Our privacy notice applies to the personal information that Network Rail collects about you, or that you provide to us. It explains how and why we use your personal information, who we disclose it to and how we protect your privacy.

Introduction
Who is responsible for the personal information that we collect about you?
What personal information do we hold about you?
How we will use personal information we hold about you
Who we may disclose your personal information to
How we protect your personal information
Where we will transfer your personal information
How long we will keep your personal information for
Your rights and choices in relation to your personal information
Website cookies and third party links
Changes to our privacy notice and your duty to inform us of changes
Contact us

Introduction

alt=""

We take your right to privacy seriously and want you to feel comfortable when using our services. Should we ask you to provide certain information by which you can be identified you can be assured that it will only be used in accordance with this privacy notice and only for the reasons you are aware of.

About this Privacy Notice:

  • References to weus or our means Network Rail Limited, Network Rail Infrastructure Limited, Network Rail Consulting Limited, Network Rail (High Speed) Limited and Network Rail Pension Trustee Limited.
  • References to you or your means the person accessing and using the website (as defined below) or the person who otherwise provides their personal information to us or about whom we otherwise collect personal information as explained in this privacy notice.
  • References to the website means the Network Rail website found at  www.networkrail.co.uk 
  • Personal information is information that is about you and which identifies you.
  • We have a separate privacy notice which applies to the personal information that Network Rail collects about employees.
  • The website is not intended for children and we do not knowingly collect data relating to children.

It is important that you read this privacy notice together with any other privacy notice or fair processing notices we may provide on specific occasions when we are collecting or processing personal information about you so that you are fully aware of how and why we are using your personal information. This privacy notice supplements the other notices and is not intended to override them.

Top of the page

Who is responsible for the personal information that we collect?

We are the data controller for the purpose of data protection law, in respect of your personal information collected or obtained as outlined with this privacy notice. This is because we dictate the purpose for which your personal information is used and how we use your personal information.

If you have any questions regarding this privacy notice or the way we use your personal information, you can contact our Data Protection Officer.

alt=""

What personal information do we hold about you?

We may collect and process the following categories of information about you for different reasons, depending on why you are in touch:

  • Personal contact details
    Name, title, home address, personal email address, home telephone number, personal mobile number.
  • Business contact details
    Name, company email address, place of work, company telephone number, company mobile number, company fax number.
  • Social media contact details
    Social media name and contact details.
  • Comments you make
    Your views, opinions, feedback, comments and any complaints.
  • Website technical information
    Through your internet browser or electronic device, certain information is collected by most websites or automatically through your electronic device, such as your IP address (ie, your computer’s address on the internet), screen resolution, operating system type (Windows or Mac) and version, internet browser type and version, electronic device manufacturer and model, language, time of the visit and pages visited.
    Through Cookies. Cookies allow us to recognise your device and to collect information such as IP address, internet browser type, time spent using the website and the pages visited.
  • Website usage data
    Information about how you use our website and our services.
  • Video and photo images
    Video and photo images of you captured on CCTV if you attend any of our premises or occasionally during our regular maintenance of our rail infrastructure via our maintenance support fleet (including by our mobile maintenance train or air operations) where you or your property are within the vicinity of our rail infrastructure at the time.
  • Marketing preferences and marketing activities
    Your marketing preferences, including services, topics, activities and events you are interested in; activities, meetings or events you have attended; and your preferred method of communication. To improve our marketing communications we may collect information about your interaction with, and responses to our marketing communications.

This information may be provided:

