Privacy Policy

1. Information we collect

Depending on how you interact with us, we may collect contact details, company information, delivery information, recruitment details, correspondence records, and technical website usage data. We do not intentionally collect special category data unless it is necessary for a recruitment, health and safety, or legal process and there is a valid lawful basis.

2. How we use your information

We use personal data to respond to enquiries, deliver transport and logistics services, manage supplier and customer relationships, process applications for employment, maintain operational records, improve our website, and meet our legal and regulatory obligations.

3. Lawful bases

• Contract: where data is needed to provide a service, manage bookings, or progress a commercial relationship.
• Legitimate interests: to run and improve our business, keep records, prevent misuse, and protect website security.
• Legal obligation: where we must keep records for tax, transport, employment, insurance, or health and safety purposes.
• Consent: where optional cookies or marketing-related technologies are involved.

4. Sharing data

We may share personal data with trusted service providers, professional advisers, regulators, insurers, IT providers, and operational partners where this is necessary to provide services or comply with the law. We require processors to handle data securely and only on documented instructions.

5. International transfers

Where data is transferred outside the UK, we use appropriate safeguards such as adequacy decisions, contractual protections, or equivalent lawful transfer mechanisms.

6. Retention

• General enquiries are typically retained for up to 12 months unless they become part of an ongoing relationship.
• Recruitment records are typically retained for up to 12 months unless a longer period is required by law or you ask us to keep details on file.
• Operational, financial, and contractual records may be retained for up to 6 years, or longer where required by law, insurance, or dispute management.
• Cookie consent records are retained for up to 6 months so we can respect and evidence your preferences.

7. Your rights

You have the right to request access to your personal data, ask for inaccurate data to be corrected, request deletion where appropriate, object to certain processing, request restriction, and ask for portability where processing is based on consent or contract and carried out by automated means.

8. Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, and misuse. Access is limited to people and partners who need the information for legitimate business purposes.

9. Complaints

If you have concerns about how we handle personal data, contact us first so we can investigate. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

10. Contact us

For privacy requests or questions, contact Grampian Continental using info@grampianco.com or write to Blacklaws House, Minto Drive, Altens Industrial Estate, Aberdeen, AB12 3LW.