Bletchleyite
Veteran Member
I wonder what the point is of the ticket seller collecting this personal data (phone number) given they don't pass it on. Personally I think that may be less GDPR compliant because they are collecting personal data they don't need or use.
In case they need to contact you about an issue regarding your booking (i.e. the actual booking process, not the train service on the day), or, if you consented, for marketing purposes.
It is a bit niche but is probably justifiable, e.g. if the card payment was charged back.