Data Controllers and those responsible for Data Protection
A data controller is an organisation that collects and uses personal data and has responsibility for how the personal data is used and managed.
A nominated person is the person in an organisation who has responsibility for monitoring compliance with the law and for ensuring that personal data is protected within an organisation.
CollectPro is a trading name of The Collect Group Limited. The Collect Group Limited provides a delivery service to our Clients and is the data controller for the personal data provided by our Clients. The Collect Group Limited is registered in England, number: 08031231. Registered Office: Synergy House, Lawson Street, North Shields, NE29 6TG. The Collect Group Limited’s website is www.collectgroup.co.uk
In the context of this privacy notice, when we use the term ‘we’, it means The Collect Group Limited.
The person Responsible for Data Protection for The Collect Group Limited can be contacted on
data.protection@collectgroup.co.uk
We use your personal data to provide our services to our clients and to you.
We use your personal data to provide our services to you and our clients in the following ways:
We will collect your personal data directly from our Clients when they request our delivery services, when they change any of your details (such as your name or address) or from you directly during the delivery service if you change any of your details to arrange re-delivery or similar. We require our Clients to provide your personal data in order to perform our delivery service to that Client and, if you do not provide the personal data we request, we will be unable to fulfil this service.
Some of our vehicles are fitted with recording equipment as well as internal driver and forward-facing cameras.
We need to process your personal data for a number of different reasons and these are our legal bases for processing. We also need to keep your personal data for as long as is necessary for us to operate our business and to comply with legal and regulatory obligations.
We rely on one or more of the following legal bases for processing personal data:
To fulfil our legitimate interests or the legitimate interests of a third party
When we process personal data to fulfil our legitimate interests we will use it in a way in which you would reasonably expect and which will have a minimal privacy impact. When we or third parties are relying on legitimate interests we will balance our interests against your interests and the privacy impact of the processing on you and we will process your personal data responsibly.
Examples of our legitimate interests are: providing our service, fraud prevention, preventing and investigating crime and indicating possible criminal acts as well as ensuring our IT security.
To comply with legal obligations to which our business is subject
We have to comply with relevant law and regulation in order to provide our services and we will need to process your personal data in order to comply with these legal obligations.
We will keep your personal data for the purposes set out in this privacy notice and only for as long as any legal basis continues to apply. Below is a non-exhaustive list of some of the reasons we need to retain your personal data:
Compliance with the requirements of Government Departments investigating crime or fraud.
Ensuring we have relevant information in the event of any queries or complaints.
Being able to identify if you have received a parcel in the event of an investigation.
To assist with the establishment, exercise or defence of legal claims.
The length of time we need to keep the personal data will vary depending on the nature of the personal data and the reason we are obliged to hold it. We will apply appropriate risk based measures to protect your personal data which may include pseudonymising or anonymising the personal data. If personal data is pseudonymised, this means it is de-identified so you are no longer identifiable, but we can re-identify you if we have a requirement to do so. If personal data is anonymised, it is de-identified, but can never be re-identified in the future.
Transferring personal data to other organisations needs to take place with appropriate safeguards and you can be assured that we will only share the personal data that is needed for these organisations to be able to provide the right service to our Clients, you or to support us in doing so.
We may transfer your personal data to the following third parties:
The originating Company who requested your delivery
Technology service providers – our partners who provide IT and website services.
Customer service providers – our partners who work with us to administer your delivery and provide you with any help you may need.
Telephony providers – our partners who provide telephone services and functionality.
Third party delivery companies – our Third Party and/or Self-Employed couriers and parcel firms who may deliver your goods or services and manage any returns on our behalf.
Regulators and other governmental agencies or law enforcement agencies.
Organisations who may be interested in purchasing our business or organisations who we may be interested in purchasing – we may sell parts of our business or acquire other businesses and your personal data may be shared with such third parties as part of this process.
