UK GDPR PRIVACY NOTICE

How Vanthrust uses personal information

Controller: Vanthrust Ltd (company number 17238909), 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Contact info@vanthrust.co.uk or 07309 343438.

Information we collect

We may collect names, business details, contact details, account and authentication records; enquiries, quotes, bookings, addresses, cargo descriptions, values and access instructions; customer, authorised-contact, driver, vehicle, availability and compliance records; payment status, provider references and invoice data; and proof-of-delivery evidence such as recipient name, signature, photographs, timestamps, location/status data and operational notes. We do not need or store full payment-card details where payment is handled by a payment provider.

We also process security and service logs, IP address, browser/request metadata, essential cookie/session data, anti-fraud signals, rate-limit events and Cloudflare Turnstile verification data. If later activated, authorised TEG/CX records may include job, customer, route, price and operational status data required for that service.

Why we use it and lawful bases

We use information to answer enquiries; take steps before a contract; quote, book and perform transport services; manage accounts, payments, evidence, safety, complaints and claims; prevent fraud and protect systems; and meet tax, accounting, insurance and other legal duties. Our lawful bases are contract or pre-contract steps, legal obligation, and legitimate interests in operating, securing and improving a transport business. We rely on consent only where consent is the appropriate basis, and it may then be withdrawn without affecting earlier lawful processing.

Communications and payment providers

Google Workspace/Gmail may be used for transactional communications. Mollie or another separately approved payment provider may process payment and fraud-prevention information under its own notice and as a service provider or independent controller according to the activity. Live payments are not currently enabled. Promotional email is not part of this launch.

Who receives information

We disclose the minimum necessary information to vetted hosting, security, cloud, communications, payment, accounting, insurance and professional service providers, and to a lawful approved carrier or subcontractor when required to perform a booking. We may disclose information to public authorities, courts, insurers or advisers when lawfully required. TEG/CX access remains off unless later authorised.

International processing

Some providers may process information outside the UK or EEA. Where applicable, we use a UK adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful safeguard, together with proportionate security review.

Retention

Our operational and commercial baseline is six years where justified for bookings, invoices, payments, POD and relevant delivery evidence. Some contact and security records are kept for shorter periods according to operational need; disputes, insurer requirements or legal holds may require longer retention. We minimise, delete or anonymise information when it is no longer required.

Cookies and security logs

The service uses essential session and request-verification cookies for sign-in and security. We do not claim to use optional analytics or advertising cookies at launch. Security logs and Turnstile help detect abuse and protect public forms.

Your rights

Subject to the law, you may ask for access, correction, deletion, restriction, objection, portability, or information about automated decisions. You may withdraw consent where consent is used. Contact info@vanthrust.co.uk. We may verify identity and may retain information where law requires it.

Complaints

Please contact us first so we can investigate. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or call 0303 123 1113. We do not claim an ICO registration number on this notice.

Effective: 29 September 2026. We will publish material future changes with their effective date.