Taxi Feeder Park Privacy notice

Last updated: June 2026

This privacy notice tells you what to expect when Heathrow Airport Limited (“Heathrow”) collects personal information about you when you use the Heathrow Taxi Feeder Park Service (Nymble). Heathrow is committed to protecting your personal information when you use Heathrow services.

Whenever you provide such information, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the UK General Data Protection Regulation (UK GDPR).

What information will we collect about you?

When you use Heathrow Taxi Feeder Park we will collect the following information about you:

• Name
• Email address
• Mobile number
• Home Address
• Taxi Bill Number, Taxi Badge Number and TFL Expiry Date
• Image of the TFL License (which shows the following information: Driver’s name and photograph, Address, Date of Birth, license number, renewal/issue number, Start and Expiry Date, Badge Number and Date of Issue)
• Driver face photograph (captured at one-time Enrolment)
• Transaction data including account balance and account transaction history, e.g., charges, top ups and refunds
• Vehicle registration number data, together with associated date and time information, is captured via Automatic Number Plate Recognition (ANPR) technology when you use the Taxi Feeder Park
• Heathrow collects information about how you use the Taxi Feeder Park Management (“TFMS”) service via the Nymble website, the Nymble App and the device that you use to access the Taxi Feeder Park service. This includes collecting unique online identifiers such as IP addresses, which are numbers that uniquely identify a specific computer or other network device on the internet.

Payment information is processed by Stripe. For more information on how Stripe process your data please see their privacy policy: https://stripe.com/gb/privacy. 

How will Heathrow use the information it collects about me?

Heathrow will use your personal data for several purposes including the following:

• To enable you to use the Taxi Feeder Park service.
• To update the Taxi Feeder Park service with your activities and to provide you with information about them and to deal with your requests and enquiries related to the Taxi feeder Park service.
• To enable you to pay for the Taxi Feeder Park service including via the Nymble App.
• To provide the Taxi Feeder Park service, Heathrow will collect your Vehicle Registration Number (VRN) via Automatic Number Plate Recognition (“ANPR”). This information will then be passed on to Sensor Dynamics who provide the Nymble application and APCOA, who manage the operations at the Taxi Feeder Park.

The lawful justification for collecting and using your personal data is that it is necessary for the performance of the Heathrow Taxi Feeder park service which you contractually enter into.

Your information will be stored and managed by the following recipients in order to deliver the Taxi Feeder Park service:

• Heathrow staff delivering the Taxi Feeder park service
• APCOA Taxi Feeder park service provider staff
• Employees of Sensor Dynamics, the Nymble application providers, and also provide the support and maintenance of the backend IT systems and the ANPR technology.
• Stripe who collect and process your payment information

Information processed by Heathrow and our data processors as identified within this Privacy Notice is done within the UK, the EEA and Australia.

How long will Heathrow keep my information?

Your information will be retained for a period of 12 months after your account becomes ‘inactive’ in the Taxi Feeder Park Management System (“TFMS”) after which point it will be deleted.

ANPR images and Information on how you use the TFMS service will be retained online for a period of 1 year with a further 5 years of anonymised offline data for analytics purposes.

Your information will be retained in a secure environment and access to it will be restricted according to the 'need to know' principle.

We will not transfer or disclose your personal information, other than as identified in this Privacy Notice, to our trusted third party suppliers, to the police, tribunals, courts, regulators, or other authorities to assist them with their investigations or requests or for us to report security incidents or suspected or actual unlawful acts and/or as may be otherwise required by law.

What rights do I have over my personal data?

Under the UK General Data Protection Regulation, you have the right to:

• Be informed as to how your data is being processed;
• Access your personal data by making a subject access request;
• Rectification, erasure or restriction of your information where this is justified;
• Object to the processing of your information where this is justified;
• Where applicable, you have rights in relation to data portability.

To exercise your rights, please contact the Heathrow data protection officer using the following contact details:

By Post to:

Data Protection Officer
Heathrow Airport Limited
The Compass Centre
Nelson Road
Hounslow
Middlesex
TW6 2GW

By Email to: privacy@heathrow.com

From time to time, we may process personal data from EU residents. Whenever applicable, we have appointed an EU Representative to ensure that we continuously process your personal data in compliance with applicable laws and without undermining your statutory rights.

You can contact our EU Representative at HeathrowEURepresentative@eversheds-sutherland.com and write EU Representative as subject matter. You may also contact our EU Representative per post mail at:

Eversheds Sutherland Netherlands B.V.
Attn. EU Representative Heathrow Airport 
Fascinatio Boulevard 212
Floor 2A
3065 WB Rotterdam

What if I find your response unsatisfactory?

If you would like to complain about the service you received, please contact us via our online complaints form.

If you would like to make a data-privacy related complaint, please contact us at privacy@heathrow.com or our online complaints form.

Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commission. You can find more information on the Information Commission's website at https://ico.org.uk/concerns/ regarding the complaints process.