C-MAC Group Ltd (CMAC) Privacy Policy
In the course of our day-to-day operations CMAC Group UK Limited (‘we’ or ‘us’) acts as a ‘Data Controller’ when processing the personal data of a number of different types of individuals including visitors to this website.
We are regarded as a ‘Controller’ of that personal data as we decide when and what data to collect, what we do with it, what to share, how long to keep it etc. We also decide how to process it.
Personal data is information that relates to an identified or identifiable living individual- known as ‘data subjects’. For the purpose of this Notice, we will refer to it as ‘personal information’.
We are committed to being transparent with individuals as to how we process their personal information.
We ask that you read this Notice carefully as it explains who we are, in what circumstances, how and why we process your personal information; your rights in relation to it; how to exercise them as well as what you should do if you have any concerns about how we use your personal information.
You should read the Notice before you decide to provide any information to us.
Who we are
CMAC Group UK Limited. For more information see https://www.cmacgroup.com/. For full contact details see the end of this Notice. We also operate the following websites:
Cab & Go (EMR)
You should visit those sites for information about those services and how we process your personal information when offering those services.
ENQUIRIES MADE BY EMAIL OR THROUGH THE WEBSITE
Our website allows you to make contact with us either by way of email or one of our contact forms.
In doing so we may process your name, contact details and the content of your communication.
We process your personal information in order to consider and respond to your enquiry.
We process enquiries received through the website or by email with your consent. By submitting a communication to us you are consenting to us processing your personal information. You have the right to withdraw consent and if you wish to do so please send a follow up communication advising us of the same.
Your communication will be passed to the most appropriate person/team within CMAC for them to consider and respond to it.
We will keep your personal information until, at least, the resolution of your enquiry but up to 7 years after the end of any contractual relationship that may arise as a result of the enquiry.
SUPPLIERS
We collect and process personal information about various types of individuals when a business makes an enquiry to become a supplier, makes a formal application and during and after the end of our business relationship. Whose personal information is processed and what type of information (and how much) is involved depends on whether you trade as a sole trader/ partnership or LLP/ Limited Company.
Why do we process personal information?
Whatever the structure of the business might be your personal information is processed for the same reasons namely to determine the initial suitability of your business to become (and remain as) a supplier to us including our due diligence checks; to communicate with you about your application; to liaise with you regarding your availability to provide transport or accommodation solutions, to reserve jobs and request transport and accommodation services from you, to monitor the progress of journeys; to communicate with you generally; to receive and process invoices and to deal with any compliments or complaints about service.
What information do we process?
For Sole traders/ traditional partnerships everything we process about you is regarded as your personal information such as your name, contact information, website address, business name, VAT number, operational availability and procedures, licence and insurance status, compliance information, banking information, fleet Information and your signature. We also process information about jobs awarded to you and the progress of those journeys, requests for payment, payment records and compliments and complaints.
For employees of suppliers, we collect names, contact information, (for transport providers) vehicle registration, licence and insurance information and (occasionally) behaviour reports. We also collect journey information I.e., when a passenger was collected, from where, the progress of a journey, drop off time and location etc.
Where we are dealing with a limited company/ LLP we may also collect the names of directors and key contacts and their position within the company and our communications with them.
What is our legal basis for processing your personal information?
There are various different legal bases available to us, depending on what personal information we process and why.
The legal bases we may rely on include
Contract - where our use of your personal information is necessary for a contract [sole traders and traditional partnerships only] we have with you, or because you have asked us to take specific steps before entering into a contract.
Where it is in the legitimate interests of a corporate supplier or another third party such as one of our customers, their customers or CMAC itself to process the personal data. Corporate suppliers and CMAC will have a mutual interest in forming a business relationship and ensuring it runs smoothly. Third parties such as customers of CMAC may also have an interest in processing personal information of individuals for instance knowing about the progress and outcome of a job placed with us or to resolve a complaint.
Where we are legally obliged to process personal information.
Who do we share your personal information with
Where appropriate we may share driver and vehicle information with a passenger or with our customer. This is so they can track the progress of their journey.
