To prevent unauthorised access, maintain data security in compliance with the UK Data Protection Act 1998, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online. This site offers the highest level of security currently available (128 bit encryption) to safeguard your personal and credit card details. Click on the 'padlock' icon at the bottom-right of the booking screen for details of the Security Certificate.

Internet Explorer: Netscape:

Whilst every attempt has been made to ensure the information contained herein is accurate and complete at the time of publication, Heathrow Express Operating Company Limited ("HEX") does not warrant its accuracy or completeness. HEX reserves the right to make changes, corrections and/or improvements at any time and without notice. In addition, HEX disclaims, to the maximum extent permitted by law, any and all liability for damages incurred directly or indirectly as a result of errors, omissions or discrepancies.

Your privacy is important to us. We use the personal data you give us to process your travel booking and to send you confirmation of your travel booking by e-mail or post. We may also use the information you give us as a research tool to develop the content of the HEX or BAA plc websites, to develop our understanding of our visitors and to determine how best to serve them. We may use selected and appropriately secured third parties to assist us with this research as well as ongoing marketing. We will not send your data to any additional third parties, unless you agree to us doing so or we are compelled by law, and we will not send data to areas where an adequate data protection policy is not in place. The website collects some anonymous information about you automatically as you move through the site. This information is used to help us monitor how you and other visitors use the site, allowing us to provide an improved service throughout the site. The information collected automatically does not, however, contain anything that can identify you personally.