Website privacy

This privacy statement applies to data collected by the websites of TfL and its subsidiary companies, including:

  • Docklands Light Railway
  • London River Services
  • London Transport Museum
  • London Underground
  • Rail for London
  • Victoria Coach Station

Personal information we collect about you

You can browse our websites without disclosing any information about yourself.

By entering your details in any fields requested, such as your name, email address, postal address, telephone or mobile number, or date of birth, you enable TfL and its subsidiaries to provide you with the service(s) you select, the information that you have asked for, or to resolve a query or complaint you have made.

In all cases, we will only request information we need to provide you with the service(s) you have requested.

How we use your personal information

When we collect information from you, we will tell you if we would like to send you information about our products and services or transport-related issues.

We will give you the opportunity to opt out.

If we wish to share your data with third parties for marketing purposes, we will tell you about this and only do so if we get your consent.

We will give you the opportunity to opt in.

We may disclose your personal data to our subsidiaries, train operating companies which accept Oyster for travel on their services and our service providers.

These service providers may include train companies providing services on the DLR and London Overground, bus companies and those that administer the Congestion Charge and provide ticketing and information services.

TfL may also share your personal information with the police and other law enforcement agencies for the purposes of crime prevention or detection.

If we disclose your information, we ask the organisation to demonstrate that the data will assist in the prevention or detection of crime, or that TfL is legally obliged to disclose it.

This is done on a strictly case-by-case basis and through a tightly controlled process to ensure we comply with data protection legislation.

Protecting your information

We use up-to-date industry procedures to protect your personal information. We also protect the security of your data using Secure Sockets Layer (SSL) encryption technology. We have appropriate security measures in place to protect against the loss, misuse or alteration of information that we have collected from you via our websites. The internet, however, is not generally a secure medium of communication and we cannot guarantee the security of any information you input on this website or send to us via the internet.


A cookie is a piece of text that a website transfers to your computer's hard disk so it can remember who you are. Cookies are generally used to monitor how a website is used and improve your online experience. They do not give us access to the rest of your computerĀ and are notĀ used to identify you personally.

View a list of the main cookies we set, what they are used for and how to manage and delete them.

Changes to this privacy statement

It's likely that we'll need to update this statement from time to time, so check back here regularly to find out more. Your continued use of the site will mean that you accept those revisions.