Privacy Policy
This privacy policy gives you information about how Route 101 Limited collects and uses your, the User’s, personal data through your use of Route 101 Limited’s website (our ‘Website’), including any data you may provide when you register with us or purchase a service from us. This document can be printed for reference by using the print command in the settings of any browser.
This website is not intended for children and we do not knowingly collect data relating to children.
1. Important information and who we are
Owner and Controller
Route 101 Limited (The Conifers, Filton Road, Hambrook, BS16 1QG Bristol) is the controller and responsible for your personal data (collectively referred to as Route 101, "we", "us" or "our" in this privacy policy).
If you have any questions about this privacy policy, including any requests to exercise your legal rights (see below n. 8), please contact us at info@route101.com as mentioned below.
2. The types of personal data we collect about you
Among the types of personal data that our Website collects, by itself or through third parties, there may be:
- Cookies;
- Usage data;
- Identity data (including first name, last name, username, dietary restrictions);
- Contact data (including phone number, email address);
- Company name;
- Job title;
- Various types of personal data required to comply with legal obligations or to help provide our services to the best possible standards.
Complete details on each type of personal data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the data collection.
You may freely provide personal data, or, in case of usage data, this may be collected automatically when using our Website.
Unless specified otherwise, all data requested by our Website is mandatory and failure to provide this data may make it impossible for this Website to provide its services. In cases where our Website specifically states that some data is not mandatory, you are free not to communicate this data without consequences to the availability or the functioning of our service.
If you are uncertain about which personal data is mandatory, you are welcome to contact us.
Any use of Cookies – or of other tracking tools – by our Website or by the owners of third-party services used by this Website serves the purpose of providing the service required by us, in addition to any other purposes described in the present document and in the Cookie Policy.
You are responsible for any third-party personal data obtained, published or shared through our Website and confirm that they have the third party's consent to provide the data.
3. How is your personal data collected?
We take appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the data.
The data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to us, in some cases, the data may be accessible to certain types of persons in charge, involved with the operation of our Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as data processors by us. The updated list of these parties may be requested from us at any time.
4. How do we use your personal data?
Legal basis of processing
The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
We may process personal data relating to you if one of the following applies:
- Performance of a contract with you: Where we need to perform the pre-contractual obligations or contract we are about to enter into or have entered into with you.
- Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
- Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
- Public interest: We may process your personal data if a task is to be carried out in the public interest or in the exercise of official authority vested in us.
- Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.
5. The purposes of processing
The data concerning you is collected to allow us to provide our service, comply with our legal obligations, respond to enforcement requests, protect our rights and interests (and yours or third parties), detect any malicious or fraudulent activity, as well as the following: Interaction with external social networks and platforms, Analytics, Contacting you, User database management, Remarketing and behavioural targeting and Advertising.
Place
The data is processed at our operating offices and in any other places where the parties involved in the processing are located.
Depending on your location, data transfers may involve transferring your data to a country other than your own. To find out more about the place of processing of such transferred data, you can check the section containing details about the processing of personal data.
You are also entitled to learn about the legal basis of data transfers to a country outside the European Union or to any international organisation governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by us to safeguard your data.
If any such transfer takes place, you can find out more by checking the relevant sections of this document or inquire us using the information provided in the contact section.
6. Data Security
We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
7. Data Retention time
The Data concerning you is collected to allow us to provide our Service, comply with our legal obligations, respond to enforcement requests, protect our rights and interests (and yours or third parties), detect any malicious or fraudulent activity, as well as the following: Interaction with external social networks and platforms, Analytics, Contacting you, User database management, Remarketing and behavioural targeting and Advertising.
Place
The data is processed at our operating offices and in any other places where the parties involved in the processing are located.
Depending on your location, data transfers may involve transferring your data to a country other than your own. To find out more about the place of processing of such transferred data, you can check the section containing details about the processing of personal data.
You are also entitled to learn about the legal basis of data transfers to a country outside the European Union or to any international organisation governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by us to safeguard your Data.
If any such transfer takes place, you can find out more by checking the relevant sections of this document or inquire us using the information provided in the contact section.
We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Personal data shall be processed and stored for as long as required by the purpose they have been collected for. Therefore:
- Personal data collected for purposes related to the performance of a contract between you and us shall be retained until such contract has been fully performed.
- Personal data collected for the purposes of our legitimate interests shall be retained as long as needed to fulfil such purposes. You may find specific information regarding the legitimate interests pursued by us within the relevant sections of this document or by contacting us.
We may be allowed to retain personal data for a longer period whenever you have given consent to such processing, as long as such consent is not withdrawn. Furthermore, we may be obliged to retain personal data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
Once the retention period expires, personal data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
By law, we have to keep basic information about our customers (including contact, identity, financial and transaction data) for six years after they cease being customers for tax purposes and business needs.
8. Your legal rights
You may exercise certain rights regarding the data processed by us. In particular, you have the right to do the following:
- Withdraw your consent at any time. You have the right to withdraw consent where you have previously given your consent to the processing of your personal data.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.
- Request access to your personal data. You have the right to learn if your personal data is being processed by us, obtain disclosure regarding certain aspects of the processing and obtain a copy of the personal data undergoing processing.
- Verify and seek rectification. You have the right to verify the accuracy of your personal data and ask for it to be updated or corrected.
- Restrict the processing of your personal data. This enables you to ask us to suspend the processing of your personal data in one of the following scenarios:
- If you want us to establish the data’s accuracy;
- Where our use of the data is unlawful but you do not want us to erase it;
- Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
- You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Lodge a complaint. You have the right to bring a claim before their competent data protection authority.
Details about the right to object to processing
Where personal data is processed for a public interest, in the exercise of an official authority vested in us or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a ground related to your particular situation to justify the objection.
You must know that, however, should your personal data be processed for direct marketing purposes, you can object to that processing at any time without providing any justification. To learn, whether we are processing personal data for direct marketing purposes, you may refer to the relevant sections of this document.
How to exercise these rights
Any requests to exercise your rights can be directed to us through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by us as early as possible and always within thirty days.
If you are unhappy with our response, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).
9. Cookie Policy
Our Website uses Trackers. To learn more, you may consult our Cookie Policy.
10. Changes to our privacy policy
Our Website uses Trackers. To learn more, you may consult our Cookie Policy.
We keep our privacy policy under regular review. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.
Should the changes affect processing activities performed on the basis of your consent, we shall collect new consent from you, where required.
[Last Update: 07/08/2026]
