Privacy Notice
The purpose of this notice is to make you aware of how we will manage and protect your personal data.
You can use the links on the left to go directly to specific sections
Who we are
ATOC Ltd manages Veterans Railcard on behalf of the participating train companies. ATOC Ltd is the data controller and, as such, is responsible for ensuring the lawful and appropriate handling of all the personal data that you provide in order to purchase the Veterans Railcard. ATOC Ltd's address is 200 Aldersgate Street, London EC1A 4HD.
Veterans Railcard and National Rail are trademarks of ATOC Ltd. ATOC Ltd also trades under the name Rail Delivery Group.
You can contact us regarding our use of your data. Alternatively, you can write to us at ATOC Ltd First Floor North, 1 Puddle Dock, London EC4V 3DS.
Our lawful basis for collecting your data
By registering your interest for updates on the Veterans Railcard, you provide us with your consent to process your data.
When you buy the Veterans Railcard, you enter into a contract with ATOC Ltd for the provision of the Veterans Railcard on behalf of train companies. Therefore, collecting your data is necessary for us to perform the contract with you.
We will treat your data in an appropriate and lawful manner, in accordance with data protection laws.
What data we collect
When registering your interest for the Veterans Railcard we collect your title, first name, last name and email address. We will also ask if you have any other of our products so that we can tailor our product to best suit your needs.
We only collect the data that we need in order to process your application. For the Veterans Railcard we collect your name, address, date of birth, email address, contact number and photograph. We also require copies of your eligiblity document to verify you are a Veteran.
If you are buying the Veterans Railcard on behalf of another person, we will need their personal details. In this case, we will deem that you have the other person's permission to provide their personal details.
If you choose to enter a voluntary prize draw for either market research or competitions, we will collect your personal email address, your name and postcode and Veterans Railcard number.
We use cookies and similar tools across our website to improve your experience and our website's performance. To find out more about cookies, read our Cookie Policy.
Sharing information with other data processors
To fulfil your request for the Veterans Railcard, we use a number of suppliers to produce, deliver and administer your Veterans Railcard.
These suppliers are:
Fast Rail Ticketing Ltd (who retail and fulfil the Veterans Railcard)
Indicia (who provide our customer database)
TTK (who generates the barcodes used within our digital Railcard app)
Teleperformance (who provide customer support and telesales for Veterans Railcard and verification for Railcard applications)
Vodafone (who provide the telephone service for the Teleperformance Customer Support centre)
Salesforce (who send our emails)
Rival (who send our renewal reminders by post)
Quiet Storm (who provide some of our website pages, including competition forms, contact forms and web forms)
Accent (who undertake market research and surveys on our behalf)
Survey Monkey (who provide a survey platform for us)
Node 4 (who provide and manage all our @nationalrail.co.uk email accounts)
Encordia (who provide our data consolidation support)
Your personal information may be disclosed to the train companies who run services in your region in order for them to administer and support your use of the Veterans Railcard. We also share information with law enforcement agencies on request.
We will not share your details with any other third parties for marketing purposes unless you provide us with your consent. If you consent to marketing, you can find out more about the communications you’ll receive in our Marketing and Contact Policy (below).
If you participate in a survey with us your surveys will be processed by our survey supplier.
If you enter one of our prize draws for market research or competitions, your entry will be held by our suppliers. Winners of competitions will be notified using the contact details provided in their entry. Where a prize is being offered by one of our partners, your contact details may be provided to them in order for them to fulfil the prize.
Keeping your data safe
We protect your privacy by ensuring we have the appropriate security measures in place, backed up by contractual obligations, to ensure that our suppliers process your data in an appropriate, lawful and safe manner.
What we do with your data
We use your data to provide you with the Veterans Railcard, and:
to provide you with product updates if you've consented
to provide you with customer support services, for example if you lose your Veterans Railcard
to remind you when your Veterans Railcard is due to expire.
to send you information about any changes to your Veterans Railcard’s terms and conditions; and
to alert you to any changes to this Privacy Notice
We do some analysis on our customer data for sales analysis and marketing research including demographic, geographic and attitude analysis to understand who our customers are in groups rather than as individuals.
We have a legitimate interest in improving our products and services, and we conduct market research for this purpose. We may therefore contact you from time to time to invite you to participate in our market research. This research may be carried out by a supplier not currently listed in this Privacy Notice, however we will always inform you who is completing this research on our behalf. Your data will be shared with this supplier for this purpose alone and will be deleted once this research has been completed.
If you enter one of our prize draws for market research or competitions, the data we collect will be kept securely whilst the survey and/or competition is live. The prize draw winner(s) details (first name and county) will be made available after the closing date for 30 days to those who send an email to marketing@raildeliverygroup.com with the survey title as the subject line. Personal details will only be used for the purpose of the prize draw and will be deleted once the winner has been confirmed.
How long do we keep your data?
If you have registered your interest for updates about the Veterans Railcard, we will keep your data until the promotional sale period of the Railcard has ended. Your data will then be deleted from all systems unless you have purchased a Veterans Railcard.
We keep your data while your Veterans Railcard is valid, and for two years thereafter to enable you to renew easily within that period. During this time you may receive other communications from us if you have consented.
If you participate in a prize draw for market research or competitions, your entry will be held for 30 days and then deleted.
Your rights
You have several rights to data protection which are set out below. Submit a request to contact us in relation to your rights regarding how we use your data.
Subject access request
You have the right to request that we give you a copy of the data we hold about you. This is called a Subject Access Request.
Deletion of personal information
You have the right to request that we delete any data that we hold on you after your Veterans Railcard has expired.
Bereavement notification
If you wish to notify us of the death of a Railcard customer, you can submit a bereavement request using our online form. Please select 'Bereavement – Data Deletion' from the request options and provide the required information so that we can process the request appropriately.
Restrict processing of personal information
You have the right to request that we restrict processing of your information for specific purposes such as direct marketing. However, for the duration that your Veterans Railcard is active we will continue to process your data in the way we have set out in this Privacy Notice in order to enable us to fulfil our contract to you.
Right to rectification
If your details are incorrect, incomplete or have changed, you can contact us at any time to change these.
If you bought your Veterans Railcard online, you can update your details by signing in to your online account and updating them.
Alternatively, you can fill out our online form to request changes to the data we hold on you.
How to contact us
To exercise any of your rights, set out above, please fill out our online form or contact us using the details provided below:
Data Protection Lead for Veterans Railcard
ATOC Ltd, First Floor North, 1 Puddle Dock, London EC4V 3DS
Tel: 0207 841 8000
Please include your name, address and Veterans Railcard number, so that we can deal with your request.
Complaints
You have the right to complain about our processing to the Information Commissioner if you believe we are not processing your data in a proper manner. Visit the Information Commissioner’s Office website for more information.
Last updated 5 August 2026