Introduction
Grange Transport Ltd (“GT”, “Us” or “We”) is committed to protecting and respecting your privacy. This privacy notice sets out how GT collects any personal data from you, or that you provide to us will be processed by us.
The General Data Protection Regulation (GDPR) is a regulation which replaces the data protection regulation. GDPR aims to harmonise data protection legislation across the EU member states, enhancing privacy rights for individuals and providing a strict framework within which commercial organisations can legally operate.
Please review the following information carefully to understand our views and practices concerning your personal data and how it will be handled. If you have any questions regarding this Privacy Policy or how any group company uses your information, you may contact our Data Protection Officer (DPO), David Ansell at david.ansell@grangetransport.com
Principles:
- Lawfulness, Fairness, and Transparency: We process personal data in a lawful, fair, and transparent manner. We ensure that individuals are aware of how their data is being used and that it is handled according to legal requirements.
- Purpose Limitation: Personal data is collected for specific, explicit, and legitimate purposes. It will not be further processed in a way that is incompatible with those purposes without the individual’s consent.
- Data Minimisation: We collect only the personal data that is necessary for the relevant purposes. This ensures that we handle only the information needed to fulfil our services or legal obligations.
- Accuracy: We ensure that personal data is accurate and kept up to date. Any inaccuracies are corrected or deleted as soon as possible by us when discovered.
- Storage Limitation: Both employee and customer personal data are stored for a period of two years unless otherwise requested. After this period, the data will be securely deleted or anonymised unless retention is required to meet legal, accounting, or reporting obligations.
- Integrity and Confidentiality: We ensure appropriate security of personal data to protect against unauthorised or unlawful processing, accidental loss, destruction, or damage. This includes implementing technical and organisational measures to safeguard data.
- Accountability: We take responsibility for ensuring that these principles are adhered to throughout our operations. This includes maintaining appropriate documentation and records of data processing activities to demonstrate compliance with GDPR.
Who we are and what we do:
At Grange Transport, we provide a range of transportation for a plethora of events and organisations. We are committed to offering safe, reliable, and professional services to both our customers, clients and employees.
As part of our operation, we collect and process personal data to ensure we can deliver our services effectively. This includes, but is not limited to, managing bookings, coordinating transport logistics, and complying with legal obligations. We are committed to safeguarding the privacy of all our customers, employees, and partners in line with the General Data Protection Regulation (GDPR).
How do we obtain your personal information:
We may collect information about you when you either complete forms on our website and or communicating with us via phone or email. In addition to the information, you provide when subscribing to our services, interacting with our social media platforms or completing and submitting testimonials and reviews. The information you submit or provide to us, or we collect about you may include:
- Information within your CV or job application being your name, address, email address, and phone number.
- Information contained within any documents provided by yourself for our identification verification process such as your passport or driving licence.
- Financial details, compliance records, and references confirming your qualifications, experience, and legal right to work in the United Kingdom.
- Details you share with us when entering a contract with us.
Why do we hold your personal data and how do we use it?
At Grange Transport, we collect and hold personal data to provide you with our transport and employment services efficiently and in compliance with legal and regulatory requirements.
As one of our customers, your personal data helps us manage bookings, coordinate logistics, process payments, and communicate with you effectively. Additionally, we use this information to maintain our records, meet contractual obligations, and enhance our services.
From a candidate or employee perspective, we collect and process your personal data to facilitate recruitment, onboarding, and ongoing employment management. This includes verifying qualifications, managing payroll, and ensuring compliance with employment laws. Your information also helps us communicate important updates regarding your role and provides support for your professional development within the company.
We handle your data with the utmost care, using it only for the purposes for which it was collected, including improving our services, ensuring your safety, and fulfilling any legal responsibilities. Your privacy is important to us, and we are committed to keeping your personal information secure and transparent about how we use it.
What are the legal obligations for processing your personal data?
The legal grounds for processing personal data under the General Data Protection Regulation (GDPR) include the following six bases:
- Consent: In some cases, we may obtain your explicit consent to process your personal data for specific purposes, such as subscribing to newsletters or participating in surveys. Your consent is always informed and voluntary, and you have the right to withdraw it at any time.
- Contractual Necessity: We process your personal data when it is necessary to fulfil our obligations under a contract. For example, if you are a candidate or employee, we require your information to manage your application, employment, or service agreements effectively.
- Legal Obligation: We may process your personal data to comply with legal obligations that apply to us as an employer. This includes fulfilling our responsibilities related to tax, employment law, and health and safety regulations.
- Legitimate Interests: We process your personal data based on our legitimate interests or those of third parties, provided these interests do not override your rights and freedoms. This could include using your information to improve our recruitment processes or enhance employee benefits.
- Vital Interests: In emergency situations, we may process your personal data to protect your vital interests or those of another individual. For example, we might need to access your medical information in the case of a health emergency.
Who Do We Share Your Personal Data With?
At Grange Transport, we value your privacy and are committed to protecting your personal data. We do not share your personal information with anyone outside of our organisation. Your data is used solely for the purposes outlined in this privacy policy and is only accessible to authorised personnel within our company who require it to perform their duties.
