Privacy Statement

The purpose of this statement is to provide information regarding how and why U-Drive Limited (we, us, our) collect, process and store data, as well as providing the appropriate contact information should you wish to request the information we hold about you, withdraw from processing or request deletion of any data we hold about you.

Under the EU General Data Protection Regulation and UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 there are six lawful bases for processing personal data. These are detailed as:

Where you have provided your consent: for direct marketing communications in respect of our own products and services, including in respect of marketing communications sent by electronic means (e.g. email and SMS);
For the performance of a contract with you (such as a contract for the provision of goods and services) or to take steps at your request prior to entering into this contract;
To comply with legal obligations, including in relation to health and safety and environmental legislation, performing anti-money laundering checks, terrorism prevention and sanctions screening checks, complaints and investigations or litigation;
To protect your vital interests or the vital interests of another person, e.g. where you or they are seriously injured or ill; or
For our legitimate interests in:
- Management of your account (including processing payments) and our relationship with you, and communicating with you
- Operating our Websites
- Sending direct marketing in respect of our own products and services where you have not provided your consent and the marketing communication is sent by non- electronic means (e.g. post or telephone); processing orders and supplying our products and services; and
- Our internal business purposes which may include processing for the purposes of: record keeping, research, reporting and statistics, data security, to ensure the quality of our products and services, investigating and responding to queries and complaints, obtaining credit references and credit checks, providing payment performance data to credit reference agencies, changing our pricing, debt collection, fraud detection and prevention, risk management, recruitment and training of our personnel, and protecting our rights, property and safety (and that of others). You can object to processing carried out on the basis of our legitimate interests at any time by emailing [email protected].
Where we process your personal information on the basis of your legitimate interests, we will have carried out a balance of interests test, to ensure that our legitimate interests are not outweighed by any particular risk to your rights and freedoms.
Further information regarding the lawful basis for processing personal data can be found at www.ico.org.uk.
At U-Drive Limited we are committed to processing personal information about our customers in ways that comply with our legal obligations as well as being clear with our customers about what we do with their personal information. Some of the key points of U-Drive Limited’s privacy statement are:
✔ We don’t sell your data to third parties.
✔ We do make it easy for you to manage your information and you can change your communication preferences at any time.
✔ We do use data to help us provide great customer service, which includes tailoring the information we share with you to help ensure that it’s relevant, useful and timely.

This document covers information we collect about you, whether via our websites:

through our central reservations team, in our stores, our agents, our sales teams or otherwise. Please read it carefully to understand how your personal information will be held and processed.

We will be the “controller” of the personal information which you provide to us, a third party provides to us or which we collect from you. Where we provide services to another data controller organisation, U-Drive will be the data processor.

Personal information that we collect

We collect a range of personal information relating to you, which may include your:

Name;
Email address;
Telephone number;
Credit or debit card information and/or other payment information;
IP address;
Date of Birth
Postal Address
Driving Licence Number
Driving Licence Endorsements
Motor Accident Details
ID Photograph
Credit Reference Agency Score and History
Information regarding any loyalty schemes in which you are enrolled; and
Any other personal information that you choose to provide to us when you complete our online contact forms or otherwise make contact with us.

How we use your personal information

We use your personal information as follows:

To maintain our relationship with you whilst you are a customer;
To process orders and provide agreed goods and services to you;
For invoicing, processing payments, account set up and maintenance;
To communicate with you, including to respond to information requests /enquiries submitted and/or to obtain your feedback on our products and services;
For record keeping, statistical analysis and internal reporting and research purposes;
To ensure data security and to provide you with access to secure areas of our Websites; To notify you about changes to our products and services;
To decide on and notify you about price changes;
To monitor the quality of our products and services;
For logistical purposes, including to plan and log delivery routes;
To investigate any complaint you make;
To provide evidence in any dispute or anticipated dispute between you and us;
To customise various aspects of our Websites to improve your experience;
To pre-complete online forms on our Websites. For example, if you have provided an address when using one service, our Website computers may automatically fill in that information on an order form for another service;
As we may otherwise consider necessary to support the operation of our Websites;
To obtain credit references, credit checks and for debt collection, fraud detection and prevention and risk management purposes;
To monitor and/or record telephone conversations to or from you in order to offer you additional security, resolve complaints, improve our service standards and for staff training purposes; and
To protect the rights, property, and/or safety of U-Drive Limited, its personnel and others.

Vehicle tracking and Infotainment Systems

Data will be collected from Telematic devices either fitted to a vehicle after market or fitted to a vehicle as part of the manufacturing process. This data is stored within the UK/EU.

Tracking devices are used for security purposes and for the prevention and detection of crime. These devices are provided by third party suppliers who will collect the data from the vehicle and provide the required access to U-Drive Ltd. Data will be transferred using SMS packets of data.

Vehicle manufacturers may collect data through tracking devices fitted as part of the manufacturing process, though it is unlikely that the data collected post sale would identify individual hirers. However, individuals are advised to visit the manufacturers website and view their privacy policies for further information’.

