Personal information we hold

The personal information we hold about you includes:

  • Information about the concession holder (you), comprising name, address, date of birth, photograph, telephone number, signature
  • Information about your parent/guardian, comprising name, email address, signature
  • The name of your educational establishment or training provider
  • Your journey history.

If you apply online for a 11-15 or 16+ Zip Oyster photocard, you will need to verify your date of birth by entering your passport number. Alternatively, you can download a verification letter from your TfL account and take it to a London post office with proof of your age (this can be a passport, European ID card, birth certificate or biometric residency permit). If the documents provide all of the information required, the post office will confirm to TfL that they have verified your age.

We store the details of any payment cards used to pay for the Zip card administration fee, pay as you go credit, auto top up or season tickets. This information is encrypted and stored in line with payment card industry security standards.

The TfL ticketing system records the location, date and time a Zip Oyster photocard is used to validate a journey.

If you or your parent/guardian telephones Customer Services about your Zip Oyster photocard, the call will be recorded for training and quality purposes.If you or your parent sign in to your online account, TfL will collect the IP address used by your computer for the purpose of fraud prevention and detection.

How we use personal information

TfL and the companies that process personal information on our behalf use your and your parent/guardian's information for customer services and to administer the Zip scheme you have applied for. For example, we will use your personal information to ensure that you are eligible for the particular Oyster photo card scheme you have applied for, to issue your Zip card and respond to queries if you or your parent/guardian contacts us.

We will also contact you near the expiry date of the Zip card to tell you about your future ticketing options.

We will not use your or your parent or guardian's personal information for marketing purposes and will not pass it to any other organisation for this purpose.

Length of time we keep information

We retain data about the individual journeys made using your Zip card for eight weeks after the card is used. After eight weeks, the journey data in the ticketing system is disassociated from your card (ie anonymised). This eight-week period is considered reasonable to enable customers to verify or make enquiries concerning their Zip journeys (for example, for refund purposes).

The information we collect as part of the application process is kept for one year after the expiry date of your photocard.

Details of debit or credit cards used to pay the administration fee, to add pay as you go credit or season tickets are retained for a maximum of 18 months.

If you breach the Behaviour Code, you may lose your concessionary travel. If so, TfL will keep a record of this for 18 months from the date you lose your concession.

IP addresses collected when you access your TfL online account are retained for 13 months.

Keeping personal information secure

We take the privacy of our customers very seriously and a range of robust policies, processes and technical measures are in place to control and safeguard access to, and use of, personal information associated with Zip Oyster photocards.

Sharing personal information

TfL uses an external service provider to process your application, issue your photo card and operate the photo card scheme on a day to day basis, including Customer Services support. TfL also uses external service providers to operate 'back office' technical services and customer database management.

The post office validates Zip Oyster photocard applications on our behalf when you're unable verify your age online. They send the information to our service provider who issues your photocard. If you use your Zip Oyster photocard on National Rail services, we may share your personal data with relevant train operating companies for the purpose of fraud prevention and detection.

If you appeal against a penalty fare notice issued on a national rail service and you state that you used your Oyster card for that journey, the independent appeals body may verify the information you provide against journey data held in our ticketing systems. This is strictly for the purpose of assessing your appeal, and any information sharing is managed in accordance with relevant privacy and data protection legislation.

If you have an enquiry, Customer Services will only discuss your application with you or the parent or guardian whose name is on the original Zip photocard application.

In some circumstances, disclosures of personal data to the police (and other law enforcement agencies) are permitted by the Data Protection Act 1998 (DPA), if they relate to the prevention or detection of crime and/or the apprehension or prosecution of offenders. Before any such disclosure takes place, the police are required to demonstrate that the personal data concerned will assist them in this respect. Each police request to TfL is dealt with on a strictly case-by-case basis to ensure that any such disclosure is lawful and in accordance with the DPA.

Overseas processing

TfL and  its service providers currently process personal information relating to Oyster (including concessionary schemes) within the United Kingdom and the USA. Any such processing is subject to appropriate contractual safeguards and carried out in accordance with the requirements of UK and EU privacy legislation.

Complying with the Behaviour Code

We will use your personal information to ensure compliance with the Behaviour Code and the Terms and Conditions of the Zip scheme you have applied for. In doing so, the Metropolitan Police Service (MPS), City of London Police and British Transport Police may inform us if you incur a criminal conviction or other legal sanction for an offence committed on London's public transport network.

Before doing this, an authorised Metropolitan Police Service officer or TfL employee will check against the information we hold (that you supplied to us on your application form) to ensure that you are the holder of the concessionary photocard. The MPS officer can only check these details for as long as you are eligible for the Zip Oyster photocard scheme.

If we withdraw or suspend your travel concession, or are considering doing so, due to a failure to comply with the Behaviour Code, we will write to your parent or guardian.

Earn Your Travel Back scheme

If you've had your travel concession suspended or withdrawn for breaching the Behaviour Code, you can earn it back by volunteering in your local community.

If we withdraw your travel concession, we will write to your parent or guardian, signposting a number of organisations that offer appropriate volunteering opportunities. TfL does not pass any personal information directly to volunteering providers for the Earn Your Travel Back scheme.

Accessing your personal information

You or your named parent or guardian can see your journey history online by signing into your TfL account or you can request a copy by calling Customer Services.

For access to other personal information please see the section on Subject Access requests in Access your data.

Privacy notice

Transport for London (TfL), its subsidiaries and service providers, will use your personal information and that of the child named in this application for the purposes of customer services and administration, the provision of travel related information, customer research and fraud prevention.

The use of this Oyster photocard, in connection with National Rail products or services, will authorise TfL to share the concession holder's personal information with relevant Train Operating Companies (TOCs) so that they can use it for the purpose of fraud prevention. Any personal information will be properly safeguarded and processed in accordance with the requirements of the Data Protection Act 1998.

Relevant police services, and Local Authority Anti Social Behaviour units may provide TfL with details of any breaches of the Behaviour Code and/or criminal convictions, warnings, reprimands, or other sanctions issued in relation to offences that have been committed by the concession holder on, or in relation to, London's public transport network. Such information may be used as the basis for the withdrawal of the concession and TfL may inform the police of any decision to withdraw the concession.

In certain circumstances, TfL and relevant ToCs may also share the personal information provided in this application form with the police and other law enforcement agencies for the purposes of the prevention or detection of crime.

TfL may contact you shortly before the expiry of this travel concession, to inform you of the ticketing options available to the holder of this travel concession from that date.