Approved by Directors / Management on: Terry Pitcher and Julie Roberts
Policy became operational on: 29 April 2018
Next review date: 29 April 2018 or as needed.
Crewkerne Carriers LTD know that your privacy is very important to you. When it comes to your information, we follow some straightforward principles. We aim to be clear about the data we collect and why.
All our employees who handle personal data have agreed to the terms of our Data Protection Policy (which can be found in the About Us section of our website) and have a responsibility to comply with it accordingly.
What personal data do we collect?
It is the nature of the services we provide that requires us to collect and process personal data. This will, at a minimum, include:
· Your name
· Your phone number and/or Email address
· Origin and destination addresses
· We may need to collect more personal data if it is necessary to the delivery of the service you have requested.
· If you don’t provide us with personal data, we’ll try to provide the service but it may be impossible.
(N.B. Please do not provide us with the personal data of anyone else without their permission, unless you have obtained the explicit consent from that person.)
Why we need your personal data
We will only use personal data for any purpose for which it has been specifically provided.
The reason we need personal data is to be able to carry out the services you are signing up to. Our lawful basis for processing your personal data is that we have a contractual obligation to you for the services you are registering for.
How do we use your personal data?
We limit the use of personal data to ensuring we deliver the service you have requested. Furthermore, we retain your personal data only for as long as is necessary to deliver you this service. Under certain circumstances we will retain your personal data longer if it part of an accounting record which we are obliged by law to retain for 6 years. Where this is the case, your personal data will be archived and destructed securely once legal obligation is complete.
After that, any service that is not undertaken by Crewkerne Carriers LTD, we securely destroy records your personal data after 6 months. Destruction of paper records is done securely and appropriately.
Who we share your personal data with
We shall only disclose your personal data to third parties in circumstances that are necessary for delivering the service agreed with you. For example, we will disclose your personal details to notify the collection and delivery service required
If there are attacks on our services, or other criminal activity, we may share information with the police or similar public body
How do we secure your personal data?
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
All staff are required to ensure that any paper files not in current use are stored in filing cabinets and locked at all times when offices are unoccupied. Any paper documentation containing personal data is shredded once it becomes superfluous.
Access to personal data is restricted to authorised users on a need-to-know basis. In the event of a data breach involving your personal data which presents a high risk
· We will contact you immediately.
· The GDPR requires us report certain types of data breach to the Information Commissioners Office ICO.
· In the event of a data breach where data is collect from a supplier will inform their Data Protection Officer (with in 24 hours of the data breach)
Inaccuracies and corrections
We would like to keep your personal data accurate and up to date. If you become aware of any errors, noted on our correspondence with you for example, then please let us know by phoning or emailing us.
How to contact us and exercise your rights?
Under the General Data Protection Regulation you have certain rights over your personal data that we hold:
· To receive a copy of your personal data that we hold;
· To ask us to correct any errors
· To delete it once we no longer need it.
To contact us regarding those rights, or anything else in this data privacy statement, please write or email us.