  • In the course of communications between you and us (including by phone, email, post or otherwise, including when making a freedom of information request).
  • When you complete surveys or respond to consultations.
  • Via Network Rail's 24 Helpline. 
  • Via the Speak Out confidential reporting service
  • Via your internet browser or electronic device.
  • Via cookies.
  • Via our website, our social media pages, other social media content, tools and applications including live chat or in the case of some FOI requests through whatdotheyknow.com
  • Via CCTV, our mobile maintenance trains, drones, helicopters or airplanes.
  • Personal details
    Name, home address, marital status, maiden name.
  • Business contact details
    Current company email address, place of work, company telephone number, company mobile number.
  • Personal contact details
    Personal email address, home telephone number, personal mobile number.
  • Recruitment information
    Application forms, CVs, interview notes, details and verification of education and qualifications, employment history, references, credit reference checks (for certain roles) , information collected from aborted applications.
  • Medical and health information
    Details regarding your health, including medical conditions which we may need in order to make reasonable adjustments for the interview process and any reasonable adjustments requested.
    Occupational health reports produced as part of our pre-employment health questionnaire process, including drug and alcohol tests.
  • Criminal offences and convictions
    Details regarding any unspent criminal convictions or offences.
  • Other sensitive information
    Details regarding trade union membership, race or ethnicity, religious or philosophical beliefs, sex life or sexual orientation.
  • Video images
    Video images captured on CCTV if you attend interview at our premises.
  • Data created as part of the recruitment and selection process
    Notes of your answers and responses during recruitment interviews, results/outcomes of any assessment processes/exercises carried out as part of the recruitment process, notes and scoring as part of our assessment of whether you should be offered a role.

This information may be provided:

  • In the course of communications between you and us (including by phone, email, post or otherwise, including sending us your CV or completing application forms.
  • Via our recruitment website.
  • By us when carrying out interviews or assessments.
  • Via CCTV.
  • By third parties – see below for information we obtain from other sources.
  • Personal contact details
    Name, title, home address, personal email address, home telephone number, personal mobile number.
  • Business contact details
    Name, company email address, place of work, company telephone number, company mobile number, company fax number.
  • Credit history
    Details of your credit history as part of our credit checks.
  • Payment information
    Details of amounts you pay us, amounts you owe us, relevant bank account or other payment details and any relevant tax information.
  • Comments you make
    Your views, opinions, feedback, comments and any complaints.
  • Video and photo images
    Video and photo images captured on CCTV if you attend our premises or occasionally during our regular maintenance of our rail infrastructure via our maintenance support fleet (including by our mobile maintenance train) or air operations team.
  • Marketing preferences
    Your marketing preferences, including services, topics, activities and events you are interested in; activities, meetings or events you have attended; and your preferred method of communication. To improve our marketing communications we may collect information about your interaction with, and responses to our marketing communications.
  • Business contact details
    Name, company email address, place of work, company telephone number, company mobile number and company fax number.
  • Comments you make
    Your views, opinions, feedback, comments and any complaints.
  • Payment information
    Details of amounts you pay us, amounts owed to us, amounts we pay or owe to you, relevant bank account or other payment details and any relevant tax information, including VAT number where applicable.
  • Credit history
    Details of your credit history as part of our credit checks.
  • CV information
    Your CV and those of any of your employees where provided.
  • Video and photo images
    Video and photo images captured on CCTV if you attend our premises or occasionally during our regular maintenance of our rail infrastructure via our maintenance support fleet (including by our mobile maintenance train) or air operations team.
  • Marketing preferences
    Your marketing preferences, including services, topics, activities and events you are interested in; activities, meetings or events you have attended; and your preferred method of communication. To improve our marketing communications we may collect information about your interaction with, and responses to our marketing communications.

This information may be provided:

  • In the course of communications between you and us for example (including by phone, email, post or otherwise).
  • Via tenders, proposals and quotations you submit.
  • By us as part of considering and evaluating tenders, quotations and proposals.
  • Via CCTV, our mobile maintenance trains, drones, helicopters or airplanes.
  • By third parties – see below for information we obtain from other sources.

We may receive the personal information about you from the following sources:

Job Applicants
  • Information from reference checking agencies (including but not limited to details of any County Court Judgments made against you and employment checks).
  • Recruitment information (including copies of right to work documentation, references and other information included in a CV or cover letter or as part of the application process) from recruitment businesses, temporary work agencies or the provider of our online recruitment platform.
  • Information we have obtained from your referees.
  • Information from our third party occupational health providers and other medical professionals.
  • Information obtained from a background checking provider (including but not limited to checks to verify your employment history and qualifications).
 Others
  • Information we obtain from publically available sources such as other websites, Facebook, LinkedIn, Twitter, What Do They Know, Companies House or HM Land Registry.
  • Direct from a third party, eg from an employee (such as information about their family members), your employer, other parties and their advisors involved in transactions with us, other parties involved in delivering services with us.
  • A third party with your consent, eg your bank or building society, or an advisor, consultant or other professional.
  • Our information technology systems, eg document management systems; booking and event systems; door entry and reception logs; CCTV and access control systems; communications systems, including email, voicemail and instant messaging systems.
  • Automated monitoring of our website and other technical systems, such as our computer networks and connections.
Information you may provide us about third parties

You may provide us with personal information relating to third parties.

