We understand that you care about your personal data and how it is used, and we want you to trust that MDM Vehicle Deliveries Limited (MDM) uses your personal data lawfully. This Privacy Notice will help you understand what personal data we collect, why we collect it and what we do with it.
We typically act as data controllers for the purposes of the UK GDPR and Data Protection Act 2018 and are responsible for the data you provide to us directly and for the manner in which it is processed. We also act as data processors when working on behalf of our clients.
Who are we?
MDM Vehicle Deliveries Limited (MDM) is a UK-based professional transport solution to the automotive industry, delivering a national logistics service. We are registered in the UK, Company Number 10633633.
Registered Address: Unit 4-5 Greenfields Business Park, Wheatfield Way, Hinckley, Leicestershire, United Kingdom, LE10 1BB.
Our Privacy Officer is Lesley Parratt. You can contact us at lesley@mdmvehicles.co.uk or call 01455 632830. MDM Vehicle Deliveries Limited is registered as a Data Controller with the Information Commissioner's Office, Certificate Number ZB010940.
What personal data is being collected?
Personal data relates to any information about an individual from which that person can be identified. We will collect, store and use the following categories of personal information about you:
- Full name and title
- Contact information (home or correspondence address, email address, telephone numbers)
- Date of birth
- National Insurance number
- Financial details (e.g. bank account details)
- Identification documents (e.g. copy passport or driving licence)
- Proof of address documents (e.g. copy utility bills or bank statements)
- Medical data, if necessary
How is your personal data collected?
We collect the personal information directly from you, or in some cases from a third party, using the following methods:
- Through our website enquiry form
- When you contact us by email, telephone, post, text message, social media or other digital methods
- In person, e.g. at trade shows
How will we use your data?
We collect, process and disclose your personal data to carry out our obligations under any agreement between us (usually the provision of our services), to process payments and handle enquiries, requests and complaints, to develop and improve our services and communications, to manage newsletter registrations, to authenticate identity, for internal training and quality assurance, and to understand and assess customer needs. When we collect and use your personal data for these or other purposes, we will inform you before or at the time of collection.
Our legal bases for processing
Contractual obligations
To fulfil our contractual obligations to you we will need to use your personal data, for example to deliver vehicles to your address.
Legal or regulatory obligation
We must comply with statutory provisions when providing our services, such as obligations relating to HMRC and fraud/crime prevention.
Legitimate interests
The interest of our business in conducting and managing it to give you the best and most secure service, for example sending you information about a new service.
Consent
We will request your consent where required, for example to receive marketing updates or our newsletter. You may withdraw consent at any time by contacting us to update your preferences.
Vital interest
We may need to protect the vital interests of you or another person; for example we may need medical data for the safety of our drivers.
Who will data be shared with?
We share your personal data with selected third-party service providers that perform functions on our behalf, such as companies that host or operate our website, provide IT and in-house management systems, process payments and provide insurance services. We may also disclose personal data to third parties to comply with a legal obligation, at the request of governmental authorities, to enforce our policies, to detect and protect against fraud or security vulnerabilities, to respond to an emergency, or to protect the rights, property and safety of others.
How long do we keep your personal data?
We only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, taking into account our business requirements, statutory or legal obligations (for example 6 years +1 for HMRC), the original purpose, the lawful grounds for processing and the categories of data held. Full details are available in our Data Retention Schedule.
International transfers of data
We may transfer data to countries or international organisations outside the United Kingdom, for example to clients or third parties who provide support services. Where information is transferred, it may be to a country with a UK adequacy decision, or under lawful model contracts (Standard Contractual Clauses).
Data security and confidentiality
We use appropriate technical and organisational measures to keep personal data secure against unauthorised or unlawful processing and against accidental loss, destruction or damage. Our employees are trained in data protection, access is restricted to relevant staff, hard copies are securely stored, data is periodically reviewed and securely deleted, and internal systems are regularly tested.
Your rights as a data subject
- Right of access: request a copy of the information we hold about you
- Right of rectification: correct inaccurate or incomplete data
- Right to be forgotten: in certain circumstances, ask for your data to be erased
- Right to restriction of processing: restrict processing where certain conditions apply
- Right of portability: have your data transferred to another organisation
- Right to object: object to certain types of processing such as direct marketing
- Right to object to automated processing, including profiling
Further information
If you have any questions or would like more information, please contact our Privacy Officer at lesley@mdmvehicles.co.uk. Alternatively, you can make a complaint to the Information Commissioner's Office: report a concern online at ico.org.uk/concerns, call 0303 123 1113, or write to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.