are subject to privacy and security obligations consistent with this privacy policy and applicable laws.

4.3 We will also disclose your personal information to third parties:

(a) where it is in our legitimate interests to do so to run, grow and develop our business:
(i) if we sell or buy any business or assets, we may disclose your personal information to the prospective seller or buyer of such business or assets;
(ii) if substantially all of our or any of our affiliates' assets are acquired by a third party, in which case personal information held by us will be one of the transferred assets;

(b) if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, any lawful request from government or law enforcement officials and as may be required to meet national security or law enforcement requirements or prevent illegal activity;

( c) in order to enforce or apply our terms of use or any other agreement or to respond to any claims, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent any illegal activity; or

(d) to protect the rights, property, or safety of Rail Partners Limited, our staff, our members and stakeholders, or other persons. This may include exchanging personal information with other organisations for the purposes of fraud protection and credit risk reduction.

4.4 We may also disclose and use anonymised, aggregated reporting and statistics about users of our website or our services for the purpose of internal reporting or reporting to our group or other third parties, and for our marketing and promotion purposes. None of these anonymised, aggregated reports or statistics will enable our users to be personally identified.

4.5 Save as expressly detailed above, we will never share, sell or rent any of your personal information to any third party without notifying you and, where necessary, obtaining your consent. If you have given your consent for us to use your personal information in a particular way, but later change your mind, you should contact us and we will stop doing so.

5. How long we store your personal information

We keep your personal information for no longer than necessary for the purposes for which the personal information is processed. The length of time for which we retain personal information depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights.

6. Your rights

6.1 You have certain rights in relation to your personal information. If you would like further information in relation to these or would like to exercise any of them, please contact us using the details provided below:

Data Protection Team,
Rail Partners Limited,
200 Aldersgate Street,
London EC1 4HD
Tel: 0207 841 8000
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

6.2 You have the following rights:

(a) Right of access.

You have a right of access to any personal information we hold about you. You can ask us for a copy of your personal information; confirmation as to whether your personal information is being used by us; details about how and why it is being used; and details of the safeguards which are in place if we transfer your information outside of the United Kingdom.

(b) Right to update your information.

You have a right to request an update to any of your personal information which is out of date or incorrect.

(c) Right to delete your information.

You have a right to ask us to delete any personal information which we are holding about you in certain specific circumstances. You can ask us for further information on these specific circumstances by contacting us using the details in section 12.

We will pass your request onto other recipients of your personal information unless that is impossible or involves disproportionate effort. You can ask us who the recipients are, using the contact details in section 12.

(d) Right to restrict use of your information:

You have a right to ask us to restrict the way that we process your personal information in certain specific circumstances. You can ask us for further information on these specific circumstances by contacting us using the details in section 12.
We will pass your request onto other recipients of your personal information unless that is impossible or involves disproportionate effort. You can ask us who the recipients are using the contact details in section 12.

(e) Right to stop marketing:

You have a right to ask us to stop using your personal information for direct marketing purposes. If you exercise this right, we will stop using your personal information for this purpose.

(f) Right to data portability:

You have a right to ask us to provide your personal information to a third party provider of services.
This right only applies where we use your personal information on the basis of your consent or performance of a contract; and where our use of your information is carried out by automated means.

(g) Right to object.

You have a right to ask us to consider any valid objections which you have to our use of your personal information where we process your personal information on the basis of our or another person's legitimate interest.

6.3 We will consider all such requests and provide our response within a reasonable period (and in any event within one month of your request unless we tell you we are entitled to a longer period under applicable law). Please note, however, that certain personal information may be exempt from such requests in certain circumstances, for example if we need to keep using the information to comply with our own legal obligations or to establish, exercise or defend legal claims.

6.4 If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.

7. Children

7.1 Our website and services are not directed at children and we do not knowingly collect any personal information from children.

7.2 If you are a child and we learn that we have inadvertently obtained personal information from you from our websites, or from any other source, then we will delete that information as soon as possible.

7.3 Please contact us at This email address is being protected from spambots. You need JavaScript enabled to view it. if you are aware that we may have inadvertently collected personal information from a child.

8. Marketing

8.1 We may collect and use your personal information for undertaking marketing by email, telephone and post.

8.2 We may send you certain marketing communications (including electronic marketing communications and sharing of key insight and reports we produce) if it is in our legitimate interests to do so for marketing, advocacy and business development purposes or if we have obtained your consent to do so.

8.3 However, we will always obtain your consent to direct marketing communications where we are required to do so by law and if we intend to disclose your personal information to any third party for such marketing.

8.4 If you wish to stop receiving marketing communications, you can contact us by email at This email address is being protected from spambots. You need JavaScript enabled to view it. or by the relevant link in such communications.

9. Where we may transfer your personal information

9.1 Your personal information may be used, stored and/or accessed by cloud service providers outside the UK. Further details on to whom your personal information may be disclosed are set out in section 4.

9.2 If we provide any personal information about you to any such non-UK members of our group or suppliers, we will take appropriate measures to ensure that the recipient protects your personal information adequately in accordance with this privacy policy. These measures may include the following:

(a) ensuring that there is an adequacy decision by the UK Government in the case of transfers out of the UK, which means that the recipient country is deemed to provide adequate protection for such personal data; or

(b) where we have in place standard model contractual arrangements with the recipient which have been approved by the UK Government. These model contractual clauses include certain safeguards to protect the personal data.

9.3 Further details on the steps we take to protect your personal information in these cases is available from us on request by contacting us by email at This email address is being protected from spambots. You need JavaScript enabled to view it. at any time.

10. Risks and how we keep your personal information secure

10.1 The main risk of our processing of your personal information is if it is lost, stolen or misused. This could lead to your personal information being in the hands of someone else who may use it fraudulently or make public, information that you would prefer to keep private.

10.2 For this reason, we are committed to protecting your personal information from loss, theft and misuse. We take all reasonable precautions to safeguard the confidentiality of your personal information, including through use of appropriate organisational and technical measures. Examples of such measures include staff training, ensuring the providers of the IT systems that process our data have appropriate accreditation; tight security access to Rail Partners Limited systems and the use of anti-virus software.

10.3 In the course of provision of your personal information to us, your personal information may be transferred over the internet. Although we make every effort to protect the personal information which you provide to us, the transmission of information over the internet is not completely secure. As such, you acknowledge and accept that we cannot guarantee the security of your personal information transmitted to our website and that any such transmission is at your own risk. Once we have received your personal information, we will use strict procedures and security features to prevent unauthorised access to it.

11. Links to other websites

Our website may contain hyperlinks to websites that are not operated by us. These hyperlinks are provided for your reference and convenience only and do not imply any endorsement of the activities of such third-party websites or any association with their operators. This privacy policy only applies to the personal information that we collect or which we receive from third party sources, and we cannot be responsible for personal information about you that is collected and stored by third parties. Third party websites have their own terms and conditions and privacy policies, and you should read these carefully before you submit any personal information to these websites. We do not endorse or otherwise accept any responsibility or liability for the content of such third party websites or third party terms and conditions or policies.

12. Changes to our privacy policy

We may update our privacy policy from time to time. Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by post or email. Please check back frequently to see any updates or changes to our privacy policy.