We may also share personal information with law enforcement or other authorities if obliged to or where it is appropriate to do so.
In the case of complaints made by customers we may share some information with them.
How long do we keep your personal information for
If you apply to be a supplier but are not successful, we will retain your personal information for 6 months. If you become a supplier to us then we will retain your personal information for the lifetime of our business relationship and for 7 years after it ends.
CUSTOMERS - CONTACTS WITHIN LIMITED COMPANIES
Why do we process your personal information
We process your personal information for various reasons such as
Marketing
To ascertain if the company you work for/ direct are a suitable prospect and to communicate with you in the hope of generating interest in our services. We also pass suitable leads on to our business development team who will again process personal information with a view to forming a business relationship.
We may process your personal information to register you for webinars, to communicate with you in connection with it and to market our services afterwards. We may also process your personal information at trade shows and communicate with you afterwards with a view to forming a business relationship.
Doing business
We may process your personal information so as to enter in to a business relationship (onboarding) with the company you work for, to communicate with you in connection with the day-to-day provision of a service to your company or your customers, to respond to any concerns and to ensure we are providing a good service.
Our legal basis for processing your personal information
We process your personal information in the legitimate interests of CMAC (business development and successful business relations with your employer) and those of your employer (forming a business relationship with us and its effective continuance).
Who do we share your personal information with
Your personal information may be shared internally within CMAC to enable us to form a business relationship with your employer and for contract formation or invoicing purposes or to arrange to provide a service for you for your customers. We may pass some of your personal information to our sub- contractors to enable them to provide the required service to you and your customers.
How long do we keep your data for
If we do not initially form a business relationship there may be a number of reasons for that. As such we will only retain your personal information for a reasonable period of time. If we do form a relationship with your employer, we will retain your information for 7 years after the end of the relationship.
CUSTOMERS OF CUSTOMERS
Why do we process personal information
We sometimes process your personal information for the purpose of invoicing our customers or if there have been any concerns about service that we need to resolve.
Our legal basis for processing your personal information:
We process your personal data in the legitimate interests of CMAC – invoice generation and the resolution of concerns.
Who do we share your personal information with?
Your personal information may be shared internally within CMAC if you or a customer have raised a concern or in order to generate invoices. It may also be shared with our customer so that they can see if you have been picked up by a transport provider and potentially your approximate location.
How long do we keep your data for?
We keep invoice records for 7 years. Records of any concerns are kept for 7 years after the end of our business relationship with our customer.
PERMIT HOLDERS
Why do we process personal information?
We process your personal information to facilitate our relationship with you and to resolve any complaints about service.
Our legal basis for processing your personal information
We process your personal information in the legitimate interests of us and our customer and their customers namely successful business operations and customer service.
Who we share your personal information with
Your personal information may be shared internally within CMAC to set you up as a permit holder.
How long do we keep your data for
Records of any permits and payments made are kept for 7 years after you cease to hold a permit.
Your legal rights (All)
You have a number of rights such as to:
- receive information as to our use of your personal information – met by the provision of this Notice.
- access your personal information and to certain other supplementary information
- require us to correct any factual inaccuracies in your personal information which we hold.
- require us to erase your personal information
- object to us making decisions reached solely by automated means which produce legal effects concerning you or similarly significantly affect you.
- restrict or object to our processing of your personal information.
Please note that CMAC may, depending on the circumstances, be able to refuse to grant your request or only grant it in part. If we do so we will advise you why.
If you would like to exercise any of the above rights, please email or write to CMAC using the information below.
How to complain
We hope that we are able to satisfactorily resolve any query or concern you have about our use of your information. However, if after we have been given the opportunity to resolve it your issue you are still dissatisfied you may complain to the Information Commissioner’s Office. Their contact details can be found at https://ico.org.uk/concerns/&n...;
How to contact CMAC
Please send an email to dataprotection@cmacgroup.com or send a letter to:
CMAC Group UK Limited
Suite 1 The Globe Centre
St James Square
Accrington
BB5 0RE
25 August 2021 V2