GDPR Privacy Notice

How We Use and Protect Your Personal Data

Newland Express Transport Ltd is committed to handling your personal information securely, lawfully, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Personal Data We Collect

We may collect and process the following types of data as part of normal business operations:

• Contact details, including name, phone number and email address.
• Employment details, including job role, training, performance and compliance records.
• Driver and vehicle information, including licence details, tachograph data and telematics where applicable.
• CCTV and site-access information.
• Incident, accident and safety reports.
• IT system logs and security monitoring data.

2. Why We Collect Your Data

We process your information to:

• Manage employment and HR requirements.
• Ensure health and safety compliance.
• Meet transport regulatory obligations.
• Operate company systems securely.
• Prevent and investigate incidents or misconduct.
• Maintain operational efficiency and service delivery.

3. Legal Basis for Processing

We process personal data under the following lawful bases:

• Contractual necessity – to employ staff and manage payroll.
• Legal obligation – meeting health and safety, transport, and employment law requirements.
• Legitimate interests – ensuring site security and protecting staff and assets.
• Consent – only when explicitly required and requested.

4. How Your Data Is Stored and Protected

We use secure systems and follow strict technical and organisational controls, including:

• Access controls and authentication.
• Encrypted storage where appropriate.
• Restricted access to authorised personnel.
• Regular reviews and security monitoring.

5. Who We Share Data With

Your data may be shared with:

• Regulatory bodies, including DVSA, Police, insurers and HSE.
• Payroll, HR or IT service providers.
• Training and compliance partners.
• Only where necessary and lawful.

We do not sell personal data to anyone.

6. How Long We Keep Your Data

Your information is retained only for as long as necessary to meet legal, operational, or safety requirements. Retention periods follow our internal Data Retention Policy.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Request correction or deletion where appropriate.
• Object to certain types of processing.
• Request data portability.
• Raise concerns with the Information Commissioner’s Office.

8. Complaints

If you believe your data has not been handled correctly, you can raise a complaint with the ICO:

Information Commissioner’s Office (ICO)
ico.org.uk