Data may be shared with third parties (which may or may not identify an individual) including:

Law enforcement agencies for the detection and prevention of crime
Insurance companies
Third party agencies engaged to recover lost or stolen vehicles
Roadside recovery agencies
Parking and local enforcement agencies
Vehicle Manufacturers and Vehicle Dealers acting on behalf of Vehicle Manufacturers

This data will be collected and stored for the lifetime use of the vehicle, whilst in the possession of U-Drive Ltd, in line with our Data Retention and Deletion Policy.

The data collected from the vehicle telematic devices will not be able to identify an individual unless this is combined with other data that is held in other databases. Even under those circumstances, it is unlikely that the identity of the hirer could be established.

It is the obligation of vehicle hirers to erase any personal data input into the vehicle infotainment system before returning the vehicle to us.

The data collected will include the following:

Vehicle registration number or chassis VIN number or both
Journey data including
Start date and time of journey
End date and time of journey
Duration of journey time and distance
Speed of vehicle
Journey of vehicle, with location data along journey
Fault codes being generated by the vehicle Electronic Control Unit (ECU)
Date, time, and location of any impact
Force of impact
Location of the vehicle

Marketing

We may send you direct marketing in relation to our own products and services by phone and post, as long as this is in line with any marketing preferences that you have provided to us.

We will only send you direct marketing in relation to our own products and services by email or SMS:

Where you have consented to this; or
Where you have not objected to this, and we are marketing similar products and services to those which were the subject of a previous sale or negotiations of a sale to you.

Your agreement to the use of your personal information for direct marketing purposes is optional and if you choose not to consent, or if you object, your visit to and use of our Websites will not be affected.

You can choose to opt out of receiving direct marketing information from us at any time, through the ‘Unsubscribe’ link at the bottom of any U-Drive Limited email you receive, or by contacting the U-Drive Limited Customer Service Centre:

By mail: U-Drive Limited, Fancy Road, Poole, Dorset. BH12 4QH
By phone: 0800 980 9966
By email: [email protected]

Recruitment

If you click on the “careers” button on our Websites, you will be directed to our dedicated recruitment portal. If you choose to apply for a job that is listed on our recruitment portal, we will ask you to complete an application form and upload a C.V. and a covering letter. You can also upload supporting documentation. Before you submit these documents to us, you will be provided with a privacy notice, which provides specific information about how your personal information will be handled in connection with your application.

How we share your personal information

We may share your personal information with:

Third parties who provide the following types of services to us: marketing, market research, warehousing and logistics, software, recruitment and customer relationship management;
Third party providers and agents we appoint as our sales agents or to perform services on our behalf, who are provided with access to certain U-Drive customer account details in order to process sales or provide services on our behalf;
Third party providers in order for us to process payments that are due to us, in doing so we provide bank card details to such providers;
Third party advertising partners, such as Google in order for them to assist us in providing you with targeted adverts;
Third party loyalty schemes that you are enrolled in so that they can award your points/rewards and otherwise handle your personal information in accordance with the terms and conditions applicable to that scheme;
Third party providers in order for us to process insurance claims relating to motor vehicles and property.
Licensed credit reference agencies, debt collection agencies and lawyers when we carry out credit checks, to report on your payment performance and/or or seek to recover debts due to us;
Third party providers of databases recording individuals and companies who have been identified as a potential risk based on previous hiring experience;
Our accountants, auditors, lawyers or similar advisers when we ask them to provide us with professional advice;
Emergency services in the event that we need to report accidents or incidents or request emergency assistance;
Any Government Department, public body or other third party where we believe in good faith that the law requires this; in the interests of public health and safety; or in order to protect the rights, property, or safety of U-Drive Limited, its employees or others;
Financial services organisations, such as companies which provide hire-purchase funding and banks providing such funding. This is for the purpose of securing funding on your behalf. We may provide personal data to enable such financial services organisations to carry our necessary searches in order to enable them to make a funding decision for you and meeting their legal and regulatory requirements. These funders may share your data within their group of companies who provide services to them and so that they and any other companies in their group can look after your relationship with us and them.
Any other third parties, if authorised by you to do so;

The performance of services by our third-party service provider(s) may be subject to a separate privacy statement/policy provided to you by the relevant third party. You should read any such statement carefully.

Where we share information with organisations that provide a service to us, we will ensure that a contract is in place imposing the same data protection obligations, as are placed on us, to ensure the confidentiality and security of your personal data.

International transfers of your data

We ensure that if your personal information is transferred to any country outside the European Economic Area this is done using “model clauses” (standard contractual clauses which have been approved by the European Commission as providing adequate safeguards to enable personal data to be transferred outside the European Economic Area) or other specific legally-approved safeguards, including a finding of adequacy by the European Commission whereby data is deemed to have an adequate level of protection by the organisations in the countries to whom the data is transferred.

How long we keep your personal information

We retain your personal information for no longer than is necessary for the purposes for which the personal information is collected. When determining the relevant retention periods, we will take into account factors including:

Legal obligation(s) under applicable law to retain data for a certain period of time;
Statute of limitations under applicable law(s);
Disputes (actual and potential), and;
Guidelines issued by relevant data protection authorities.

