Introduction

Elite Drivers Hertfordshire Ltd. (“We”) are committed to protecting and respecting your privacy. This Privacy Policy explains how we handle the personal information created when accessing and using our services, how we use any personal information we collect about you and why, what we do with the information and how we share it. Please read the following carefully to understand our practices regarding your personal data. By providing personal data to us, you are accepting and consenting to the practices described in this policy.

Information we collect

When accessing our services, we collect information to enable us to process your orders and improve our service. Information such as name, address, phone number and email address are provided by you when completing account setup process, registering with us or booking a trip. We will also collect information such as IP addresses, domain name and referring URL, time of visit, pages visited, and any searches performed when you visit our website. We may also receive and share information about you with third parties we are working with such as external accountants and IT support providers.

Internal record keeping

We may use the information to improve our products and services.
We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.
You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please write to:

Elite Divers Hertfordshire Ltd
1 Purdom Rd
Welwyn Garden City
AL7 4FH
UK

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

Cookies

Our website uses Cookies to ensure we provide a good experience when visiting our site. Our policy regarding Cookies can be found here.

Security

Elite Drivers Hertfordshire Ltd are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. Our websites use SSL which provides encryption, authentication and message integrity. Access to stored data is password protected and access to passwords is limited. We work with our authorising banks and business partners to ensure the security of your credit card information by aligning with PCI requirements. We store all personal data within the U.K. only. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website, any transmission is at your own risk.

Policy updates

Any changes or updates to our Privacy Policy will be posted on this page.

GDPR statement

The ‘General Data Protection Regulation’ (GDPR) is a piece of European data protection legislation designed to replace and strengthen the ‘1995 EU Data Protection Directive’ as well as unify these standards across the European Union.
The GDPR became law on 25th May, 2018 and applies to any company who stores or processes the personal data of an EU citizen.
This regulation aims to give consumers far greater control over their personal data. It does this by increasing fines for companies that do not take the security of their customers data seriously, up to 20 million euros or 4% of turnover, as well as increasing consumers rights to access the data companies hold on them.

How this affects you?

When you use our service, we store your personal data on our servers. Doing so allows us to operate our website, issue you documentation for your journey and ensure your travel runs smoothly. This classes us, Elite Drivers Hertfordshire Ltd. as a ‘data controller’ and a ‘data processor’, you as a customer or passenger of Elite Drivers Hertfordshire Ltd. are a ‘data subject’, although you may also be acting as a ‘data controller’ especially if you are booking on behalf of someone else. As a data controller, you may need to take steps yourself in order to comply with GDPR requirements.

Your Responsibilities

1. As a data controller, you should ensure you’re compliant with the GDPR. We recommend you contact a legal professional to find out how the GDPR legislation will affect your organisation. The ICO recommends taking these 12 steps.
2. Information you hold: You should document what personal data you hold, where it came from and who you share it with. You may need to organise an information audit.
   Awareness: You should make sure that decision makers and key people in your organisation are aware that the law is changing to the GDPR. They need to appreciate the impact this is likely to have.
3. Individuals’ rights: You should check your procedures to ensure they cover all the rights individuals have, including how you would delete personal data or provide data electronically and in a commonly used format.
4. Communicating privacy information: You should review your current privacy notices and put a plan in place for making any necessary changes in time for GDPR implementation.
   Lawful basis for processing personal data: You should identify the lawful basis for your processing activity in the GDPR, document it and update your privacy notice to explain it.
5. Subject access requests: You should update your procedures and plan how you will handle requests within the new timescales and provide any additional information.
   Children: You should start thinking now about whether you need to put systems in place to verify individuals’ ages and to obtain parental or guardian consent for any data processing activity.
6. Consent: You should review how you seek, record and manage consent and whether you need to make any changes. Refresh existing consents now if they don’t meet the GDPR standard.
7. Data breaches: You should make sure you have the right procedures in place to detect, report and investigate a personal data breach.
8. Data Protection by Design and Data Protection Impact Assessments: You should familiarise yourself now with the ICO’s code of practice on Privacy Impact Assessments as well as the latest guidance from the Article 29 Working Party, and work out how and when to implement them in your organisation.
9. Data Protection Officers: You should designate someone to take responsibility for data protection compliance and assess where this role will sit within your organisation’s structure and governance arrangements. You should consider whether you are required to formally designate a Data Protection Officer.
10. International: If your organisation operates in more than one EU member state (ie you carry out cross-border processing), you should determine your lead data protection supervisory authority. Article 29 Working Party guidelines will help you do this.

What We’re Doing to be GDPR Compliant

Elite Drivers Hertfordshire Ltd. takes data security seriously. We take many steps to protect your data, these include:
• Enforcing ‘HTTPS’ connections to our web servers.
• Running regular security scans on our network.
• Regular scheduled scans of all PC’s with heavy duty virus protection software.
• Keeping an inventory of all the personal data we store and ensuring we only collect data that is required to carry out the service.
• Maintaining a ‘Data Flow Map’ which lists where we store our data including any third parties that are involved.
• Regularly reviewing our Data Protection Policies and ensuring appropriate training is provided to employees.
• Training staff on the ‘Data Breach Protocol’ to ensure everyone knows what to do in the unlikely event of a data breach.

Legal Limitations

The GDPR has expanded consumers right of access to their data, as well as the removal/deletion of records. There are however some legal limitations placed on us that could limit our ability to comply with your request. These include our licensing authority’s requirement that we store 1 year of full journey records or our obligation as a limited company to store accounting (transaction) records for 6 years from the end of the last company financial year they relate to.
Elite Drivers Hertfordshire Ltd. is committed to being fully compliant with this regulation.
If you have any questions please contact us emailing office@elitedrivershertfordfshire.co.uk or writing to:

Elite Divers Hertfordshire Ltd
1 Purdom Rd
Welwyn Garden City
AL7 4FH
UK

COOKIE POLICY

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use different kinds of cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. You can block cookies by activating the setting on your browser that allows you to refuse the setting of some or all of the cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.