We will only transfer your personal data to third parties who adhere to appropriate data security standards and controls. From time to time we may need to transfer your personal data to other countries. Where this is the case, we will ensure that the transfer is subject to appropriate safeguards to protect your personal data and complies with applicable law which may include having standard contractual clauses in place with the third party.
This is known as a Subject Access Request. If you want to know if we are processing personal data relating to you and to have access to any such personal data you can email our Data Protection Team on data.protection@collectgroup.co.uk
If you believe that we hold inaccurate personal data about you, then you can contact our Client who requested our delivery services or you can email our Data Protection Team on data.protection@collectgroup.co.uk Depending on the type of personal data you believe is inaccurate, we may ask you for further proof to ensure that the personal data is being corrected properly. If we are satisfied that the personal data is inaccurate we will make the necessary changes. Please understand that records of deliveries may not be able to be altered given our mandate to comply with regulatory and law requirements.
You have a right to ask for your personal data to be erased in certain circumstances. However, this right does not apply where we have to comply with a legal obligation or where we need personal data for the establishment, exercise or defence of legal claims. Therefore, we cannot comply with an erasure request where you have been provided services for which we must keep records.
You have a right to request that processing of personal data is restricted in certain circumstances. However, we shall still continue to process the personal data for storage purposes, for the establishment, exercise or defence of legal claims.
Where we are relying on legitimate interests as a legal basis to process your data, you have a right to object to such processing on grounds relating to your particular situation.
You may also object to other processing when we rely on our legitimate interests as the basis for processing, but we do not have to stop the processing if we can demonstrate compelling legitimate grounds for the processing (taking into account our processing activities, the nature of our business and our legitimate interests) and that these grounds override your interests, rights and freedoms or in the event that we need the personal data for the establishment, exercise or defence of legal claims. To enable us to consider any objection we will need to know what specific interests, rights or freedoms relating to your particular situation you believe will potentially be put at risk by our processing. If we do stop processing your personal data, this may affect our ability to deliver our service to our Clients and you.
In certain circumstances, you can request that we provide to you your personal data in a commonly used format. If you wish to make such a request you can email our Data Protection Team on data.protection@collectgroup.co.uk
You have the right to lodge a complaint with the Information Commissioner and more details can be found on their website www.ico.org.uk
The website uses cookies to distinguish you from other users of the website. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer, if you agree. Cookies contain information that is transferred to your computer’s hard drive. This helps us to provide you with a good experience when you browse the website and also allows us to improve the website.
When you first visit our website, a notice appears to alert you to the use of cookies and requests your consent.
You can disable cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you disable all cookies (including essential cookies) you may not be able to access all or part of the website.
Strictly necessary cookies. These are cookies that are required for the operation of the website. They include, for example, cookies that enable you to log into secure areas of the website and use a shopping cart.
Performance cookies. They allow us to recognise you as a visitor and how you move around the website when you are using it. This helps us to improve the way the website works, for example, to help you find what you are looking for easily. Statistic cookies help us understand how visitors interact with the website by collecting and reporting information anonymously.
Functionality cookies. These are used to recognise you when you return to the website. This enables us to personalise our content for you and remember your preferences.
Targeting / advertising cookies. We use cookies record your visit to the website and the pages you have visited. We also use marketing cookies to track your use of other websites. We will use this information to make the website and the advertising displayed on it more relevant to your interests.
Social media cookies. These cookies allow you to connect with social media networks such as Facebook, LinkedIn and Twitter. These are persistent cookies which will be kept on your device until their expiration or earlier manual deletion.
Google Analytics cookies. Google Analytics is a web analysis service. Google cookies are used to help analyse the traffic to the website and make improvements based on visitor behaviour. You can prevent your data being used by Google Analytics by installing the opt-out browser add-on here: https://tools.google.com/dlpage/gaoptout.
If you have any queries about how we use your information or on data protection generally please send an email to data.protection@collectgroup.co.uk or write us at the Data Protection Team, Synergy House, Lawson Street, North Shields, Tyne & Wear NE29 6TG.