Privacy Policy
1. Who We Are
NACU TRANS LTD is the data controller for the personal data we collect. We are registered in England and Wales under company number 17474359. If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at [email protected] or by telephone on 07385557728.
2. What Personal Data We Collect
We may collect and process the following categories of personal data: (a) Identity data — your full name. (b) Contact data — your telephone number, email address, and postal address where provided. (c) Vehicle data — your vehicle registration number, make, model, and condition. (d) Location data — the pickup location and destination address you provide when requesting a service. (e) Transaction data — details of services you have requested and payments made. (f) Communications data — records of correspondence between you and us, including emails, telephone call logs, and contact form submissions. (g) Technical data — IP address, browser type and version, time zone, and other technical information collected automatically when you visit our website. (h) Usage data — information about how you use our website, including pages visited and links clicked.
3. How We Collect Your Personal Data
We collect personal data in the following ways: (a) Directly from you — when you contact us by telephone, email, or via our website contact form to request a service or make an enquiry. (b) Automatically — when you visit our website, we may collect technical and usage data through cookies and similar technologies. Please see our Cookie section below for more information. (c) From third parties — in limited circumstances, we may receive data from third parties, for example where a third party arranges recovery on your behalf with your consent.
4. How We Use Your Personal Data
We use your personal data for the following purposes and on the following legal bases under UK GDPR: (a) To provide and manage the services you have requested — legal basis: performance of a contract with you (Article 6(1)(b)). (b) To process payment for services — legal basis: performance of a contract (Article 6(1)(b)). (c) To respond to your enquiries and complaints — legal basis: performance of a contract and our legitimate interests in managing our business (Article 6(1)(b) and (f)). (d) To comply with our legal and regulatory obligations, including tax and accounting requirements — legal basis: compliance with a legal obligation (Article 6(1)(c)). (e) To send you service-related communications, such as booking confirmations — legal basis: performance of a contract (Article 6(1)(b)). (f) To send you marketing communications where you have opted in — legal basis: your consent (Article 6(1)(a)). You may withdraw consent at any time by contacting us. (g) To improve our website and services — legal basis: our legitimate interests in developing and improving our business (Article 6(1)(f)). (h) To prevent fraud and ensure the security of our business — legal basis: our legitimate interests (Article 6(1)(f)).
5. Who We Share Your Data With
We do not sell your personal data. We may share your personal data with: (a) Subcontracted recovery operators — where we engage a third-party operator to fulfil your service request, we will share the minimum necessary data (name, contact number, vehicle details, and location) with that operator. (b) Payment processors — to process card payments securely. (c) IT and website service providers — who host and maintain our website and systems, acting as data processors under our instruction. (d) Professional advisers — including accountants, lawyers, and insurers, where necessary. (e) Law enforcement and regulatory authorities — where we are required to do so by law, court order, or to protect the rights, property, or safety of our business, customers, or others. All third parties with whom we share personal data are required to handle it securely and in accordance with applicable data protection law.
6. International Transfers
We do not routinely transfer your personal data outside the United Kingdom. Where any transfer outside the UK is necessary, we will ensure it is protected by appropriate safeguards in accordance with UK GDPR, such as standard contractual clauses approved by the Information Commissioner's Office.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. As a general guide: (a) Customer and transaction records are retained for 6 years following the end of the relevant tax year, in accordance with HMRC requirements. (b) Contact form enquiries and correspondence are retained for up to 2 years unless a longer period is required. (c) Website technical and usage data is retained for up to 12 months. After the applicable retention period, your data will be securely deleted or anonymised.
8. Cookies
Our website may use cookies and similar tracking technologies to improve your browsing experience and analyse website traffic. Cookies are small text files placed on your device. We use: (a) Strictly necessary cookies — essential for the website to function and cannot be switched off. (b) Analytics cookies — to help us understand how visitors use our website (for example, pages visited and time spent). These are only set with your consent. You can control cookies through your browser settings. Refusing non-essential cookies will not affect your ability to use our website. For more information about cookies, visit www.allaboutcookies.org.
9. Your Rights Under UK GDPR
Under UK GDPR, you have the following rights in relation to your personal data: (a) Right of access — you have the right to request a copy of the personal data we hold about you (a Subject Access Request). (b) Right to rectification — you have the right to request that we correct any inaccurate or incomplete personal data. (c) Right to erasure — you have the right to request that we delete your personal data in certain circumstances (the 'right to be forgotten'). (d) Right to restriction of processing — you have the right to request that we restrict the processing of your personal data in certain circumstances. (e) Right to data portability — you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where processing is based on consent or contract and carried out by automated means. (f) Right to object — you have the right to object to processing based on our legitimate interests, including for direct marketing purposes. (g) Rights related to automated decision-making — you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not currently carry out such processing. To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. We may need to verify your identity before processing your request. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive.
10. Right to Complain
If you are unhappy with how we have handled your personal data, please contact us in the first instance at [email protected] so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: Website: www.ico.org.uk | Telephone: 0303 123 1113 | Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
11. Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These include secure data storage, access controls, and staff awareness. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to read their privacy policies before providing any personal data to them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on our website. Where changes are material, we will provide reasonable notice. We encourage you to review this Policy periodically.
14. Governing Law
This Privacy Policy is governed by the laws of England and Wales. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.
Contact Us About Your Data
For any data protection queries or to exercise your rights, contact us at [email protected] or call 07385557728.