Privacy Policy

Any reference to "Network Rail", "we" or "us" in this privacy policy shall mean Network Rail Infrastructure Limited.

This policy (together with our terms of use and any other documents referred to within those terms of use) sets out the basis on which any personal information we collect from you or that you provide to us electronically via our site will be processed by us. Please read the following carefully to understand our views and practices regarding your personal information and how we will treat it.

We take your right to privacy seriously and want you to feel comfortable when using this website. Should we ask you to provide certain information by which you can be identified when using this website, you can be assured that it will only be used in accordance with this privacy policy. This policy is effective from Tuesday 22 May 2012.

For the purpose of the Data Protection Act 1998 (the Act), the data controller is Network Rail Infrastructure Limited.
Information we may collect

We may collect and process the following information about you:


If you are aged 16 or under, please get your parent or guardian's permission before you provide any personal information to us. Users without this consent are not allowed to provide us with personal information.
What we do with your personal information

We use information held about you in the following ways:


How we store your personal information

The information that we collect from you may be transferred to and stored at a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. By submitting your personal information you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this privacy policy.

All information you provide to us via our site is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information we cannot guarantee the security of your personal information transmitted to our site; any transmission is at your own risk. Once we have received your personal information we will use strict procedures and security features to try to prevent unauthorised access.
Disclosure of your personal information

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries (as defined in section 1159 of the UK Companies Act 2006).

We may disclose your personal information to third parties in the following circumstances:


We may also use your personal information, or permit selected third parties to use your personal information, to provide you with details about goods and services which may be of interest to you and we or they may contact you about these by post or telephone, email or other electronic means. We will only do this in circumstances where you have explicitly consented to the use of your personal information in this way.