Privacy Policy

1. Who we are

TrainTicker is operated by Rivoro Studio Ltd, a company registered in England and Wales (company number 17226090), registered office Unit A, 82 James Carter Road, Bury St Edmunds, IP28 7DE. Our contact email is hello@thetrainticker.com.

2. What data we collect

We collect the following personal data:

• Account information: Name, email address, and hashed password when you register.
• Order information: Name, email, and shipping address when you place an order (processed via Stripe).
• Device settings: The station you choose for your TrainTicker device, and any destination, platforms or walking time you set (to show your trains).
• Device telemetry: Last-seen timestamps, firmware version, and hardware type for connected devices.
• Newsletter: Email address if you subscribe to our newsletter.

3. How we use your data

• Order fulfilment: To process and deliver your order.
• Account management: To let you log in, manage devices, and access your dashboard.
• Device operation: To fetch the departures for your chosen station.
• Communication: To send order confirmations, shipping updates, and (if subscribed) newsletter emails.
• Product improvement: Aggregated, anonymised usage data to improve the service.

4. Third parties

• Stripe: Processes payments securely. We never see or store your full card number. See Stripe's privacy policy.
• Google Analytics: Visit statistics for this website, only if you accept analytics cookies on the cookie bar. See Google's privacy policy.
• National Rail (Darwin): Our server asks National Rail's Darwin service, through the Rail Data Marketplace, for the departures from the stations our users choose. Only station codes are sent; no personal data is shared.
• Station lookups: When you search for a station or tap "Use my location" on the homepage or the demo page, the text or your position goes to our server to find matching or nearby stations, and your browser remembers the station you picked. When you look for stations near a postcode while setting up a board, your browser sends the postcode to postcodes.io and, if it is not a UK postcode, to OpenStreetMap's Nominatim service to find where it is.

5. Data retention

• Account data: Kept until you request deletion.
• Device settings and telemetry: Kept while the device is linked to your account.
• Order records: Kept for 6 years for tax and accounting purposes, including after account deletion.

6. Cookies

We use session cookies to keep you logged in. The website also uses Google Analytics to see how people use it, but only if you choose Accept on the cookie bar; until then no analytics script loads and no analytics cookies are set. If you accept, Google Analytics sets the cookies _ga and _ga_YJDJZMHB0F to tell visits apart, and the data is kept for 14 months. You can change your choice at any time with Cookie settings at the foot of the page, and rejecting after accepting removes those cookies. We do not use advertising cookies.

7. Your rights (GDPR)

Under the UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate data.
• Erasure: Ask us to delete your account and personal data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.

To exercise any of these rights, email us at hello@thetrainticker.com. We will respond within 30 days.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords (bcrypt), and secure payment processing via Stripe. We regularly review our security practices.

9. Changes to this policy

We may update this policy from time to time. We will notify registered users of significant changes by email. The "Last updated" date at the top of this page will always reflect the most recent version.

10. Contact

If you have questions about this privacy policy or your data, contact us at hello@thetrainticker.com.