Privacy Statement

Last updated: 8 July 2026

The purpose of this Privacy Statement is to explain how and why U-Drive Limited collects, uses, stores, and shares your personal information, the lawful bases we rely on, how long we keep it, and the rights available to you under applicable data protection law.

In this Privacy Statement, “U-Drive”, “we”, “us” or “our” means U-Drive Limited.

“Personal information” has the same meaning as “personal data” under data protection law and means information relating to an identified or identifiable living individual.

We process personal information in accordance with:

The United Kingdom General Data Protection Regulation (UK GDPR), as amended from time to time;
The Data Protection Act 2018, as amended from time to time;
The Privacy and Electronic Communications Regulations 2003 (PECR), as amended from time to time; and
Where applicable, the European Union General Data Protection Regulation (EU GDPR).

U-Drive Limited, company number 03183986, whose registered office is at 48-56, Old Wareham Road, Parkstone, Poole, Dorset, England, BH12 4QR, is the controller of your personal information except where this Privacy Statement explains that we act as a processor on behalf of another organisation.

This Privacy Statement applies to information collected through:

www.u-drive.co.uk;
www.u-sign.co.uk;
www.u-trade.co.uk;
www.u-lease.co.uk;
www.u-drivevehiclesales.uk;
www.u-drivepro.co.uk;
Our central reservation team;
Our stores;
Our agents and sales teams;
Our online services and customer portal; and
Other interactions with U-Drive.

Each website or service may also display a separate Cookie Policy or privacy notice in relation to its specific service.

When We Act As Controller Or Processor

U-Drive will usually act as controller where it determines why and how your personal information is used.

For certain services, including aspects of the U-Track service, U-Drive may act as processor on the documented instructions of a business customer. The relevant service terms and privacy information will explain the parties’ respective roles.

Personal Information That We Collect

We collect a range of personal information relating to you, which may include your:

Name;
Email address;
Telephone number;
Date of birth;
Postal and billing address;
Booking and reservation details;
Rental and transaction history;
Vehicle collection and return information;
Payment and transaction information;
IP address;
Driving licence number and driving licence endorsements;
Motor accident, damage and insurance details;
Identification documents and ID photographs;
Credit reference agency scores, records and fraud/risk indicators;
Information regarding any loyalty schemes in which you are enrolled; and
Correspondence, enquiry and complaint records;
Telephone call recordings;
CCTV images and access records;
Cookie identifiers, device information and website usage data;
Vehicle registration numbers and identifiers;
Vehicle location, journey and telematics data;
Vehicle fault, impact and diagnosis data;
Information received from business customers, brokers, insurers, law enforcement agencies and service providers; and
Any other personal information that you choose to provide to us when making an enquiry, reservation, complaint, request, or you complete our online contact forms, where relevant to the matter for which you provide it or otherwise make contact with us.

Card payments may be processed by our authorised payment service providers. We do not retain full payment card details unless expressly stated and permitted under applicable payment and security requirements.

We use driving licence and endorsement information to verify eligibility to hire or drive a vehicle, meet contractual, insurance and legal requirements, assess risk and prevent fraud.

We will only collect personal data that is adequate, relevant and reasonably necessary for the purposes described in this Privacy Statement.

How We Use Your Personal Information

We use your personal information as follows:

To maintain our relationship with you whilst you are a customer;
To take bookings and reservations;
To process orders and provide agreed goods and services to you;
For invoicing, processing payments, account set up and maintenance;
To verify identity, driving eligibility and right to use our services;
To communicate with you, including to respond to information requests/enquiries submitted and/or to obtain your feedback on our products and services;
For record keeping, statistical analysis and internal reporting and research purposes;
To ensure data security and to provide you with access to secure areas of our websites;
To notify you about changes to our products and services;
To decide on and notify you about price changes;
To monitor the quality of our products and services;
For logistical purposes, including to plan and log delivery routes;
To investigate any complaint you make;
To provide evidence in any dispute or anticipated dispute between you and us;
To customise various aspects of our websites to improve your experience;
To pre-complete online forms on our websites. For example, if you have provided an address when using one service, our website computers may automatically fill in that information on an order form for another service - as we may otherwise consider necessary to support the operation of our websites;
To obtain credit references, credit checks and for debt collection, fraud detection and prevention and risk management purposes;
To monitor and/or record telephone conversations to or from you in order to offer you additional security, resolve complaints, improve our service standards and for staff training purposes; and
To protect the rights, property, and/or safety of U-Drive Limited, its personnel and others;
To establish, exercise or defend legal claims;
To meet legal, regulatory, tax, accounting, insurance and audit obligations;
To administer vehicle deliveries and collections;
To provide roadside assistance;
To investigate accidents, damage, claims and incidents;
To provide customer service;
To administer a loyalty scheme;
To send direct marketing where lawful;
To recruit staff through our recruitment portal; and
To support business continuity, risk management and internal administration.

