Effective Date: January 01, 2025
Introduction
At CAIG Transport, we are committed to protecting the privacy and personal data of our customers, employees, and all individuals with whom we interact. This GDPR Policy outlines our approach to compliance with the UK General Data Protection Regulation (UK GDPR) and related UK data protection laws, ensuring that personal data is handled lawfully, fairly, and transparently.
Scope
This Policy applies to all personal data processed by CAIG Transport, regardless of format—whether collected online or offline, in electronic or paper form. It applies to all employees, contractors, and third-party service providers acting on behalf of CAIG Transport.
Principles of Data Protection
We are committed to upholding the core principles of data protection as set out in the GDPR:
- Lawfulness, Fairness, and Transparency: We process personal data in a lawful, fair, and transparent manner, ensuring individuals are informed about how their data is collected and used.
- Purpose Limitation: Data is collected for specific, explicit, and legitimate purposes and is not further processed in a manner incompatible with those purposes.
- Data Minimisation: Only the data necessary for each purpose is collected and processed.
- Accuracy: Personal data is kept accurate and, where necessary, up to date.
- Storage Limitation: Data is retained only for as long as necessary to fulfil the purposes for which it was collected.
- Integrity and Confidentiality: We maintain appropriate security measures to prevent unauthorised access, disclosure, or damage to personal data.
Data Collection and Processing
Types of Personal Data:
We may collect and process the following personal data:
- Name and contact information (address, email, phone number)
- Delivery and service-related details
- Payment and billing information
Legal Basis of Processing:
We process personal data based on the following legal grounds:
- The performance of a contract
- Our legitimate business interests
- Compliance with legal obligations
- Consent (where required)
Data Subject Rights:
In accordance with the GDPR, individuals have the right to:
- Access their personal data
- Request correction or deletion
- Restrict or object to processing
- Data portability
Requests to exercise these rights should be directed to our Data Protection Officer (see Contact Information below).
Data Transfers:
Where personal data is transferred outside the UK or European Economic Area (EEA), we ensure compliance through safeguards such as Standard Contractual Clauses or adequacy decisions issued by the UK government.
Data Security
We implement strong technical and organisational measures to protect personal data, including:
- Data encryption
- Access controls and multi-factor authentication
- Routine security audits and vulnerability assessments
- Staff training in data protection and information security
Data Breach Management
We have established a data breach response plan. In the event of a breach, we will:
- Assess and contain the breach promptly
- Notify the Information Commissioner’s Office (ICO) within 72 hours if required
- Inform affected individuals where there is a high risk to their rights and freedoms
Privacy by Design and Default
We embed data protection principles into the design of our systems, services, and business practices to ensure that privacy is a key consideration in all aspects of data handling.
Data Protection Officer
CAIG Transport has appointed a Data Protection Officer (DPO) responsible for overseeing GDPR compliance and serving as a point of contact for individuals with privacy concerns.
Training and Awareness
All employees receive regular training on data protection policies, GDPR principles, and best practices to maintain a culture of compliance and accountability.
Compliance Monitoring and Review
This Policy is reviewed regularly to reflect changes in data protection legislation, regulatory guidance, and business operations. Updates are communicated to all relevant stakeholders.
Contact Information
If you have any questions or requests concerning this GDPR Policy or your personal data, please contact:
Data Protection Officer
Caig Transport
Email: DPO.caigtransport@gmail.com