Otherwise, we securely erase your information once this is no longer needed.

We maintain a data retention policy to cover all the personal data we retain. If you have any questions regarding the retention periods applying to the personal data we collect about you, please contact us at [email protected]

Cookies

Where you use our Websites, we will process your personal information collected by using cookies in accordance with our Cookie Policy.

For more information on the use of cookies on our Websites please go to our Cookies Policy

Links to Third Party Websites

Our Websites contain links to other Internet websites. Unless otherwise explicitly stated, we are not responsible for the privacy practices or the content of such websites, including such sites’ use of any personal information. Nevertheless, in the event you encounter any third party associated with our Websites (or who claims association with our Websites) who you feel is improperly collecting or using information about you, please contact [email protected]; we will be happy to forward your message to the third party.

If and when we sponsor promotions, or third parties sponsor promotions in conjunction with our Websites, either we or the third party will post relevant privacy information in the official rules and/or registration area for the promotion. That privacy information, to the extent (if any) it conflicts with this Privacy Statement, will govern that particular promotion.

Security

We use reasonable security methods to protect the personal information that we process, however, please note that whilst we take appropriate technical and organisational measures to safeguard the personal information that you provide to us, no transmission over the Internet can be guaranteed to be secure. Consequently, please note that we cannot guarantee the security of any personal information that you transfer to us over the Internet.

Your Rights

The following section explains your rights. Not all the various rights are absolute and each is subject to certain exceptions or qualifications.

We will grant your request only to the extent that it follows from our assessment of your request that we are allowed and required to do so under data protection laws. Nothing in this Privacy Statement is intended to provide you with rights beyond or in addition to your rights as a data subject under data protection laws.

The right to be informed - You have the right to be provided with clear, transparent and easily understandable information about how we use your personal information and your rights. This is why we’re providing you with the information in this Privacy Statement.
The right of access - You have the right to request access to the personal information we hold about you (if we’re processing it), and other certain information (similar to that provided in this Privacy Statement) about how it is used. This is so you’re aware and can check that we’re using your personal information in accordance with data protection law. We can refuse to provide information under certain circumstances, including where to do so may reveal personal information about another person or would otherwise negatively impact another person‘s rights.
The right to rectification - You can ask us to take reasonable measures to correct your personal information if it’s inaccurate or incomplete. For example, if we have the wrong date of birth or name for you.
The right to erasure - This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal information where there’s no compelling reason for us to keep using it or its use is unlawful. This is not a general right to erasure; there are exceptions, e.g. where we need to use the information in defence of a legal claim.
The right to restrict processing - You have rights to ‘block’ or suppress further use of your personal information when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your personal information, but may not use it further. We keep lists of people who have asked for further use of their personal information to be ‘blocked’ to make sure the restriction is respected in future.
The right to data portability - You have rights to obtain and reuse certain personal information for your own purposes across different organisations. This enables you to move, copy or transfer your personal information easily between our IT systems and theirs (or directly to yourself) safely and securely, without affecting its usability. This only applies to your personal information that you have provided to us that we are processing with your consent or to perform a contract which you are a party to (such as pay and compensation services), which is being processed by automated means.
The right to object - You have the right to object to certain types of processing, on grounds relating to your particular situation, at any time insofar as that processing takes place for the purposes of legitimate interests pursued by U-Drive Limited or by a third party. We will be allowed to continue to process the personal information if we can demonstrate “compelling legitimate grounds for the processing which override [your] interests, rights and freedoms” or we need this for the establishment, exercise or defence of legal claims. You have an absolute right to object to the use of your personal information for direct marketing purposes at any time.
Rights in relation to automated decision making and profiling - You have the right not to be subject to a decision based solely on automated processing (including profiling), which significantly affects you, subject to some exceptions. Where this is the case, you have the right to obtain human intervention, voice your concerns and to have the decision reviewed.

Updating this Statement

We review our privacy practices from time to time. We ask that you bookmark and periodically review this page for updates to our Privacy Statement. We reserve the right to modify this Privacy Statement at any time.

Contact us

For further information regarding these rights, about this Privacy Statement generally or to make a complaint please contact [email protected].

Please provide as much information as possible to help us identify the information you are requesting, the action you are wanting us to take and why you believe this action should be taken.

Before assessing your request, we may request additional information in order to identify you, for security reasons and to safeguard against unlawful disclosures of your data If you do not provide the requested information and, as a result we are not in a position to identify you, we may refuse to action your request.

We will generally respond to your request within one month of receipt of your request. We can extend this period by an additional two months if this is necessary taking into account the complexity and number of requests that you have submitted.

We will not charge you for such communications or actions we take, unless:

you request additional copies of your personal data undergoing processing, in which case we may charge for our reasonable administrative costs, or
you submit manifestly unfounded or excessive requests, in particular because of their repetitive character, in which case we may either: (a) charge for our reasonable administrative costs; or (b) refuse to act on the request.

If after contacting U-Drive Limited, you are still unhappy, you may also complain to the Information Commissioner, the UK supervisory authority in respect of data protection matters. If you want to contact them, you can start a live chat or call their helpline on 0303 123 1113.