Where possible, we use anonymised or aggregated information for reporting, statistics, research and service improvement.

Main Purposes And Lawful Bases

Purpose	Lawful Basis
Taking bookings and providing requested services	Contract or steps before entering into a contract
Administering accounts, payments, deposits and refunds	Contract; Legitimate interests in financial administration
Verifying identity and driving eligibility	Contract; Legal obligation where applicable; Legitimate interests - preventing fraud and protecting vehicles
Credit and affordability checks	Contract steps; Legitimate interests; Legal obligation only where a specific obligation applies
Fraud prevention, sanctions screening and security	Legal obligation where applicable; Legitimate interests
Vehicle tracking, vehicle recovery and fleet protection	Legitimate interests; Contract where necessary to provide the service
Accident, damage and insurance management	Contract; Legitimate interests; Legal obligation where applicable
Customer service, enquiries and complaints	Contract; Legitimate interests; Legal obligation where applicable
Data protection complaints	Legal obligation
Call recording	Legitimate interests - in security, evidence, training and service improvement
Website operation and strictly necessary cookies	Legitimate interests - necessity to provide the requested service
Analytics, advertising and non-essential cookies	Consent where required
Email or SMS marketing	Consent or the PECR soft opt-in where all the conditions are met
Postal or live telephone marketing	Legitimate interests - subject to PECR and opt-out requirements
Debt recovery and legal claims	Legitimate interests - establishment, exercise or defence of legal claims
Tax, accounting and regulatory compliance	Legal obligation
Statistical analysis and service improvement	Legitimate interests – using anonymised or aggregated data where possible

The lawful basis we rely on depends on the purpose for which we use your personal information. We may rely on:

Consent - where you have given us clear consent to use your personal information for a specific purpose, for example for direct marketing communications (e.g. email and SMS); or non-essential cookies;
Contract – where processing is necessary to enter into or perform a contract with you, such as taking a reservation, supplying goods or services, or administering your account;
Legal obligation – where processing is necessary to comply with applicable legal or regulatory requirements.
Vital interests – in limited circumstances where processing is necessary to protect your life or the life of another person and consent cannot reasonably be obtained.
Legitimate interests – where processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and freedoms.

We may rely on legitimate interests as follows:

To operate and improve our services;
To manage customer relationships;
To protect vehicles and systems;
To prevent and detect fraud or crime;
To recover debts;
To maintain security;
To investigate incidents;
To respond to complaints;
To establish or defend legal claims; and
To carry out proportionate business analysis.

Before relying on legitimate interests, we assess whether the processing is necessary and whether your interests, rights, or freedoms override our interest.

You may object at any time to processing for direct marketing. You may also object to other processing based on legitimate interests because of your particular situation. We will consider your objection in accordance with applicable law.

Credit Reference And Affordability Checks

Where relevant and proportionate, we may carry out credit reference, affordability, identity verification and fraud prevention checks. This will not apply to every customer and will usually only be carried out where it is necessary to assess an application, verify identity, prevent fraud, assess affordability, manage credit risk, decide whether to provide credit or account facilities, recover debts or meet applicable legal or regulatory obligations.

We may obtain information about you from credit reference agencies and fraud prevention agencies, including through Creditsafe and its data partners, such as TransUnion.

Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 742313). TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 805757).

The information we receive may include, identity information; credit commitments; payment history; public record information; electoral roll information; fraud-risk indicators; and information relevant to affordability or creditworthiness.

We use this information for legitimate business purposes, including identity verification, affordability and creditworthiness assessment, fraud prevention, debt recovery and account management.

Depending on the circumstances, we may rely on our legitimate interests, steps necessary to enter into or perform a contract, or a legal obligation where applicable.

We will inform you at the relevant point where a credit or affordability check is required and, where applicable, whether the check is a soft or hard search and whether it may be visible to other lenders.

