a. Introduction
At Savile Executive Cars Ltd., we are committed to protecting the privacy and personal data of our customers and employees. This GDPR (General Data Protection Regulation) policy outlines how we collect, use, store, and protect personal data per the requirements of the GDPR.
b. Scope
This policy applies to all personal data collected, processed, and stored by Savile Executive Cars Ltd., including data collected from customers, employees, and other stakeholders.
c. Principles of Data Protection
Savile Executive Cars Ltd. adheres to the following principles of data protection:
- - Lawfulness, fairness, and transparency: We collect and process personal data lawfully, fairly, and transparently, ensuring individuals are aware of how their data is used.
- - Purpose limitation: Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
- - Data minimisation: We only collect and process personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
- - Accuracy: We take reasonable steps to ensure that personal data is accurate and up-to-date.
- - Storage limitation: Personal data is kept in a form that permits identification of individuals for no longer than is necessary for the purposes for which it is processed.
- - Integrity and confidentiality: We implement appropriate technical and organisational measures to ensure the security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
d. Data Collection and Processing
Savile Executive Cars Ltd. collects and processes personal data for the following purposes:
- - Providing transportation services to customers.
- - Managing bookings and reservations.
- - Communicating with customers regarding their bookings and any updates or changes.
- - Managing customer accounts and preferences.
- - Facilitating payments and invoicing.
- - Responding to inquiries and resolving complaints.
- - Ensuring the safety and security of passengers and drivers.
- - Complying with legal and regulatory requirements.
The types of personal data collected may include but are not limited to:
- - Name
- - Contact information (e.g., address, phone number, email)
- - Payment information
- - Booking details (e.g., pickup location, destination, flight information)
- - Identification documents (e.g., driver's licence, passport)
- - CCTV footage for security purposes
e. Data Security
Savile Executive Cars Ltd. implements appropriate technical and organisational measures to ensure the security of personal data, including:
- - Secure storage and transmission of data
- - Access controls to limit access to personal data to authorised personnel only
- - Regular monitoring of systems for security vulnerabilities
- - Employee training on data protection policies and procedures
f. Data Subject Rights
Under the GDPR, data subjects have certain rights regarding their personal data, including the right to:
- - Access their personal data
- - Rectify inaccuracies in their personal data
- - Erase their personal data
- - Restrict processing of their personal data
- - Object to processing of their personal data
- - Data portability
Savile Executive Cars Ltd is committed to respecting these rights and will respond to requests from data subjects in accordance with the GDPR.
g. Data Transfers
Savile Executive Cars Ltd may transfer personal data to third parties, such as payment processors or regulatory authorities, as necessary for the purposes outlined in this policy. Data transfers will only occur in compliance with the GDPR and with appropriate safeguards in place to protect the data.
h. Data Breach Notification
In the event of a data breach involving personal data, Savile Executive Cars Ltd. will notify the relevant supervisory authority and affected data subjects per the requirements of the GDPR.
i. Policy Review and Updates
This GDPR policy will be reviewed and updated as necessary to ensure ongoing compliance with the GDPR and any other applicable data protection laws and regulations.
j. Contact Information
For questions or concerns about this GDPR policy or Savile Executive Cars Ltd's data protection practices, please contact: info@savilecar.com
Date of Last Revision:
15th May 2024