ABOUT US:

We are champions of rail, inspired to build a greener, more sustainable future of travel. Trainline enables millions of travellers to find and book the best value tickets across carriers, fares, and journey options through our highly rated mobile app, website, and B2B partner channels.

THE ROLE

As Lead Privacy Advisor, you will play a critical role in shaping how we embed privacy into our tech stack and product development. You’ll partner with engineering, product, and marketing technology teams to advise on privacy risks, implement practical controls, and help us navigate complex regulations across the UK, EU and US.
This role has a particular focus on ad tech, consent-based flows, personalisation, ML models, and location data — so you’ll need to be confident working at the intersection of privacy, product, and technology.

WHAT YOU’LL BE DOING

• Support development of privacy strategy for new ad tech, monetisation and personalisation initiatives.
• Advise on implementation of consent-based flows, including Google Consent Mode, Privacy Sandbox, and data clean rooms.
• Collaborate cross-functionally with engineering, architecture, marketing tech, and product to ensure privacy is baked into new cookies, tags and SDK deployments.
• Lead privacy assessments like DPIAs and risk reviews, particularly for high-risk and AI/ML-driven processing.
• Support compliance with regulatory changes and app store requirements (e.g. Apple and Google privacy updates).
• Drive training and awareness across teams on privacy risks in long-term value (LTV) tracking and data processing.
• Contribute to strategic initiatives, supporting the DPO and senior leaders on legal updates and privacy-by-design approaches.
• Working across a wide variety of projects, including:
• Ad tech and monetisation enhancements
• AI and machine learning models for customer experience and personalisation
• Location data processing for travel planning and live updates
• Mobile app updates tied to platform privacy policies (e.g. App Store, Play Store)
• Cross-border data flow assessments for global expansion
• Tracking infrastructure including cookie banners, tag management, and SDK governance