Further information about how Creditsafe and TransUnion process related personal data can be found in their respective privacy notices, as follows:

Creditsafe – https://www.creditsafe.com/gb/en/legal/privacy-policy.html
TransUnion CRAIN (Credit Reference Agency Information Notice) – https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference
TransUnion Bureau Privacy Notice – https://www.transunion.co.uk/legal/privacy-centre/pc-bureau

Provision Of Personal Information

Where we request personal information from you, we will make clear whether the information is required by law, required under a contract, necessary to enter into or perform a contract, or optional.

Certain personal data is necessary for us to:

Enter into and perform a contract with you;
Process reservations and orders;
Manage accounts;
Supply goods and services;
Verify identity and driving eligibility;
Prevent fraud;
Carry out credit or affordability checks where relevant;
Process payments;
To recover debts; and
Comply with legal, regulatory, accounting and tax obligations.

If you do not provide required personal data:

We may be unable to enter into or perform a contract with you;
We may be unable to provide the requested goods or services;
We may be unable to carry out necessary verification, credit, compliance or fraud prevention checks;
Our services may be delayed, restricted or declined; or
We may be unable to meet a legal or regulatory requirement.

Where information is requested for optional purposes, such as certain marketing communications, it is not mandatory. You may withdraw consent or change your preferences at any time without affecting your ability to receive unrelated goods or services.

Website Personalisation And Online Forms

We may personalise our websites and pre-populate online forms where permitted.

Where this processing relies on non-essential cookies, pixels or similar technologies, we will obtain consent through our cookie controls.

Telephone Call Recording

We may monitor or record telephone calls for security, fraud prevention, staff training, quality assurance, complaint handling and evidential purposes.

Where calls are recorded, callers will be informed. Recordings will be retained only for the applicable retention period.

Vehicle Tracking And Infotainment Systems

Telematics devices may be installed in vehicles either by U-Drive, by a third-party supplier after manufacture, or by the vehicle manufacturer during production.

These devices may collect and transmit information using mobile communications and related connectivity services.

We use vehicle tracking and telematics data for:

Vehicle security and recovery;
Preventing and detecting fraud, vehicle misuse and crime;
Administering rentals;
Locating and managing vehicles;
Providing roadside assistance;
Investigating accidents, impacts and damage;
Managing insurance claims and disputes;
Vehicle maintenance and diagnostics;
Protecting our business, customers and vehicles; and
Complying with legal or regulatory obligations.

We generally rely on our legitimate interests in protecting and managing our vehicles, preventing fraud and crime, investigating accidents and providing rental services. We may also rely on contractual necessity where processing is needed to provide the requested service, and legal obligations where applicable.

We consider whether these interests are overridden by the rights and freedoms of vehicle users.

Telematics data may be stored or accessed in the UK, European Economic Area (EEA) or other countries used by our service providers. Where a restricted international transfer occurs, we use an appropriate mechanism as described under international transfers of your information.

Vehicle manufacturers or their service providers may collect certain information generated from vehicles through the manufacture or third-party installed systems. Depending on the information and purposes involved, they may act as independent controllers. You should refer to the relevant manufacturer’s or third-party’s privacy information for further details.

Telematics information may be shared with:

Law enforcement agencies, where lawful and necessary;
Insurers;
Roadside recovery providers;
Vehicle recovery providers;
Parking and local enforcement authorities;
Vehicle manufacturers;
Maintenance and repair providers;
Mapping and geocoding providers;
Connectivity providers; and
Legal and professional advisers.

The information collected may include:

Vehicle registration number;
VIN or chassis number;
Journey dates and times;
Journey duration and distance;
Speed of vehicle;
Route and location information;
Current vehicle location;
Fault codes being generated by the vehicle Electronic Control Unit (ECU);
Date, time, and location of any impact; and
Force of impact

Where this information can be linked to hire records, account information or another identifier, it will be treated as personal information.

Retention Of Telematics Information

We retain information only for as long as necessary for the relevant purpose. Different information may be retained for different periods, including live location information, journey history, accident records, vehicle recovery records and diagnostic information. Applicable retention periods are set out in the retention schedule.

Infotainment Systems

You should remove personal information and disconnect paired devices from the vehicle’s infotainment system before returning the vehicle.

We may also carry out reasonable reset or deletion procedures between rentals, although you remain responsible for checking that your information has been removed.

