Home / Privacy policy
Privacy

Privacy policy

How Transport Standards Group uses personal information when you visit our website, make an enquiry or contact us.

TO COMPLETE BEFORE LAUNCH: Insert the effective date and review date when the policy is published, then remove every box like this one. These notes are for the website developer and must not appear on the live site.

This policy explains how Transport Standards Group (TSG) uses personal information when you visit our website, make an enquiry, request a quotation or communicate with us as a business contact. It explains your choices and how to contact us about your information.

Who we are

TSG provides transport compliance auditing, consultancy and training. The organisation responsible for the information covered by this policy is Transport Standards Group Limited, trading as Transport Standards Group. We are the data controller, which means we decide why and how this information is used.

Privacy contact: Amanda Tyrer
Email: info@transportstandardsgroup.co.uk
Postal address: Transport Standards Group Limited, Mailbox 205, The Maggie O’Neill Centre, 433 Liverpool Road, Huyton, Liverpool, L36 8HT
Website: transportstandardsgroup.co.uk

Information we collect and where it comes from

You may give us your name, job role, company name, email address, telephone number, contact preferences and the information included in your enquiry. A review request may also include operator licence details, fleet and driver numbers, operating centres, maintenance arrangements, areas of concern and preferred dates.

We keep relevant correspondence, quotation and booking records, business contact details and billing information. We may receive business contact information from your employer, colleagues or someone making a referral. We may check publicly available business and operator licensing records where relevant to your enquiry.

TO COMPLETE BEFORE LAUNCH: Confirm with the hosting and security providers, then publish: “Our website hosting and security providers collect technical information such as IP addresses, browser details, access times and security logs to operate and protect the website.” Describe any analytics separately in a cookie notice.

Please provide only the information needed for your enquiry. Do not send medical information, conviction details, driver identity documents or detailed personnel records through an initial website enquiry. Contact us first so we can agree what is needed and a suitable way to share it.

Client audit records

This website policy is not a complete notice for personal records reviewed during client audits or investigations. Where we handle driver, employee or other individual records as part of an engagement, the relevant privacy information and data protection arrangements will be set out separately. Our role may be that of a controller or a processor acting on a client’s instructions, depending on the work.

Why we use information and our lawful bases

We use personal information only where we have a lawful basis under UK data protection law. The basis depends on the purpose and our relationship with you.

  • Enquiries, quotations and business relationships: legitimate interests in responding to requests, understanding an operation’s needs, arranging our services and maintaining relevant business communications. We consider whether these interests are outweighed by your rights and expectations.
  • Contracts with individuals: contract, where using your information is necessary to take steps you request before entering into a contract with you, or to deliver that contract. For contacts acting for a company, we generally rely on legitimate interests rather than treating the company’s contract as a contract with that individual.
  • Accounting and statutory records: legal obligation, where information is needed to meet applicable tax, accounting or other legal requirements.
  • Security and claims: legitimate interests in protecting our website and business, investigating misuse and establishing or defending legal claims, unless a particular legal obligation applies.

Required form fields help us respond to your request. If you do not supply the information needed, we may be unable to provide a meaningful quotation or arrange the service. Optional fields can be left blank.

Who we share information with

We do not sell your personal information. We share it only where necessary with providers supporting our business, such as website hosting and form services, email and IT providers, document storage services, accountants and payment providers. Service providers acting on our behalf are subject to appropriate data protection terms.

Where relevant, we may also share information with professional advisers or insurers to obtain advice or deal with a claim. We may disclose information where required by law, a court or a regulator. Where you ask us to coordinate with a solicitor or another adviser, we share only the information needed for that purpose.

International transfers

TO COMPLETE BEFORE LAUNCH: Confirm that hosting, form handling, email, storage, backups and support access are all UK-only before publishing this statement. The website files themselves load no third-party resources (fonts are hosted with the site).

We do not transfer the personal information covered by this policy outside the United Kingdom. We select and configure our service providers to keep this information in the UK, including storage, backups and access by support staff.

Keeping information secure

We use appropriate technical and organisational measures to protect personal information, including access controls and suitable arrangements with service providers. Access is limited to those who need it for their work. No internet transmission can be guaranteed completely secure; please contact us to arrange the transfer of confidential records.

How long we keep information

We retain personal information for as long as it is needed for the purpose for which it was collected. We then delete it securely or anonymise it.

TO COMPLETE BEFORE LAUNCH: Insert the agreed retention periods from TSG’s retention schedule: enquiries and quotations that do not lead to work (12 months has been proposed but not agreed); business contact, contract and service administration records; the practical period for accounting records (confirm with the accountant); website logs, form storage, backups and any cookies.
  • Accounting records: for the period required by applicable tax and accounting law.

Detailed audit evidence is governed by the separate engagement arrangements. We may keep relevant records longer where necessary for an ongoing complaint, legal claim or legal requirement. This does not mean we keep all information indefinitely.

Cookies and website features

TO COMPLETE BEFORE LAUNCH: Re-check the finished, hosted site. As built, the website files set no cookies and use no browser storage, and fonts are hosted with the site. If the host, form service, spam protection or analytics adds cookies or similar technologies, describe them here (purpose, provider, duration), add a cookie notice and obtain consent before any non-essential technology runs.

The “Is your operation inspection-ready?” self-assessment on our homepage works entirely in your browser. Your answers and result are not stored and are not sent to TSG or anyone else.

Your data protection rights

Depending on the circumstances, you may ask to access your personal information, correct inaccurate information, have information erased, restrict its use or receive information in a portable format. You may also object to processing based on legitimate interests. You have an absolute right to object to direct marketing.

Where we rely on consent, you can withdraw it at any time. Some rights have conditions or exemptions. If we cannot fulfil a request, we will explain why. Contact us using the details in this policy; we normally respond to rights requests within one month, subject to the time limits and extensions permitted by law. We may need proportionate information to verify your identity.

Questions and complaints

Please contact Amanda Tyrer using the details above if you have a question, wish to exercise a right or want to complain about our handling of your information. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint.

Changes to this policy

We review this policy when our services or data handling practices change. The latest version will appear on our website with its effective date. Where required, we will bring significant changes to your attention. We do not use the information covered by this policy to make solely automated decisions with legal or similarly significant effects.