Privacy Statement

Privacy Notice from October 2024  

What is personal data? 

Personal data is information about a living person that means we can work out who they are.  When we collect your personal data, West Yorkshire Combined Authority is what is known as the ‘data controller’. 

As the data controller, we will: 

• Only keep your data that we need to provide services you have requested and do what the law says we must 
• Keep your data safe and accurate 
• Only keep your data as long as we have to 
• Collect, store and use your data in a way which does not break any data protection laws 

You can help us with this by telling us when any of your details change and tell us if any of the information we hold about you is wrong. 

What data are we collecting? 

We collect data from you to make sure we can provide your travel pass, this includes: 

Name, date of birth, address, phone number, email address, details of your disability, proof of your disability  

Some of this data (such as health data) may be classed as special category which is more sensitive and means we will look after it more carefully. 

Who are we sharing your data with? 

In order to make sure we can provide you with your travel pass, we need to share your data with the following organisations: 

• Card printers (for the printing and posting of cards) 
• Database management support (to ensure integrity, security and data recovery) 
• West Yorkshire Ticketing Company (owner of the M-Card brand) 

How long do we keep your data for? 

We will keep your account information (ie name, address, date of birth)  for 366 days after either the expiry of the last registered card or,  the date of the last transaction on an account whichever is shorter. Pink M-Cards customer information will remain on the system unless the customer requests that their information be deleted. Any incomplete customer records will be removed after three months. Any medical information will be kept for three months after the application decision, or three months after an appeal decision.  After this time has passed, we will safely delete your information. 

 What if I have any questions? 

If you want to ask us to delete or change any of your information or want to know more, you can get in touch with us: Email: DPO@westyorks-ca.gov.uk Tel: 0113 251 7272.  If you would like to read our full privacy statement, this is available on our website at wymetro.com/tickets-and-passes/privacy-statement