U-Track Telematics Service For Commercial Customers

U-Drive provides a telematics service known as U-Track, which is available to business customers and enables them to access and manage vehicle telematics data relating to their fleet via a secure online platform.

For the provision of U-Track:

The business customer normally acts as the controller in respect of personal data relating to its drivers and vehicle users
The business customer is responsible for ensuring that it has a lawful basis for processing and provides appropriate privacy information to those individuals;
U-Drive normally acts as the processor on the business customer’s documented instructions when providing the U-Track platform and associated support services.

U-Drive may separately act as controller where it determines the purposes for which information is used, including:

Platform and information security;
Preventing and detecting fraud;
Incident and collision management;
Billing and service administration;
Establishing, exercising or defending legal claims;

These independent controller purposes will be limited to purposes genuinely determined by U-Drive.

Business customers must provide appropriate privacy information to drivers and vehicle users. U-Drive will provide customers with information reasonably required to support their transparency obligations.

Sub-Processors

Where U-Drive processes personal data on behalf of a business customer, it may use trusted third-party suppliers as sub-processors

Where U-Drive acts as controller, the same suppliers may instead act as processors to U-Drive.

Our current U-Track suppliers may include:

GPSWOX – Developers and providers of the software platform;
DigitalOcean – Hosting infrastructure, servers and firewall services;
Datasouth – Managed service provider;
OpenStreetMap – Provision of geocoding and mapping services;
Teltonika IoT Group / FOTAWEB – Providers of hardware devices and remote provisioning portal;
Truphone – Provider of SIM cards used for device connectivity; and
Other approved suppliers used to support the service.

We require sub-processors to:

Act under written agreement;
Process personal information only for authorised purposes;
Apply appropriate security measures; and
Comply with applicable data protection law.

We maintain an up-to-date sub-processor list and provide business customers with notice of intended additions or replacements in accordance with the applicable contract.

Marketing

We may send you direct marketing in relation to our own products and services by phone and post, where lawful.

We will respect your marketing preferences and provide a simple method of opting out.

We will only send you direct marketing in relation to our own products and services by email, SMS or similar electronic means where:

You have consented; or
The PECR soft opt-in applies.

We may rely on the soft opt-in only where:

We obtained your contact details directly from you during a sale or negotiation for a sale;
The marketing relates to our own similar products or services;
We offered you a clear opportunity to opt out when collecting your details; and
We provide a simple opportunity to opt out in every subsequent message.

The soft opt-in does not apply to bought-in lists or details obtained from another organisation.

Providing information for direct marketing is optional. Your use of our websites and services will not be affected merely because you choose not to receive marketing.

You may opt out at any time:

By using the unsubscribe link at the bottom of any U-Drive email you receive;
By following the instructions in an SMS;
By contacting U-Drive Customer Service Centre by phone on 0800 980 9966; and
By contacting our Data Protection Officer (DPO) / privacy team at [email protected] or using the alternative methods provided below in the “Additional information” section of this Privacy Statement.

We may retain suppression information to ensure that your preference continues to be respected.

Recruitment

If you click on the "careers" button on our websites, you may be directed to our dedicated recruitment portal.

If you choose to apply for a job that is listed on our recruitment portal, we will ask you to complete an application form and upload a CV, covering letter and supporting documentation.

The Applicant Privacy Notice displayed on the recruitment portal will apply to recruitment processing and explain the controller, the information collected, the purposes and lawful bases, recipients, screening arrangements, retention periods and your rights.

How We Share Your Personal Information

We may share your personal information with:

IT, cloud-hosting and cybersecurity providers;
Payment service providers;
Credit reference and fraud prevention agencies;
Debt collection agencies;
Insurers and claims administrators;
Vehicle manufacturers, dealers and repair providers;
Telematics, mapping and connectivity providers;
Roadside assistance and recovery providers;
Logistics, delivery and warehousing providers;
Marketing, market research and customer relationship management providers;
Advertising and analytics providers;
Loyalty scheme providers;
Brokers; sales agents and commercial partners;
Accountants, auditors, solicitors and professional advisers;
Emergency services;
Law enforcement agencies;
Courts, tribunals, regulators, government departments and public authorities;
Finance providers involved in hire purchase, leasing or related funding;
Prospective purchasers or investors in connection with business sale or restructuring; and
Other recipients where you have requested or authorised disclosure, or where another lawful basis permits or requires it.

