Privacy Policy

Updated 20/2/26

VanHub UK is a UK-based booking platform that connects customers with independent, self-employed van drivers. We do not provide transport services ourselves.

This Privacy Policy explains how we collect, use, store and share personal data in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

VanHub UK is the data controller for personal data collected through:

• Our website

• Booking forms

• Driver registration forms

• Email, SMS and messaging communication

Contact: [Insert contact email]
Website: www.vanhubuk.com

2. Categories of Data We Collect

A. Customer Data

When submitting a quote request or booking enquiry, we may collect:

• Full name

• Phone number

• Email address

• Pickup and delivery addresses

• Postcodes

• Property access details

• Item descriptions

• Preferred dates

• Additional notes

We do not collect payment card details unless explicitly stated via a secure third-party payment provider.

B. Driver Data

When registering as a driver, we may collect:

• Full name

• Business name (if applicable)

• Contact number

• Email address

• Postcode and coverage area

• Van type(s)

• Services offered

• Insurance details

• Insurance documents (optional)

• Website and social links

Driver profile information may be displayed publicly where applicable.

C. Technical Data

We may automatically collect:

• IP address

• Device type

• Browser type

• Pages visited

• Referral source

• Cookie identifiers

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent – when you voluntarily submit a form

• Contract – to facilitate bookings and driver matching

• Legitimate Interest – to operate and improve the platform

• Legal Obligation – where required by law

4. How We Use Personal Data

We use data to:

• Match customers with suitable drivers

• Share relevant job information with selected drivers

• Facilitate communication between customer and driver

• Operate job alert systems

• Send confirmations or updates

• Improve our service

• Prevent fraud and misuse

• Maintain records for accounting and compliance

We do not sell personal data.

5. Data Sharing

Customer Data

When a customer submits a booking request:

• Job details are shared with relevant independent drivers

• Contact information may be shared with the chosen driver

After booking confirmation, the transport contract exists solely between the customer and the driver.

Driver Data

Driver information may be:

• Displayed on profile pages

• Shared with customers requesting quotes

• Used for internal job alert distribution

Drivers are independent data controllers for any customer data they receive.

6. Marketing Communications (PECR Compliance)

We may contact:

• Customers regarding their enquiry

• Drivers regarding job alerts

Marketing messages are sent only where:

• Consent has been given; or

• A legitimate interest applies under UK regulations

All marketing communications include an opt-out option.

You may withdraw consent at any time.

7. Data Processors

We use third-party service providers to operate our platform. These may include:

• Form collection platforms

• CRM or database systems

• Cloud storage providers

• Email service providers

• SMS providers

• Website hosting platforms

Where data is transferred outside the UK, we rely on:

• UK adequacy decisions

• Standard Contractual Clauses

• Or equivalent safeguards

8. Data Retention

We retain data only as long as necessary:

• Quote enquiries: up to 12 months

• Confirmed booking records: up to 6 years for accounting/legal compliance

• Driver records: until removal request or account inactivity review

• Insurance documents: retained while driver is active

Inactive or outdated records may be securely deleted.

9. Data Security

We implement reasonable technical and organisational measures to protect data, including:

• Restricted system access

• Secure hosting providers

• Password protection

• Limited internal access

No online system is completely secure, but we take appropriate steps to reduce risk.

10. Data Breach Procedures

In the event of a data breach:

• We will assess the risk

• Notify the ICO within 72 hours if legally required

• Notify affected individuals where required

11. Your Rights Under UK GDPR

You have the right to:

• Access your data

• Correct inaccurate data

• Request deletion

• Restrict processing

• Object to processing

• Withdraw consent

• Lodge a complaint with the ICO

ICO: https://ico.org.uk

To exercise your rights, contact: [Insert email]

12. Cookies

Our website may use cookies for:

• Functional purposes

• Analytics

• Performance monitoring

You can manage cookies via your browser settings.

13. Children

Our services are not directed at individuals under 18 years old.

14. Changes to This Policy

We may update this policy periodically. The latest version will always be published on our website.