We take care of your personal data

At Midland Expressway Limited (“MEL”), trading as M6toll (“M6toll”, “we”, “us” or “our”) we are concerned about the protection of your privacy and your personal data. This Privacy Notice explains how we use the information we collect about you and how you can instruct us if you prefer to limit the use of that information.

1. Who is the Data Controller?

A Data Controller is a natural or legal person or body that, independently or jointly with others (Joint Data Controllers) determines the purposes for which the data is requested, collected, and used, as well as what data is processed, for how long or what Third Parties may be authorised to access the data.

With respect to the personal data informed in this Privacy Notice, MEL and Aleatica SAU, are Joint Data Controllers as defined by the data protection regulations.

Our Contact Information

Customer Services Team

Address: Operations Centre, Express Way, Weeford, Lichfield, Staffordshire, WS14 0PQ

Phone Number: 0330 660 0790

E-mail: customer.services@m6toll.co.uk

2. What data can we obtain about you?

We obtain or request personal data, including:

• Identity data (for example, name and title)
• Contact data (for example, address, email address and telephone number)
• Driver and ANPR data (for example, vehicle licence plate number and IMAC details, location data including the MAC ID of the device and associated timestamp and sensor location)
• CCTV data (for example, recordings at toll sites)
• Financial data (for example, payment card details)
• Call data (for example, recordings of any MEL calls)
• Transaction data (for example, details about payments)
• Profile data (for example, username and password and survey responses)
• Marketing and communications data (for example, advertising preferences)
• Technical data (for example, log-in details, browser type and operating systems)
• Usage data (for example, information about how the M6toll website is used)
• Health data (for example, MEP applicant’s benefits letter)

3. For what purposes do we obtain and process your data?

The personal data that you will provide to us, or that we could obtain about you, will be processed for different purposes as detailed in this section. We will request your consent unless your consent is not required according to the data protection law.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting the Customer Services Team at customer.services@m6toll.co.uk or on 0330 660 0790

(b) We have a contractual obligation

Contractual obligation means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

(c) We have a legal obligation

Legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.

(d) We have a legitimate interest

Legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.

We also receive personal information indirectly e.g. when working with law enforcement.

We use the information that you have given us ​in order to;

Purposes	Data Type
To protect service users using the roads.	ANPR data Location CCTV data
To enable the Payment Notice to be issued to the customer when they have no means of payment at the payment point.	Identity data Contact data Call data
To support Payment Notice checks and payment processing.	Driver and ANPR data
To enable customers to make their payments online and to send a reminder text.	Driver and ANPR data Contact data
To support any checks or customer queries.	Driver and ANPR data CCTV data
To support customer enquiries and confirmation of details/disputes.	Call data
To support internal processing.	Driver and ANPR data CCTV data Payment Notice Number Identity data Contact data
For internal reporting.	Driver and ANPR data Payment Notice Number
To register you as a new customer.	Identity data Contact data
To manage our relationship with you, which will include notifying you about changes to our terms or privacy policy or asking you to leave a review or take a survey.	Identity data Contact data Marketing and communications data
To provide you with appropriate information and updates about the M6toll.	Contact data Marketing and communications data
To give you access to your on-line Account statement.	Identity data Contact data
To communicate with you in relation to your Account, any promotions you participate in, your use of our website and any enquiries or comments made by you	Identity data Contact data Profile data Marketing and communications data
To process your Application for a MEP.	Identity data Contact data Health data
To verify your circumstances to provide you with an MEP and communicate with you in relation to your MEP.	Identity data Contact data Marketing and communications data Health data
To support in the management of claims.	Identity data Contact Data Location Data CCTV data ANPR
To support customers in the process of recovery for you/others and your vehicle.	Identity data Contact Data Location Data CCTV data ANPR

 

4. Your information is securely stored.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

5. With whom can we share your data?

Your data will only be disclosed to service providers processing personal data under instructions of the joint Data Controllers. For example, providers of IT hosting services or maintenance, support or cyber security activities that require access to this information, to law enforcement, debt recovery, and insurers, as part of interoperability requirements e.g. working with other road charging, or other Aleatica Group corporate companies, for operational or administrative purposes.

6. Where is your personal data processed?

Some IT-related maintenance, support or cybersecurity service providers could be located in countries outside the European Economic Area (“EEA”) and, therefore, with data protection regulations that are not comparable to those of the states of the EEA. However, any processing outside the EEA has appropriate contractual clauses and controls to ensure the same level of protection that is awarded under UK GDPR. You have the right, upon request to customer.services@m6toll.co.uk, to receive a copy of any documentation that demonstrates that adequate or appropriate safeguards have been provided to protect personal data transferred outside of the EEA.

7. What rights do you have over your personal data?

Under data protection law, you have rights including:

• Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
• Your right of access – You have the right to ask us for copies of your personal information.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
• You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at customer.services@m6toll.co.uk, 0330 660 0790, or Midland Expressway Limited, Operations Centre, Express Way, Weeford, Lichfield, WS14 0PQ, if you wish to make a request.

8. How long do we process your data?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

9. How can you contact us and exercise your rights?

If you have any questions or queries about how we treat your personal data, or if you want to exercise any of the rights informed in Section 7 of this Privacy Notice, you can contact us by postal mail at:

Midland Expressway Limited, Operations Centre, Express Way, Weeford, Lichfield, WS14 0PQ

Or electronically at: customer.services@m6toll.co.uk

You can also request the protection of the Information Commissioner’s Office (ICO) through its website ico.org.uk

10. How often is this Privacy Notice updated?

We regularly review this Privacy Notice.

This Privacy Notice was updated on 15th January 2024.