Mobilityways Privacy Notice

(Team Heathrow)

Last updated: January 2026

This privacy notice tells you what to expect when Heathrow Airport Ltd (Heathrow) processes personal information about you when you use the Mobilityways (Team Heathrow) Liftshare service. Heathrow is committed to protecting your personal information when you use its services.

Whenever you provide such information, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the UK General Data Protection Regulation (UK GDPR).

Who are Team Heathrow?

Heathrow has engaged with Mobilityways Limited (‘Mobilityways’) to provide a car sharing service (‘Liftshare for work’) for employees and other personnel who work for Heathrow, or who work for organisations that provide services at Heathrow airport and are registered with the Heathrow ID Centre. This group is collectively referred to as ‘Team Heathrow.’     

Data Controllers

When you register for an account on the Mobilityways App, you will agree to Mobilityways’ Terms and Conditions which will always apply when using their services.

You should avail yourself of Mobilityways’ Privacy Notice as to how they will process your personal data as a Data Controller for the Mobilityways App. Mobilityways Privacy Policy

When you access the ‘Team Heathrow’ community area to arrange shared commutes to Heathrow airport, you should note that Heathrow is the Data Controller for the processing within that secured area. This Privacy Notice informs you of how Heathrow processes your data within the ‘Team Heathrow’ community area.  

The following types of information about you will / may be processed:

  • Name
  • Email address
  • Mobile number
  • Address
  • Employer
  • Heathrow ID Centre registration status
  • Account eligibility
  • Passenger or Driver status
  • Declarations (vehicle related assurance)
  • Vehicle registration
  • Work location
  • Working patterns
  • Journey details (mileage, CO2 savings, etc.)
  • Your journey preferences
  • Messages with other users   
  • Communications with / from Heathrow
  • Eligibility for rewards
  • Preferred payment system (for shared journey costs)

How will Heathrow use the information it collects about me?

Heathrow will use your personal data for several purposes including the following:

  • to ensure users are eligible to enter the ‘Team Heathrow’ community area;
  • to provide the services within the ‘Team Heathrow’ community area;
  • logging journeys to / from Heathrow airport within the platform;
  • creating data and analytics (e.g. your estimated CO2e savings for certain journeys);
  • to notify you of available or accumulated incentives and rewards;
  • to provide information to you related to the service;
  • to support you and respond to your queries / issues;

We will only process your personal data where we have a legal basis to do so.

  • For the delivery of a ‘Contract’ is the lawful reason for Heathrow to process your data to meet your requirements when you choose to use the ‘Team Heathrow’ Liftshare service.
  • ‘Legitimate Interest’ is the lawful reason for Heathrow to analyse how the service is used, and to provide incentives and rewards where appropriate.

The ‘Team Heathrow’ community area within the platform is protected by password access so some personal data fields are mandatory to use the services.   

Please refer to Mobilityways’ Privacy Policy for the legal basis for processing your data where they retain Data Controller status. Mobilityways Privacy Policy

Your information will be stored and managed by the following recipients to deliver the service:

  • Heathrow Airport Limited
  • Mobilityways Limited

Information processing by Heathrow and our data processors as described within this Privacy Notice is performed within the UK and the EEA.

How long will Heathrow keep my information?

Your information will be retained for a period of two years from the date of your last interaction within the Mobilityways App, after which point it will be deleted from the platform. Your data will then be stored in encrypted form for a further two years before being deleted completely.   

Your information will be retained in a secure environment and access to it will be restricted according to the 'need to know' principle.

We will not transfer or disclose your personal information, other than as identified in this Privacy Notice, to our trusted third party suppliers, to the police, tribunals, courts, regulators, or other authorities to assist them with their investigations or requests or for us to report security incidents or suspected or actual unlawful acts and/or as may be otherwise required by law.

What rights do I have over my personal data?

Under UK GDPR, you have the right to:

  • Access your personal data by making a subject access request;
  • Rectification, erasure or restriction of your information where this is justified;
  • Object to the processing of your information where this is justified;
  • Data portability.

To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:

By Post - Data Protection Officer Heathrow Airport Limited, The Compass Centre, Nelson Road Hounslow Middlesex TW6 2GW

By Email - privacy@heathrow.com

From time to time, we may process personal data from EU residents. Whenever applicable, we have appointed an EU Representative to ensure that we continuously process your personal data in compliance with applicable laws and without undermining your statutory rights.

You can contact our EU Representative at HeathrowEURepresentative@eversheds-sutherland.com and write EU Representative as subject matter. You may also contact our EU Representative per post mail at:

Eversheds Sutherland Netherlands B.V.
Attn. EU Representative Heathrow Airport
Fascinatio Boulevard 212
Floor 2A
3065 WB Rotterdam

What if I find your response unsatisfactory?

If you would like to make a data privacy-related complaint, please contact us at privacy@heathrow.com or our Online Complaints Form. 

Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner’s Office (ICO). You can find more information on the ICO website at https://ico.org.uk/concerns/ regarding the complaints process.

Changes to this privacy notice

We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice we will tell you when it was last updated.