  • We will use this personal information in accordance with this Privacy Policy. If you are providing personal information to us relating to a third party, you confirm that you have the permission of the third party to share such personal information with us and that you have made the information in this Privacy Policy available to the third party.

Top of the page

alt=""

How we will use personal information we hold about you

We will only use your personal information when there is a legal basis for us to do so. Most commonly, we will use your personal information in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you, for example in relation to job applicants, contractors and suppliers (for the performance of a contract with you).
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (for our legitimate interests or for a third party's legitimate interests).
  • Where we need to comply with a legal or regulatory obligation (to comply with our legal obligations).
  • Where we or another person need to do so as part of carrying out a task in the public interest or carrying our public functions which are laid down in law, for example exercising statutory rights and carrying out our legal duties under our network and station licences to operate and maintain the national railway infrastructure) (for the performance of public functions).
  • Where you provide us with your express or explicit consent (with your consent).

Your personal information may be used by us, our employees, service providers, and disclosed to third parties for a number of different purposes which we have set out below. For each of these purposes, we have set out the legal basis we rely on to do so.

Please note: We may process your personal information on more than one legal basis depending on the specific purposes for which we are using your personal information. Please contact our Data Protection Officer if you need details about the specific legal basis we are relying on to process your personal information where more than one legal basis has been identified in the table below.

Making a decision about your recruitment or appointment and determining the terms on which you work for us, including consideration of any criminal conviction or offences information

Legal basis:

  • For the performance of a contract with you.
  • For our legitimate interests (namely recruiting the workforce we need to run our business).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).
  • In relation to criminal conviction or offences information, where this is necessary for the purposes of exercising our employment law rights and obligations.

To provide you with feedback on your performance during a recruitment process or on the decision we have made

Legal basis:

  • For our legitimate interests (namely to run an open and transparent recruitment process).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

Assessing your fitness to carry out the functions of the role you have applied for and/or whether it is necessary to make reasonable adjustments for you as part of our recruitment process

Legal basis:

  • To comply with our legal obligations.
  • With your explicit consent.
  • In connection with any information about your health or medical conditions where this is necessary for the purposes of exercising our employment law rights and obligations or for health and social care purposes relating to our assessment of your working capacity for the role you have applied to.

To communicate with you during the application process

Legal basis:

  • For our legitimate interests (namely to manage our relationship with you).
  • For the performance of contract with you.
  • For the performance of our public function (namely operating and maintaining the national railway infrastructure).

To assess whether you might be interested in, or suitable for, other vacancies that might arise in the future

Legal basis:

  • For our legitimate interests (namely recruiting the workforce we need to run our business).
  • For the performance of our public function (namely operating and maintaining the national railway infrastructure).

Checking you are legally entitled to work in the UK

Legal basis: To comply with our legal obligations.


Dealing with legal disputes involving you

Legal basis:

  • For the performance of contract with you.
  • To comply with our legal obligations.

Complying with our legal or regulatory obligations (including in connection with a court order)

Legal basis: To comply with our legal obligations.


Equal opportunities monitoring

Legal basis:

  • For our legitimate interests (namely monitoring the equality and diversity of our workforce).
  • Where this involves the processing of sensitive personal data such as racial or ethnic origin, religious or philosophical beliefs, health information, or information about your sexual orientation, this will be on the basis that it necessary for reasons of substantial public interest laid down in law or with your explicit consent.

To ensure the security of our premises and the health and safety of our staff, visitors, contractors, suppliers and members of the public

Legal basis: For our legitimate interests (ensuring safety and security and preventing and detecting crime).

