Privacy Policy

BA Int Ltd, trading as BA Transfer.
Email: contactus@batransfer.com
Tel: +44 207 118 0110

When you apply to join the supplier network and use the portal, we collect:

• Identity and contact data — your name, your company name, contact email, phone number, and business address.
• Licensing data — your operator licence number, licensing authority, and expiry date.
• Operational data — your coverage areas, vehicle classes, baby/child seat capabilities, and your registered drivers’ details.
• Financial data — bank account details you provide for weekly settlement payments.
• Account credentials — your portal password, stored as a one-way hash; we never store it in plain text.
• Technical data — IP address and basic browser metadata recorded automatically when you sign in, used for security and abuse detection.
• Communications — messages you send us via the portal or by email.

We use this data to:

• operate the supplier portal and the supplier network — verifying eligibility, routing jobs, processing your quotes;
• make weekly settlement payments to you;
• send service emails (job offers, awards, quote responses, document expiry reminders);
• keep the network secure (preventing fraud and unauthorised access);
• comply with legal and regulatory obligations (record-keeping, tax, licensing).

We do not use your data for marketing without your separate, opt-in consent.

• Performance of a contract (Art. 6(1)(b)) — most processing, including routing jobs and paying you, is necessary to perform the supplier agreement.
• Legitimate interest (Art. 6(1)(f)) — for portal security, abuse prevention, and improving our service.
• Legal obligation (Art. 6(1)(c)) — for records we are required to keep under tax and licensing law.
• Consent (Art. 6(1)(a)) — only where we explicitly ask for it, for example marketing communications.

We share your data only with:

• our hosting and infrastructure providers (DigitalOcean for application hosting, Google Cloud for messaging and analytics);
• SendGrid for transactional email delivery;
• your bank’s payment-clearing network when sending settlement payments;
• tax authorities, regulators, or law enforcement where we are legally required to do so;
• professional advisors (legal, accounting) bound by confidentiality.

We never sell your personal data, and we do not pass supplier contact details to other suppliers or to customers.

Some of our infrastructure providers process data in the EU, the United States, and the United Kingdom. Where data leaves the UK, we rely on adequacy decisions or the UK International Data Transfer Addendum (IDTA) with Standard Contractual Clauses to provide the required protection.

We keep active supplier records for as long as you are participating in the network. After your account is closed we keep core records (financial transactions, regulatory documents, contractual correspondence) for up to 7 years to meet our HMRC and other legal obligations. Account credentials and technical logs are deleted sooner, typically within 12 months of account closure.

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have data erased where it is no longer needed and not subject to a legal retention obligation;
• restrict or object to certain processing;
• receive your data in a portable form;
• withdraw any consent you have given.

To exercise any of these rights, email contactus@batransfer.com. We respond within 30 days. If you are unhappy with how we handle your request you can complain to the Information Commissioner’s Office at ico.org.uk.

The portal uses only strictly-necessary cookies — to keep you signed in and to remember your session. We do not use third-party advertising or cross-site tracking cookies. Your browser can block cookies but parts of the portal will not work without the session cookie.

We use HTTPS everywhere, hash passwords with industry-standard algorithms, store credentials and bank details in access-controlled databases, and restrict administrative access on a need-to-know basis. No service is perfectly secure — if you suspect any compromise of your account, please email us immediately at contactus@batransfer.com.

We may update this notice from time to time. Material changes will be notified by email to the address on your supplier account at least 14 days before they take effect.