← Back to Knole
Legal

Privacy Policy

Last updated: 16 October 2026

This policy explains what personal data Knole collects when you use knolecar.com or book a journey with us, why we use it, who we share it with and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is responsible for your data

The data controller is KNOLE CARS LIMITED, trading as Knole, a company registered in England and Wales with its registered office at 26 Amherst Close, Orpington, BR5 2HH, United Kingdom. For any question about this policy or your personal data, contact us at info@knolecar.com or on +44 7379 109914.

2. The data we collect

Information you give us

If you tell us about accessibility needs or other personal circumstances in the notes field, we use that information only to arrange your journey.

Payment information

Payments are handled by our payment provider, Stripe. Your full card details are entered on Stripe’s secure checkout page and are never seen or stored by us. Stripe shares with us limited information such as the payment status, the amount, your e-mail address and the last four digits and brand of your card.

Information collected automatically

3. How we use your data and our lawful bases

PurposeLawful basis
Taking and managing your booking, arranging your chauffeur, tracking your flight, contacting you about your journey, sending booking e-mailsPerformance of our contract with you
Taking payment, issuing refunds and preventing fraudPerformance of contract; our legitimate interest in preventing fraud
Passing a guest passenger’s details to the chauffeurOur legitimate interest (and yours) in completing the journey you booked for them
Keeping accounting and tax recordsLegal obligation
Handling complaints, claims and legal disputesOur legitimate interest in defending our business
Improving our website and serviceOur legitimate interest in running a good service
Answering business enquiries sent through our Knole for Business form (company, name, contact details, cities, expected volume, message)Our legitimate interest in responding to enquiries and, where you go ahead, taking steps to enter into a contract with you
Website analytics with Google AnalyticsYour consent (given on our cookie banner), which you can withdraw at any time through “Cookie settings”
Sending you news and offers by e-mailYour consent, which you can withdraw at any time

We do not sell your personal data, and we do not make decisions about you based solely on automated processing.

4. Who we share your data with

We share your data only where needed for the purposes above:

ProviderWhat they doLocation
StripeCard payments and fraud preventionUK/EU and USA
VercelWebsite hosting and server functionsUSA and EU
ResendSending booking e-mailsUSA
Google (Workspace, Maps Platform, Fonts, Analytics)Our e-mail, address search, website fonts and — with your consent — website analyticsUSA and EU
OpenStreetMap / Nominatim, OSRM, OpenFreeMapBackup address search, route calculation and map displayEU

5. International transfers

Some of our providers process data outside the UK, mainly in the USA and the EU. Where they do, the transfer is protected by UK adequacy regulations (for example for the EU, or for US companies certified under the UK Extension to the EU–US Data Privacy Framework) or by the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

If your journey takes place in Turkey, we share the booking details with the chauffeur and operator there because this is necessary to perform the journey you have booked.

6. How long we keep your data

7. Your rights

You have the right to:

To exercise any of these rights, contact info@knolecar.com. We will respond within one month and will not normally charge a fee. We may need to confirm your identity first.

If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113.

8. Security

We use reputable providers with strong security, encrypted (HTTPS) connections throughout, and access to booking data only for those who need it to run your journey. Card payments are processed by Stripe, which is certified to PCI DSS Level 1. No system is completely secure, but we take appropriate steps to protect your data and will notify you and the ICO of any serious breach where the law requires us to.

9. Children

Our website and booking service are intended for adults. Bookings must be made by a person aged 18 or over. Children may of course travel as passengers on a booking made by an adult.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date it was last updated. If we make significant changes, we will tell you where appropriate.