Data Protection Policy
Car or Van Specialist Vehicle Hire Ltd
1. Policy Statement
Car or Van Specialist Vehicle Hire Ltd is committed to protecting the privacy, confidentiality and security of all personal data entrusted to us by our customers, suppliers, employees and business partners.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all other applicable data protection legislation. We are committed to ensuring that personal information is handled lawfully, fairly, transparently and securely at all times.
2. Scope
This policy applies to all employees, directors, contractors, temporary staff and any third parties who process personal data on behalf of Car or Van Specialist Vehicle Hire Ltd.
3. Our Data Protection Principles
We will ensure that all personal data is:
- Processed lawfully, fairly and transparently.
- Collected only for specified, explicit and legitimate purposes.
- Adequate, relevant and limited to what is necessary.
- Accurate and kept up to date.
- Retained only for as long as necessary.
- Protected against unauthorised or unlawful processing, accidental loss, destruction or damage.
- Processed in accordance with the rights of individuals.
4. Information We May Collect
Depending on the services we provide, we may collect:
- Names and contact details.
- Company information.
- Driver licence information.
- Vehicle hire and booking information.
- Insurance information.
- Payment and billing information.
- CCTV and vehicle telematics data where applicable.
- Email correspondence and telephone records.
- Website enquiries and marketing preferences.
We only collect information that is necessary for the services we provide.
5. How We Use Personal Information
Personal information may be processed for purposes including:
- Providing vehicle hire services.
- Managing customer accounts.
- Verifying identity and driving entitlement.
- Processing payments and invoices.
- Managing vehicle collections and deliveries.
- Handling insurance claims and accident management.
- Complying with legal and regulatory obligations.
- Preventing fraud and protecting company assets.
- Improving our services and customer experience.
We will only process personal data where we have a lawful basis for doing so.
6. Sharing Information
We may share personal information where necessary with:
- Insurance providers.
- Accident management companies.
- Vehicle manufacturers or authorised repairers.
- Finance providers.
- Recovery and roadside assistance providers.
- Professional advisers.
- Regulatory authorities and law enforcement agencies where legally required.
- Approved service providers who process information on our behalf.
We do not sell personal information to third parties.
7. Data Security
We implement appropriate technical and organisational measures to protect personal information, including:
- Secure IT systems and password protection.
- Controlled access to personal data.
- Staff confidentiality obligations.
- Secure storage of physical records.
- Regular software updates and security monitoring.
- Secure disposal of confidential information.
8. Data Retention
Personal information will only be retained for as long as necessary to fulfil the purpose for which it was collected or to comply with legal, regulatory, accounting or insurance requirements.
Once no longer required, information will be securely deleted or destroyed.
9. Individual Rights
Individuals have rights under UK GDPR, including the right to:
- Access their personal data.
- Request correction of inaccurate information.
- Request deletion of personal data where applicable.
- Restrict processing.
- Object to certain processing activities.
- Request data portability where applicable.
- Withdraw consent where processing relies upon consent.
Requests will be handled within the timescales required by law.
10. Data Breaches
Any suspected or actual data breach must be reported immediately to management.
All breaches will be investigated promptly, appropriate action taken, and where required, reported to the Information Commissioner's Office (ICO) and affected individuals in accordance with legal requirements.
11. Staff Responsibilities
All staff are responsible for:
- Protecting personal information.
- Following this policy and company procedures.
- Keeping information confidential.
- Reporting suspected data breaches immediately.
- Completing any required data protection training.
Failure to comply with this policy may result in disciplinary action.
12. Contact
Any questions regarding this policy or the handling of personal data should be directed to:
Car or Van Specialist Vehicle Hire Ltd
Morbec Farm
Southend Arterial Road
Wickford
Essex SS12 9JF
Email: hire@carorvan.co.uk
Telephone: 01268 411334
13. Policy Review
This policy will be reviewed annually, or sooner if there are changes to legislation, business operations or regulatory guidance.