To communicate with you and other individuals

Legal basis:

  • To comply with our legal obligations.
  • For the performance of a contract with you.
  • For our legitimate interests (namely, fulfilling requests and managing our relationships with individuals).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

To manage and respond to requests for information, including freedom of information requests

Legal basis:

  • To comply with our legal obligations.
  • For our legitimate interests (namely, transparency in relation to our business).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

To manage enquiries, comments, complaints, feedback and requests

Legal basis:

  • For the performance of a contract with you.
  • For our legitimate interests (namely, fulfilling requests and managing our customer, contractor, supplier, landlord and tenant, stakeholder, regulatory and business relationships).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

To carry out market research and analysis

Legal basis:

  • For our legitimate interests (namely to understand how our customers, contractors, suppliers, tenants, stakeholders, regulators, business contacts and member of the public use and consider our services, to grow and improve our business, and to develop and inform our services, strategies and business plans).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

To carry out surveys and consultations

  • For our legitimate interests (namely to understand how our customers, contractors, suppliers, tenants, stakeholders, regulators, business contacts and member of the public use and consider our services, to grow and improve our business, and to develop and inform our services, strategies and business plans).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

To provide you with information about services, topics, activities and events you are interested in, in accordance with your marketing preferences

Legal basis: For our legitimate interests (namely, marketing and promoting our business and managing and developing our relationship with you).


To comply with any legal or regulatory obligations (including in connection with a court order)

Legal basis: To comply with our legal obligations.


To exercise our rights and carry out our obligations arising from any contracts entered into between you and us

Legal basis: For the performance of a contract with you.


To make, collect and manage payments, rents, charges, fees and expenses, including the collection and recovery of money owed to us

Legal basis:

  • For the performance of a contract with you.
  • For our legitimate interests (namely exercising rights and performing obligations relating to our business contracts, leases and licences and to recover debts due to us).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

For the prevention or detection of crime or apprehension of prosecution of offenders

Legal basis:

  • To comply with our legal obligations.
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure) or the performance of a third party's public functions (namely law enforcement functions).

For fraud prevention

Legal basis:

  • To comply with our legal obligations.
  • For our legitimate interests (namely ensuring we are not the victim of fraud) and the legitimate interests of third parties (namely ensuring they are not the victim of fraud).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure) or the performance of a third party's public functions (namely law enforcement functions).

To operate, maintain, repair and manage our facilities, properties, assets, equipment and infrastructure, including the national railway infrastructure

Legal basis:

  • To comply with our legal obligations.
  • For the performance of a contract with you.
  • For our legitimate interests (namely managing our facilities, properties, assets, equipment and infrastructure).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

To investigate concerns raised with and reports made to our Speak Out confidential reporting service or Network Rail's 24 Helpline.

Legal basis:

  • To comply with our legal obligations.
  • For our legitimate interests (namely managing and protecting our staff, assets and running our business).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

For operational reasons, such as improving the performance of our public functions, our business and services, efficiency, training and quality control

Legal basis:

  • For our legitimate interests (namely managing and developing our business).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

For insurance purposes, including handling and administering insurance claims

Legal basis:

  • To comply with our legal obligations.
  • For the performance of a contract with you.
  • For our legitimate interests (namely protecting, repairing and replacing our assets, complying with our contractual obligations and defending legal claims).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

To ensure the safety and security of our property, premises, assets, equipment and infrastructure

Legal basis:

  • For our legitimate interests (ensuring safety and security and preventing and detecting crime).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

For the health and safety of our staff, visitors, contractors, suppliers and members of the public 

Legal basis:

  • To comply with our legal obligations.
  • For our legitimate interests (ensuring health and safety and security and preventing and detecting crime).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

Equal opportunities monitoring

Legal basis:

  • For our legitimate interests (namely monitoring equality, accessibility and diversity in the way we provide our services, operate our business and perform our public functions).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).
  • Where this involves the processing of sensitive personal data such as racial or ethnic origin, religious or philosophical beliefs, health information, or information about your sexual orientation, this will be on the basis that it necessary for reasons of substantial public interest laid down in law or with your explicit consent.

To administer and protect our business records, IT systems and our websites

Legal basis:

  • To comply with our legal obligations.
  • For the performance of a contract with you.
  • For our legitimate interests (namely managing and protecting our staff, assets and running our business).
  • For the performance of our public functions (namely operating and maintaining the national railway infrastructure).

To deliver relevant and effective website content for you and your electronic devices

Legal basis: For our legitimate interests (namely developing and delivering our services, keeping our websites updated and relevant and running our business).


To use data analytics to improve our website, services, marketing, customer relationships and experiences.

