Courtesy Cars Redhill Limited

Introduction

Courtesy Cars Redhill Ltd respects your privacy and is committed to protecting your personal data. This privacy notice will explain what personal data (information) we hold about you, how we collect, how we use and may share any information about you. We are required to give this information under data protection law.

Courtesy Cars Redhill Ltd collects, uses and is responsible for certain personal information about you. When we do so we are regulated under the General Data Protection Regulation (GDPR) which applies across the European Union (including in the United Kingdom) and we are responsible as 'controller' of that personal information for the purposes of the laws

The data we collect about you

Personal data, or personal information means any information about any individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you as follows:

  • Personal information (such as name, address, email address, telephone numbers, DOB, gender, language, and emergency contact details).

  • Details about your child's education, health and care plan (EHCP).

  • Details of the education provision including the travel arrangements for both the current and new provision.

  • Medical information including mobility and physical needs, height and weight (where child seats are required) and medication.

We obtain the above personal information from the following sources:

  • Surrey County Council

  • SELAC

  • East Sussex County Council

  • Reigate and Banstead Borough Council

  • Epsom & Ewell Borough Council

  • Children's Services

  • SEND Team

  • Any other local or national governmental authority

How we use your personal data

We use your personal data to provide you or your child with the appropriate services. We may share your personal information with:

  • Teams working within Surrey County Council

  • Transport teams

  • Commissioned providers of local authority services (such as education services)

  • Schools

  • Social Services

  • Law enforcement agencies or other authorities (if required by law)
CCR may also use your information to help develop and improve the services we provide.

How long do we hold personal data?

We will hold your personal information securely and retain it on our systems as long as it is necessary (up to a maximum of 2 years) for the relevant activity or service that we provide to you, or as required by law

Please note that we review our retention periods for the personal data we hold about you on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations.

Your rights

Under GDPR, you have rights which you can exercise free of charge:

  • Request to see what information we hold about you (subject access request)

  • Request information about what we are doing with your information and why we are doing it.

  • Ask us to correct any mistakes in the data we hold about you

  • Object to direct marketing

  • Make a complaint to the Information Commissioners Office (www.ICO.org.uk)

  • Ask us to delete the information that we hold about you

  • Request to have your information transferred electronically to yourself or another organisation.

  • Ask to withdraw consent at any time (if applicable)

We will always aim to comply with any requests however, we may be required to hold or use information to comply with legal duties. Please note: your request may delay or prevent us in providinng a service to you.

How do we keep your personal data secure

We have the appropriate security measures in place to prevent personal information from being accidentally lost or used/accessed in any unauthorised way. We do this by ensuring that only those that have a genuine business need to know your information has access to it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected breach in data security, and we will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Contact

You can contact our Data Protection Officer (DPO) to exercise any of your rights, or if you have any complaint about why your information has been collected, how it has been used or how long we have kept it for. DPO – Rubia Bakrania, at rubia@courtesycarsredhill.co.uk, or write to: CCR, 36a Holmethorpe Avenue, Redhill, Surrey RH1 2NL.

For further information about your rights, including the circumstances in which they apply, please contact the UK Commissioners Office (ICO) on 03031 231113 – www.ico.org.uk.