Privacy notice

1. Who is responsible for your information

Car Transport UK (UK Wide) Ltd, trading as Haulage Company UK, is the controller of the personal information covered by this notice. We are registered in England and Wales under company number 16707596. Our registered office is Governors House, Palace Green, Berwick-upon-Tweed, TD15 1HR.

Privacy enquiries can be sent to customerservice@cartransportuk.co.uk or made by calling 0800 009 6703.

2. Information we collect

Depending on how you use our services, we may collect:

• names, company names, postal addresses, email addresses and telephone numbers;
• quote, booking, collection, delivery, load, site-access and operational details;
• billing, invoice, payment-status and transaction-reference information;
• emails, calls, messages, complaints, claim evidence and service records;
• carrier contacts, licences, insurance, fleet, rate and compliance information;
• technical and security information such as IP address, browser, device, request logs and administrator sign-in records.

Card information is handled by the relevant regulated payment provider when online card payment is offered; we do not intentionally store full card numbers or security codes.

3. How we obtain information

We receive information directly from you, your company, collection and delivery contacts, appointed Carriers, insurers and professional advisers. We also generate records when we administer a quote, booking, invoice, complaint or claim, and receive limited technical records from the suppliers that host and secure our website.

If you give us another person's details, you must be authorised to do so and should make this notice available to them where appropriate.

4. Why we use information and our lawful bases

• Pre-contract steps and contract: to quote, arrange and administer transport, coordinate collection and delivery, invoice and take payment.
• Legal obligation: for tax, accounting, company, insurance, road-transport and law-enforcement requirements.
• Legitimate interests: to verify customers and Carriers, prevent fraud, protect people and loads, secure and improve our systems, recover debts, manage complaints and defend legal claims.
• Consent: where the law specifically requires it, such as optional direct marketing or any future non-essential cookies. Consent can be withdrawn at any time.

We do not use solely automated decision-making that produces a legal or similarly significant effect on you.

5. Who receives information

We share only what is reasonably necessary with appointed independent Carriers and approved subcontractors, collection and delivery sites, payment and banking providers, insurers and brokers, accountants, legal and professional advisers, fraud-prevention services, regulators and law-enforcement bodies where required.

Our principal technology suppliers currently include:

• Supabase — UK-hosted database, authentication and private document storage;
• Vercel — website hosting, delivery and security;
• Resend — website enquiry notification emails;
• Microsoft 365 — business email and communications.

We do not sell personal information.

6. International transfers

Our main operational database is hosted in the United Kingdom. Some technology and communications suppliers may process limited information in the United States or other countries. Where UK data-protection law requires it, we rely on an adequacy regulation or contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses. Further information about the safeguard relevant to a particular supplier is available on request.

7. How long we keep information

• Unsuccessful enquiries and quotes are normally kept for up to 24 months after the last meaningful contact.
• Booking, contract, invoice, payment and tax records are normally kept for at least six years after the relevant accounting period.
• Carrier compliance, complaint, insurance and claim records are kept for the applicable legal limitation period and longer where a claim, investigation or legal hold requires it.
• Technical and security logs are kept only for the period reasonably required for security, troubleshooting and supplier operations.

We securely delete or anonymise information when it is no longer required.

8. Security

We use access controls, authenticated administration, private document storage, encrypted connections, supplier security measures and operational procedures designed to protect personal information. No internet or email system can be guaranteed completely secure, so please do not send payment card details or unnecessary sensitive information by email.

9. Your rights

Depending on the circumstances, you may ask for access to your personal information, correction, erasure, restriction, portability or object to processing based on legitimate interests. You may withdraw consent at any time where consent is the lawful basis. These rights can be subject to legal exemptions, and we may need to verify your identity.

You may complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the opportunity to address the matter first.

10. Cookies

The public website does not currently use analytics or advertising cookies. Strictly necessary authentication cookies are used only for the private administrator area. Because no non-essential cookies are active, the site does not currently display a consent banner. Full details are in our cookie policy.

We will update the policy and obtain consent before enabling any non-essential analytics or advertising cookies.

11. Changes to this notice

We may update this notice when our services, suppliers or legal obligations change. The current version and effective date will remain available on this website.