Advertising And Analytics Providers

We may use advertising and analytics providers, including Google, where permitted.

Where personal information is collected or shared using non-essential cookies, pixels or similar technologies,
we will obtain consent through our cookie controls.

Where customer lists or audience-matching advertising is used, we will identify an appropriate lawful basis, provide relevant transparency, limit the information shared, apply appropriate security measures and provide a suitable opt-out where required.

Service Providers

Where third parties process personal information on our behalf, we require them to:

Process it only on our documented instructions;
Maintain confidentiality;
Apply appropriate security measures;
Assist us with applicable data protection obligations; and
Delete or return the information at the end of the relevant engagement.

Where third parties act as independent controllers rather than processors, they are responsible for their own compliance with data protection law.

International Transfers Of Your Personal Information

Some of our service providers or recipients may process or access personal information outside the UK.

Where this constitutes a restricted transfer under UK data protection law, we will ensure that the transfer is covered by an appropriate mechanism.

This may include:

UK adequacy regulations;
The International Data Transfer Agreement;
The UK Addendum to EU Standard Contractual Clauses (SCCs);
Binding corporate rules; or
Another lawful safeguard or exception.

Where appropriate safeguards are used, we will carry out any transfer risk assessment (TRA) required and apply supplementary measures where necessary.

Where the EU GDPR also applies, we will use an appropriate EU transfer mechanism, such as an adequacy decision, EU SCCs or another lawful safeguard.

You may contact us for further information about the safeguards used for a particular transfer.

How Long We Keep Your Personal Information

We retain your personal information for no longer than is necessary for the purposes for which the personal information was collected.

When determining the relevant retention periods, we will take into account factors including:

The purpose of processing;
The nature and sensitivity of the information;
Legal and regulatory obligations under applicable law to retain data for a certain period of time;
Tax and accounting obligations;
Statute of limitations under applicable laws;
Insurance requirements;
Disputes (actual and potential);
Fraud prevention requirements;
Contractual requirements; and
Guidelines issued by relevant regulatory authorities.

We maintain a data retention policy and schedule to cover all the personal data we retain.

Where information is no longer required, we will securely delete or anonymise it unless continued retention is required or permitted by law.

If you have any questions regarding the retention periods applying to the personal data we process about you, please contact our DPO / privacy team at [email protected] or using the alternative methods provided below in the “Additional information” section of this Privacy Statement.

Cookies

When you use our websites, we will process your personal information using cookies and similar technologies in accordance with our Cookie Policy.

You may manage your preferences through our cookie controls.

For more information on the use of cookies on our websites please visit our Cookies Policy.

Links To Third Party Websites

Our websites may contain links to third-party websites.

Third party websites operate under their own privacy information. Unless otherwise explicitly stated, we are not responsible for the independent privacy practices or the contents of such websites.

However, we remain responsible for processing that we undertake through our own websites, including where we select and integrate third-party tools.

Where we operate a promotion with a third party, the applicable promotion terms and privacy information will explain how personal information is used and the roles of the parties.

Security

We apply appropriate technical and organisational measures designed to protect the personal information that we process against accidental or unlawful loss, destruction, alteration, unauthorised disclosure and unauthorised access.

Our safeguards may include:

Access controls;
Encryption;
Authentication controls;
Monitoring and logging;
Staff training;
Supplier due diligence;
Incident response procedures;
Backup and recovery arrangements; and
Physical security measures.

Whilst no internet transmission can be guaranteed to be entirely risk-free or 100% secure, we maintain safeguards that are reasonable and proportionate to the nature of the information and the risks of processing.

Your Rights

The following section explains your rights. Not all the various rights are absolute and each is subject to certain exceptions or qualifications.

We will comply with your request where we are required to do so under data protection law. Nothing in this Privacy Statement is intended to provide you with rights beyond, or in addition to, your rights as a data subject under data protection law.

The right to be informed - You have the right to be provided with clear, transparent and easily understandable information about how we use your personal information and your rights. This is why we are providing you with the information in this Privacy Statement.

The right of access - You have the right to request access to the personal information we hold about you (if we are processing it), and certain other information (similar to that provided in this Privacy Statement) about how it is used. This is so you are aware and can check that we are using your personal information in accordance with data protection law.

Information may be withheld or redacted where an exemption applies or where disclosure would adversely affect another person’s rights and freedoms, and it is not reasonable to disclose it in the circumstances.

