bus mum.LOOKING AFTER LIFE ON THE ROADPrivacy policy.
How Bus Mum uses information across its website and mobile apps. Last updated 11 October 2026.
Who is responsible
OK LETS GO LTD, company number 17503740, registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ, is the controller for account administration, billing relationships, security and support information. Our ICO registration reference is ZC268393. Contact support@busmum.com about privacy or your rights. For passenger rosters and tour records, your tour organisation normally decides why and how information is used; we process those records for it. Ask your tour administrator for its own privacy notice.
Information we receive
You provide your name, email address, account credentials, support messages and any content you submit. Organisation administrators may add passenger and driver names, contact details, bus memberships, roles, tour and departure assignments, and boarding or headcount records. Stock requests can include the requester name, requested items, quantities and optional notes. We also keep account and tour last-activity timestamps to administer trials, show authorised staff when an account was used, and send inactivity warnings before releasing an unused tour address. We keep permissions, operational audit entries, authentication IP addresses and browser/device information. Passwords are stored as hashes, not readable passwords.
Why we use it
We use account and billing information to provide the service and fulfil our contract with an individual account holder. Where an account is used on behalf of a business, we rely on our legitimate interests in administering that relationship. We use limited security and operational records to protect accounts, prevent abuse, investigate errors and support users. Legal obligations may require accounting records or disclosure to authorities. Your tour organisation is responsible for identifying the lawful basis for the passenger and staff records it supplies. We do not use operational records for advertising.
Required and optional information
Admin accounts need a name, email address and password. Crew using shared bus links do not need accounts; they select a name already added by the admin. The information needed for a particular tour is set by its administrator. Stock shopping and passenger membership are separate. Optional notes and device notifications are not required to have an account. Do not put medical, passport or payment-card information into free-text fields.
Who can see information
Access depends on organisation roles and assigned buses. Drivers can access the manifests they are authorised to manage; stock staff receive relevant shopping information. When an admin enables a shared tour or bus page, anyone with its address can see the names and group labels on the bus, select a name, submit stock requests and view or update the selected name’s enabled travel status. Name selection does not verify identity. Shared pages do not expose email addresses, phone numbers, private messages or administrative notes. Admins can disable shared access and download bus lists as PDFs to share with their team. Legacy stock-only links do not expose passenger names. A private passenger link gives access to that person’s assigned departures to whoever holds the link until it expires or is revoked, so it must be kept private. Authorised support and hosting personnel may access information when necessary to operate, protect or troubleshoot the service.
Payments and service providers
20i/StackCP supplies hosting and the support mailbox. Stripe processes subscription payments and supplies us with customer and subscription references, payment status and related billing information. We do not store full card numbers or card security codes. For enabled phone notifications, Expo, Apple Push Notification service and Google Firebase Cloud Messaging process device tokens and notification content. App-store providers handle their own store-account and distribution information under their policies. We may disclose information where legally required or necessary to establish or defend legal rights. We do not sell personal information.
Marketing and review invitations
Marketing emails are optional and off by default. If you opt in from your verified account, we use your email address to send occasional Bus Mum news and one neutral Trustpilot review invitation after a paid subscription. We record your choice, its date and the wording you agreed to. You can unsubscribe using the link in any Bus Mum email without signing in, or change your choice and subscribe again in Email preferences. Withdrawal does not affect essential security, account or billing messages. We retain your preference and a limited consent history to honour opt-outs and demonstrate your choice. We do not upload customer lists to Trustpilot; if you follow the review link, Trustpilot processes your visit and any review under its own privacy notice.
Phone notifications and device storage
With your permission, we register a device push token and your bus notification preferences. A deadline can generate a notice when set and a reminder one hour before it closes. Messages may contain a bus name, deadline and announcement text, which may appear on a locked screen according to your phone settings. Turn off notifications in the app or your device settings. Signing out removes this app’s device registration where the server can be reached; system settings let you stop notifications immediately. Native login tokens use the operating system’s secure storage. Bus Mum does not request precise GPS location.
Cookies
The website uses necessary authentication cookies and browser storage for preferences. The demo stores fictional example data locally. We use first-party aggregate website statistics to improve our public pages, on the basis of our legitimate interests in understanding and improving the service. Your IP address is processed briefly to update an approximate unique-IP count, then discarded from analytics; we retain only aggregate counters, public page paths, dates and broad referral categories, without individual IP addresses, visitor identifiers or browsing histories. We do not count private tour, bus or account pages. There are no advertising trackers or analytics cookies. You can exclude your visits using the Website statistics control on our Cookies & local storage page; we also honour Do Not Track and Global Privacy Control. Hosting and security logs are separate from these statistics. See our Cookies & local storage page for details and controls. Stripe and app-store services have their own notices when you use their hosted pages.
International processing
Our application host is in London, UK. Payment, email delivery and notification providers may process information in other countries, including the United States. Where a restricted transfer is required, the relevant provider arrangements must use an applicable adequacy decision or appropriate contractual safeguards, such as the UK international data transfer agreement or UK Addendum, as appropriate. Contact support@busmum.com for information about the arrangements for your data.
How long information is kept
Account information is kept while needed to operate the account and resolve outstanding requests. Tour information is held for the organisation’s operational needs and documented instructions, including relevant disputes or legal obligations. Removing a bus member revokes access but does not erase completed journey history. Billing records may need to be retained separately to meet accounting and legal obligations. We assess deletion requests against those purposes, minimise retained information and explain any continuing need. Authorised Bus Mum staff can disable a workspace using recoverable account deletion, which releases its tour addresses and revokes shared links. This is not permanent erasure: records remain subject to review and documented retention needs. Address expiry is also separate from deletion of personal data. Automated tour-history purging and customer self-service erasure are not yet available; contact support@busmum.com to arrange a reviewed deletion request. Backup copies may remain for the hosting backup cycle and must not be restored for ordinary use after a valid deletion.
Your choices and rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. Where processing relies on consent you can withdraw it without affecting earlier lawful processing. Send requests to support@busmum.com; we may need to verify your identity. For organisation-controlled tour records we will coordinate with the relevant administrator. We normally respond within one month; if a lawful extension or exception applies we will explain it. There is no automated decision-making with legal or similarly significant effects in Bus Mum.
Concerns and policy changes
Please contact us if something is wrong. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or your applicable supervisory authority. Bus Mum is intended for adult professional tour teams and is not directed at children. If you believe a child’s information has been added inappropriately, contact us. We will update this notice when practices change and draw attention to material changes.
Bus Mum is a service operated by OK LETS GO LTD.
Explore the demo Back to home