Legal basis: For our legitimate interests (namely developing and delivering our services, keeping our websites updated and relevant, developing our business and informing our marketing strategy).

Failure to provide us with your personal information

We may be required to obtain your personal information to comply with our legal obligations or for the performance of our contract with you or to fulfill a request you have made. If you do not provide the relevant personal information to us, we may not be able to enter into the contract with you or properly perform our obligations under it. We may also be unable to fulfill your request.

Where your failure to provide information breaches a legal obligation we may be required to report this to regulators or law enforcement bodies. We will generally notify of the consequences of failing to provide us with required information at the time.

Automated decision making

We do not undertake any processing of your personal information by automated means in order to make decisions about you.

Top of the page

Who we may we disclose your personal information to

alt=""

We may share your personal information with:

  • Our group companies
    Other companies and entities within the group of Network Rail Group, which we are a member of.
  • Our service providers
    Our business partners, suppliers, contractors and their sub-contractors for the performance of any contract we enter into with you or for the performance of any contract we enter into with them which relates to our business and under which they deliver works and services to us, including works and services which may involve processing personal information on our behalf such as IT service providers.
  • Third parties involved in engineering and maintenance works and other aspects of railway business
    Including train operating companies and third party contractors.
  • Our banks, insurers, professional advisers and agents
    Including our banks, accountants, lawyers, insurers, brokers, agents, consultants and other professional advisers that assist us in carrying out our business activities and public functions.
  • Governmental, regulatory and legal authorities and third parties involved in legal action
    Government departments, governmental agencies, regulatory organisations and justice agencies (including the courts, tribunals, police, security services, Her Majesty's Revenue and Customs, local authorities, the Home Office, the Office of Rail Regulation, the Information Commissioner, the Health and Safety Executive,  and other regulators and law enforcement bodies.
  • Prospective sellers or buyers of our business and assets or our corporate group
    In the event that we sell or buy any part of our business or assets we will disclose your personal information to the prospective seller or buyer of such business or assets. If we or substantially all of our assets are acquired by a third party (or are subject to a reorganisation within our corporate group), personal information held by us will be one of the transferred assets.
  • Health professionals and emergency services
    In the event of an emergency we may disclose personal information to health and medical professionals and emergency services where the health, safety or security of a person is at risk.

Top of the page

alt=""

How we protect your personal information

We have put in place appropriate technical and organisational security measures to prevent your personal information from being accidentally lost, altered, used, disclosed or accessed in an unauthorised way. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to access this only and who are subject to a duty of confidentiality. In the case of third party data processors, they will only process your personal information on our instructions and have their own legal obligations under data protection law to protect your personal information and keep it secure.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Top of the page

Where we will transfer your personal information

To deliver services to you, it is sometimes necessary for us to share your personal information outside the European Economic Area (EEA), eg:

  • With companies within the Network Rail Group with offices outside the EEA
  • With your and our service providers located outside the EEA
  • If you are based outside the EEA
  • Where members of our staff needs to access your personal information remotely while they are travelling outside the EEA

These transfers are subject to special rules under European and UK data protection law. In those circumstances, we undertake an assessment of the level of protection in light of the circumstances surrounding the transfer. We will make sure that any transfers are limited to the minimum amount of personal information possible and will always take steps to ensure that your personal information is adequately protected. In certain circumstances we may need to seek your consent unless there is an overriding legal need to transfer the personal information.

Where necessary we have entered into standard European Commission approved model data protection clauses with [other companies within the Network Rail Group which have offices located outside of the EEA] and with our external service providers and business partners in relation to the services they provide which may involve processing personal information for which we are the data controller from locations outside the EEA.

Our IT support is provided from across the world and when support is provided remotely, your personal information may be accessed from and therefore transferred to that country. If we transfer personal information outside the European Economic Area (EEA), we will implement appropriate and suitable safeguards to ensure that such data will be protected as required by applicable data protection law.

Top of the page

How long we will keep your personal information for

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal information we hold, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal personal information (and whether we can achieve those purposes through other means), and the applicable legal requirements.

In some circumstances we may anonymise your personal information (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Top of the page

Your rights and choices in relation to your personal information

alt=""

You have certain rights with respect to your personal information. The rights may only apply in certain circumstances and are subject to certain exemptions. Please see the information below for a summary of your rights. You can exercise these rights by contacting the Data Protection Officer.


