Your session will timeout due to inactivity, please choose to continue your session if you’d would like to continue.
Terminal Drop Off Charge
Created: October 2021
This privacy notice tells you what to expect when Heathrow Airport Ltd (Heathrow) collects personal information about you when you use the Heathrow Terminal Drop-Off Charge (TDOC) service Heathrow is committed to protecting your personal information when you use Heathrow services.
Whenever you provide your data, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the UK General Data Protection Regulation (UK GDPR).
When you use the Heathrow TDOC service, Heathrow will collect the following information about you:
* Heathrow will only collect first name, last name, and email address of users who consent to their details being used for marketing purposes, this information will be collected by APCOA on our behalf and transferred to our marketing agents.
Our trusted supplier, APCOA who manage parking and TDOC services on Heathrow’s behalf will also be processing your data as a data controller. For more information on how APCOA processes data please see link here – https://heathrowdropoff.apcoa.com/privacy
Heathrow will use your personal data for several purposes including the following:
The lawful basis for our processing of your vehicle registration data is based on it being necessary to perform our contract with you permitting the use of a vehicle at Heathrow Airport for use of the forecourt. Heathrow also relies upon legitimate interests in connection with data processed in connection with TDOC. The terms and conditions are set out on the signage located around site and online - https://www.heathrow.com/terms-and-conditions/terminal-drop-off-charge-terms-and-conditions.
For marketing data, we will only use your information should you consent to us doing so.
Your information will be stored and managed by the following recipients in order to deliver the TDOC service:
We will not transfer or disclose your personal information, other than as identified in this Privacy Notice, to our trusted third party suppliers, to the police, tribunals, courts, regulators, or other authorities in connection with enforcement or to assist them with their investigations or requests or for us to report security incidents or suspected or actual unlawful acts and/or as may be otherwise required by law. Your information will not be processed or transferred outside of the UK and appropriate security mechanisms have been implemented by our suppliers.
Your information will be retained in a secure environment and access to it will be restricted according to the 'need to know' principle.
Heathrow will retain information in relation to CCTV/ANPR data for a period of 31 days from the date of your drop off after which point it will be deleted.
Your personal details for marketing communications will be retained for a period of three years from the date of your last interaction with the marketing communication (i.e. opening an email or clicking on a link within the email) at which point all of your personal details is removed from our systems.
What rights do I have over my personal data?
Under the UK General Data Protection Regulation, you have the right to:
To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:
By email to: email@example.com
Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner’s Office (ICO). You can find more information on the ICO website at https://ico.org.uk/concerns/ regarding the complaints process.
We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice, we will tell you when it was last updated.
Your session has timed out due to inactivity.