Privacy Policy

Wheelwash recognises the ethical and legal commitment to ensuring the privacy of its clients, and as such has taken steps to ensure that its operations and activities are compliant with the EU General Data Protection Regulation. This Statement document provides confirmation and detailed information regarding that commitment, in addition to further information which our clients may need in order to contact us on privacy related matters.

Our Compliancy Statements

1. We will protect our clients’ personal information
Wheelwash Limited will utilise encryption of data in transit and data at rest, and the principles of least privilege and Need to Know, in order to protect our clients’ personal information.

2. We will process personal data fairly and legally
We will process our clients’ personal data to the highest standard expected both legally and ethically.

3. We will provide information on why, how and where your personal information is being processed
Our clients' personal information will be collected and processed only for specific agreed purposes, and we will provide information on request regarding any aspect of our processing.

4. We will never share your data with a third party without your explicit permission
Our clients’ personal data is collected by us in order to facilitate communications with them and progress professional and business activity. It will never be shared with a third party unless there is explicit permission from individual clients.

5. We will take steps to minimise personal data collection
We will only collect and process a minimum data set in order to facilitate a business relationship. Unless we have a contractual arrangement with you which requires a further level of personal data, this will be limited to:

  • First Name
  • Last Name
  • Email Address
  • Employer
  • Sector (e.g. Construction, Mining, Commercial)

6. You have the right to have your personal data made available to you, rectified if inaccurate, and deleted if appropriate under legal mandate
We will respond to any reasonable request made in relation to personal data and provide copies, rectify errors or provide assurance of deletion where appropriate.

7. We will carry out Data Protection Impact Assessments on existing and new requirements for collecting personal data
We will use the ICO’s recommended process for carrying out Data Protection Impact Assessments as required and make the outcomes of those assessments available to clients as appropriate. The outcomes will directly influence our processed and actions in regard to the specific assessment.

8. We will respond to a Subject Access Request within 30 days, and in the format and medium agreed with the subject

9. We will report any breach of our systems which put client personal data at risk within 72 hours

10. We will act within the requirements of GDPR whether we are acting as the Data Controller or Data Processor

11. Wheelwash Limited’s Data Protection Officer

Wheelwash Limited’s Data Protection Officer is: Sharon Mclean, smclean@wheelwash.com

Incident Response

Wheelwash Limited will follow the lines of responsibility for incident response in this statement.

Incidents involving Wheelwash Ltd, personnel or locations:
Incidents will be raised, responded to an investigated by Sharon Mclean

Emergency Hotline
+44 (0) 1270 214886
smclean@wheelwash.com

In both cases the company incident response process will be initiated and all appropriate compliancy for GDPR requirements will be as follows including reporting period, notification of clients affected, resolution and investigation, and Post Incident Review

Clients or professional contacts of Wheelwash Limited may make Subject Access Requests with reference to the personal information we hold. These requests should be sent by email to smclean@wheelwash.com, or by letter to Wheelwash at the address below, will be responded to within 30 days, and should contain the following information:

  • Details of the person requesting the information (Full name, address, contact telephone number, email address)
  • An affirmation that they are the data subject and if not, that they are acting on behalf and with the permission of the data subject, with proof of identities and address (see below)
  • Details of the data subject (if different from the requestor)
  • A description of what information they are seeking
  • Information, if required, on the collection and processing of data (why we are processing it, to whom your details are disclosed, and the source of the data)
  • A declaration that all information provided by the requestor is accurate and true

Acceptable forms of identity and address include one of each of the following:

  • Proof of Identity – passport, driving license, birth certificate
  • Proof of Address – utility bill, bank statement, credit card statement (<3 months old), driving license, TV license, local authority tax bill, HMRC tax document (>1 year old)

If sending by email then please scan and attach. The attachment will be securely deleted once identity and address have been confirmed. If sending by letter, please enclose a colour photocopy (not an original), these will be shredded once identity and address have been confirmed.

Subject Access Requests made by letter should be sent to:
Sharon Mclean, Wheelwash Ltd, Pyms Lane, Crewe, Cheshire CW1 3PJ