John Paul O’Leary T/A trueFleet ("We") are committed to protecting and respecting your privacy.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
The rules on processing of personal data are set out in the General Data Protection Regulation (the “GDPR”).
Data controller - A controller determines the purposes and means of processing personal data.
Data processor - A processor is responsible for processing personal data on behalf of a controller.
Data subject – Natural person
Categories of data: Personal data and special categories of personal data
Personal data - The GDPR applies to ‘personal data’ meaning any information relating to a person who can be directly or indirectly identified by reference to an identifier. For example, name, passport number, home address or private email address. Online identifiers include IP addresses and cookies.
Special categories personal data - The GDPR refers to sensitive personal data as ‘special categories of personal data’. The special categories specifically include genetic data, and biometric data where processed to uniquely identify an individual. Other examples include racial and ethnic origin, sexual orientation, health data, trade union membership, political opinions, religious or philosophical beliefs.
Processing - means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Third party - means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
2. Who are we?
John Paul O’Leary T/A trueFleet is the data controller. This means we decide how your personal data is processed and for what purposes. Our contact details are: 01484 866218 and our address is: trueFleet, 50 Whinmoor Drive, Clayton West, Huddersfield, HD8 9QA.
3. The purpose of processing your personal data
We will only process information that is necessary for the purpose for which it has been collected. The legal basis of processing will vary depending the type of service you have requested from us. Please find some examples of our processing activities listed below:
Our "legitimate interests" as referred to in this document include our legitimate business purposes and commercial interests in operating our business in a customer-focused, efficient and sustainable manner, in accordance with all applicable legal and regulatory requirements.
4. The categories of personal data
With reference to the categories of personal data described in the definitions section, we process the following categories of your data:
5. Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with third parties who fulfil business activities for us. We do not sell your information to third parties.
In these scenarios, we will only share the information that is necessary for the third party to perform the processing activity it was provided for, such as;
Some of these third parties may also be considered a data controller in respect of holding your personal data. In these cases, we will provide you with the privacy statements of those parties.
6. How long do we keep your personal data?
We will not hold your personal information for any longer than is reasonably necessary. If you are a customer or have a business relationship with us, we will hold your personal information for a longer period than if we have obtained your details in connection with a prospective relationship. In any event, the retention period will be the statutory retention period unless there is a further legal or regulatory requirement to do so.
As a customer, we will retain your information in paper and electronic formats for a period of five years after your finance agreement has ended. This is due to governing bodies such as HMRC, Financial Conduct Authority etc. that may require us to hold some of your information for audit purposes.
We will destroy all your information (paper and electronic formats) in a secure manner.
7. Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
8. Transfer of Data Abroad
We do not transfer personal data outside the EEA.
9. Automated Decision Making
We do not use any form of automated decision making in our business.
10. Further processing
If we wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.
12. How to make a complaint
To exercise all relevant rights, queries or complaints please in the first instance contact our Data Protection Officer on 01484 866218.
If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.