The right to rectification - You can ask us to take reasonable measures to correct your personal information if it is inaccurate or incomplete. For example, if we have the wrong date of birth or name for you.

The right to erasure – This is also known as 'the right to be forgotten' and, in simple terms, enables you to request the deletion or removal of your personal information where there is no compelling reason for us to keep using it or its use is unlawful.

This is not an absolute or general right to have all personal data deleted. It only applies in certain circumstances and is subject to exceptions, for example where we need to retain and use the information in the defence of a legal claim.

The right to restrict processing - You have rights to 'block' or suppress further use of your personal information when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your personal information, but may not use it further. We keep lists of people who have asked for further use of their personal information to be 'blocked' to make sure the restriction is respected in future.

The right to data portability - You have rights to obtain and reuse certain personal information for your own purposes across different organisations. This enables you to move, copy or transfer your personal information easily between our IT systems and theirs, or directly to yourself, safely and securely, without affecting its usability. This only applies to personal information that you have provided to us, that we process with your consent or to perform a contract with you, and that is processed by automated means.

The right to object - You have the right to object to certain types of processing, on grounds relating to your particular situation, at any time insofar as that processing takes place for the purposes of legitimate interests pursued by U-Drive or by a third party. We will be allowed to continue to process the personal information if we can demonstrate "compelling legitimate grounds for the processing which override your interests, rights and freedoms" or we need this for the establishment, exercise or defence of legal claims. You have an absolute right to object to the use of your personal information for direct marketing purposes at any time.

Rights in relation to automated decision-making and profiling - You have the right not to be subject to a decision based solely on automated processing (including profiling), which significantly affects you, subject to some exceptions. Where this is the case, you have the right to obtain human intervention, voice your concerns and to have the decision reviewed.

Exercising your rights

You may submit your rights request to our DPO / privacy team at [email protected] or using the alternative methods provided below in the “Additional information” section of this Privacy Statement.

Please provide sufficient information to help us identify you, the information concerned, the right you wish to exercise, and any relevant account, booking, vehicle or transaction details.

We may request information reasonably necessary to verify your identity. We will not request more information than is proportionate.

Where we cannot identify you after taking reasonable steps, we may be unable to act on the request and will explain this where appropriate.

We will respond without undue delay and normally within one (1) month, calculated in accordance with applicable data protection law.

Where we reasonably require information to confirm your identity, the applicable period will begin once we receive that information.

Where a request is complex or you have made a number of requests, we may extend the period by up to two (2) further months. We will tell you within the initial one (1) month period and explain the reason for the extension.

We will normally act on requests free of charge.

We may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive. Any such decision will be made on a case-by-case basis, documented, explained to you, and include information about your right to complain to the ICO and seek a judicial remedy.

We may also charge a reasonable fee for additional copies of personal information already provided.

Data Protection Complaints

If you are concerned about how we have collected, used, shared, stored or otherwise handled your personal data, you may make a data protection complaint by:

Email: [email protected]

Telephone: 0800 980 9966

Post: Fancy Road, Parkstone, Poole, Dorset, BH12 4QH

Please provide sufficient information to help us understand and investigate your complaint.

We will:

Provide a clear way for you to make a complaint;
Acknowledge receipt within 30 days;
Take appropriate steps to investigate and respond without undue delay;
Make appropriate enquiries;
Keep you informed where the matter cannot be resolved promptly; and
Tell you about the outcome without undue delay.

You may also complain to the ICO.

You do not have to complete our internal complaints process before contacting the ICO, although we would welcome the opportunity to resolve your concerns.

The ICO can be contacted as follows:

Through its website: https://www.ico.org.uk

By post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

By Phone: 0303 123 1113

Additional Information

Your trust is important to us. That is why we are always available to talk with you at any time and answer any questions concerning how your data is processed.

If you have any questions that could not be answered by this Privacy Statement or if you wish to receive further information on any topic within it, please contact our Data Protection Officer (DPO) by:

Email: at [email protected];
Telephone: 0800 980 9966; and
Post: Fancy Road, Parkstone, Poole, Dorset, BH12 4QH.

Updating This Privacy Statement

We may update this Privacy Statement from time to time.

Where changes are material, we will take reasonable steps to bring them to your attention, for example through our websites, your online account, customer communications or email where appropriate.