We maintain strict internal controls and procedures to ensure that your personal information remains confidential and secure. If there are ever any changes to our data-sharing practices, we will update this policy accordingly and notify you as required.
Where Do We Store Your Personal Data?
At Grange Transport, we take the security of your personal data seriously. Your information is stored on our secure internal OneDrive system, which is designed to protect your data from unauthorised access. Access to this system is restricted to authorised personnel only, ensuring that your personal information is handled safely and confidentially.
We implement robust security measures to safeguard your data, including encryption and regular audits, to prevent data breaches and unauthorised disclosures. If there are any changes to our data storage practices, we will update this policy and inform you accordingly.
How Long Will We Store Your Personal Data?
At Grange Transport, we are committed to retaining your personal data only for as long as necessary to fulfil the purposes for which it was collected. Our data retention policies are as follows:
- As an employee: When either the employee or employer terminates the employment contract, we will store and archive your personal data for up to two years, unless you request otherwise. This allows us to comply with legal obligations and address any post-employment matters that may arise.
- As a customer: We collect and securely store your personal details for a period of two years, regardless of whether you use our services. During this time, we may contact you for promotional or marketing purposes, ensuring that you are informed about what we offer and any relevant updates.
After these retention periods, unless otherwise requested earlier, we will securely delete or anonymise your personal data to protect your privacy.
Your Rights Regarding Your Personal Data:
As an employee or customer of Grange Transport, you have specific rights concerning your personal data under the General Data Protection Regulation. These rights include the ability to access your data, request corrections for any inaccuracies, and ask for deletion when your data is no longer necessary.
Additionally, you have the right to object to processing based on legitimate interests or for direct marketing purposes. If you have provided consent for data processing, you can withdraw that consent at any time without affecting the legality of previous processing.
To exercise any of these rights, please contact us using the details provided in this privacy policy.
Our website and social media channels may contain links to external websites for advertisers and affiliate companies. Please be aware that these websites have their own privacy policies, and Grange Transport is not responsible for or liable for their content or practices. Before submitting any personal information on these external sites, we recommend reviewing their privacy policies to ensure you understand how your data will be handled.
GDPR Provides you with the following rights:
- Right to access: Individuals can access their personal data
- Right to be informed: Individuals are informed about how and why their data is used
- Right to rectification: Individuals can have inaccurate or incomplete personal data corrected or completed
- Right to erasure: Individuals can have their personal data deleted in certain circumstances
- Right to restriction: Individuals can restrict the use of their personal data in certain circumstances
- Right to data portability: Individuals can obtain and reuse their personal data for their own purposes across different services
- Right to object: Individuals can object to the use of their personal information in certain circumstances
- Right not to be subject to automated processing: Individuals cannot be subject to a decision based solely on automated processing
Individuals can also lodge a complaint with the Data Protection Commission if they believe their personal data is being processed in a way that is contrary to the GDPR.
If you would like to contact Grange Transport to exercise any of your rights, you can write to us via the following address: Grange Transport Ltd, 10 High Street Place, Wellingborough, England, NN8 4HP. Or you can contact our DPO, David Ansell at david.ansell@grangetransport.com.
Subject Access to Information
At Grange Transport, we recognise your right to access the personal data we hold about you under the General Data Protection Regulation. You have the right to request a copy of your personal information and to be informed about how we process it.
To make a subject access request, please submit your request in writing, providing sufficient detail to help us identify the information you need. This may include your name, contact details, and any relevant information related to your request.
Upon receiving your request, we will respond within a timely manner but cannot outline any specific time frames. If your request is complex or if we receive multiple requests from you, this period may be extended. In such cases, we will inform you of the extension and the reasons for it.
We may need to verify your identity before processing your request to ensure the security of your personal information. If we are unable to fulfil your request, we will also provide a clear explanation of the reasons.
You have the right to request access to the personal data we hold about you. In certain circumstances, such as when the request is excessive or repetitive, we may charge a reasonable fee to cover the administrative costs of processing your request. If a fee is applicable, we will inform you in advance and provide a breakdown of the charges before proceeding. Additionally, a fee may be charged for any extra copies of the information requested.
Cookies
Grange Transport uses cookies to improve your experience on our website and to understand how you interact with our content. Cookies are small text files stored on your device that help us recognise repeat visitors and gather information about website traffic and user behaviour.
We use the following types of cookies:
- Essential Cookies: These are necessary for the basic functionality of our website, such as maintaining your session or enabling certain features. These cookies cannot be disabled.
- Performance and Analytics Cookies: These cookies help us monitor website performance and track user behaviour to improve the website’s functionality. They allow us to understand how users navigate the site and what content is most popular.
- Marketing Cookies: These cookies may be used to deliver relevant advertisements to you and measure the effectiveness of our marketing efforts. They help us tailor our communication based on your preferences.
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features.
Changes to our Policy notice:
We may update this privacy policy from time to time, and any changes will be communicated through our website or via direct notification.
Contact:
If you have any questions, comments or queries regarding our Privacy Policy, you can reach out to our DPO via david.ansell@grangetransport.com, or send any general enquiries to enquiries@grangetransport.com