Privacy Policy

Who we are

CheckMyTrain is a UK-based train information service available at checkmytrain.co.uk. We are the data controller for personal data collected through this website.

What data we collect

• Email address — used to send account notifications and delay alerts.
• Password — stored as a one-way hash (bcrypt). We cannot recover your password.
• Journey preferences — the routes and travel windows you save to your profile.
• Consent record — date and time you accepted this policy.

We do not collect your name, address, phone number, payment details, or any other personal data.

How we use your data

• To send you a verification email when you register.
• To send password reset emails when requested.
• To send you delay summary emails for routes you have saved, at the end of your travel window.

We do not share your data with third parties, use it for advertising, or sell it.

Legal basis

We process your data on the basis of your explicit consent, given when you create an account.

Data retention

Your data is retained for as long as your account is active. You can delete your account at any time from your profile page, which will permanently remove your email address and saved journeys.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Erase your data (right to be forgotten) — use the delete account option in your profile
• Withdraw consent at any time

To exercise these rights, email us at [email protected].

Security

We take reasonable technical measures to protect your data, including encrypted password storage, secure HTTPS connections, and HttpOnly session cookies. We do not log passwords or tokens.

Cookies

We use a single session cookie (cmt_session) to keep you logged in. It is HttpOnly, SameSite=Strict, and expires after 30 days or when you sign out. We do not use advertising or tracking cookies.

Contact

[email protected]