You have the right to receive a copy of your personal information that we hold about you, subject to certain exemptions.

You have the right to ask us to correct your personal information that we hold where it is incorrect or incomplete.

You have the right to ask that your personal information be deleted in certain circumstances. For example:

  • Where your personal information is no longer necessary in relation to the purposes for which they were collected or otherwise used.
  • If you withdraw your consent and there is no other legal ground which we rely on for the continued use of your personal information.
  • If you object to the use of your personal information (as set out below).
  • If we have used your personal information unlawfully.
  • if your personal information needs to be erased to comply with a legal obligation.

You have the right to suspend our use of your personal information in certain circumstances. For example:

  • Where you think your personal information is inaccurate and only for such period to enable us to verify the accuracy of your personal information.
  • The use of your personal information is unlawful and you oppose the erasure of your personal information and request that it is suspended instead.
  • We no longer need your personal information, but your personal information is required by you for the establishment, exercise or defence of legal claims.
  • You have objected to the use of your personal information and we are verifying whether our grounds for the use of your personal information override your objection.

You have the right to obtain personal information that you have provided to us in a structured, commonly used and machine-readable format and for it to be transferred to you or another organisation, where it is technically feasible. The right only applies where the use of the personal information you provided was with your consent or for the performance of a contract with you, and when the use of your personal information is carried out by automated (ie, electronic) means.

You have the right to object to the use of your personal information in certain circumstances:

  • Where you have grounds relating to your particular situation and we use your personal information for our legitimate interests (or those of a third party) or for our public functions, including for profiling.
  • If you object to the use of your personal information for direct marketing purposes.

You have the right to withdraw your consent at any time where we rely on your consent to use your personal information.

You have the right to complain to the Information Commissioner where you think we have not used your personal information in accordance with data protection law.

We aim to resolve any concerns you have and would ask that you contact us via our Data Protection Officer in the first instance. However if you are not satisfied with the outcome of your complaint to us, you can take a complaint to the Information Commissioner's Office

Information Commissioner's Office
Wycliff House
Water Lane
Wilmslow
Cheshire
SK9 5AF

No fee usually required

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that your personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated of our timescales.

Top of the page

Website cookies and third party links

alt=""

A cookie is a small text file that’s stored on your computer or mobile device when you visit a website.

We use cookies to:

  • Remember your preferences.
  • Tailor our sites and services to your interests.

You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However in a few cases some of our website features may not function as a result.
Information about deleting and controlling cookies can be found at www.aboutcookies.org

You can find more information about the cookies used on our site and the reasons why in the table below.

Cookies used on this website

Here are the details for the cookies used on this website
NameDetailsExpires
_ga
Google Analytics
Used to distinguish users24 months
_gid
Google Analytics
Used to distinguish users24 hours
_gat
Google Analytics
Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_.1 minute
__distilleryTracks user behaviour in videos12 months
muxDataIdentifies the web client that has accessed the site. This cookie uniquely identifies the web client that has accessed the site without storing any personally identifiable information. It is generated randomly when the web client accesses the site and is regenerated if the web client accesses the site in the future without the cookie present.20 years
prli_click_197Pretty link tracking1 month
prli_visitorPretty Link Tracking12 months
_hjIncludedInSampleThis cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate Heatmaps, Funnels, Recordings, etc.365 days
Google Doubleclick media performance IDE, ANID, DSIB, FLC, AID, TAID and exchange uidUsed by Google DoubleClick to register and report the website user's actions after viewing or clicking one of our ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.1.5 years

Third party links

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for how they handle your personal information. When you leave our website, we encourage you to read the privacy notice or policy of every website you visit.

Top of the page

Changes to our privacy notice and your duty to inform us of changes

alt=""

This privacy notice was last updated in May 2018.

Any changes we make to this privacy notice in the future will be posted on this page and, where appropriate, notified to you by email. The updated privacy notice will take effect as soon as it has been updated or otherwise communicated to you.

Please keep us informed if your personal information changes during your relationship with us.

Contact

Questions, comments and requests regarding data protection matters are welcomed and should be addressed to the Data Protection Officer

Data Protection Officer
Network Rail
The Quadrant, Elder Gate
Milton Keynes
MK9 1EN