Privacy Policy

1. Information we collect

2. Why we use your information and our lawful bases

Driving-endorsement information can, depending on what it reveals, amount to criminal-offence data under UK data-protection law. Where that applies, we will process it only where a valid UK GDPR lawful basis and a relevant Data Protection Act 2018 Schedule 1 condition are in place, together with any additional policy documentation required by law.

3. Who we share information with

We do not sell personal information. We may share or make it available only where needed with:

• authorised Yaqubs staff who need access for recruitment, repairs, administration or customer enquiries;
• Cloudflare, which provides website hosting, Workers, database/storage infrastructure and access/security services;
• our email and communications providers when we communicate with you;
• WhatsApp/Meta when you choose to open or use WhatsApp to contact or share with us; your use of WhatsApp is also subject to that provider's own terms and privacy information;
• Google-hosted services used by the website, including Google Fonts and, while configured, certain externally hosted website imagery. Your browser may send technical request information to those providers when loading those resources;
• professional advisers, insurers, law-enforcement bodies, regulators or courts where reasonably necessary or required by law.

4. International processing

Some technology and communications providers operate internationally. Where personal information is transferred outside the UK, we require an appropriate transfer mechanism where the law requires one, such as UK adequacy arrangements or approved contractual safeguards. You can contact us if you would like more information about the safeguards relevant to a particular service provider.

5. How we store and protect information

Website application and enquiry records are stored in our Cloudflare-hosted database. Bodyshop damage photographs are stored in a private Cloudflare R2 bucket rather than in the public vehicle-media area. Recruitment and bodyshop records, internal notes and private photographs are available only through authenticated admin routes intended for authorised staff.

We use access controls, server-side validation, restricted private storage and security checks to reduce risk. No internet service can be guaranteed to be completely secure, so please avoid sending unnecessary sensitive information through public forms.

6. How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, taking account of the status of the enquiry/application, applicable legal obligations, potential disputes or legal claims, and whether a record has moved into a separate customer or workforce relationship.

• Recruitment: application records are kept through the recruitment process and for a reasonable period afterwards where needed to deal with queries, demonstrate fair recruitment or address possible legal claims. If an applicant joins the business, information that is still needed may become part of separate workforce records. Unnecessary recruitment information is deleted or anonymised when there is no continuing lawful need.
• Bodyshop: enquiry details and photographs are kept while the enquiry, repair, quote, warranty/insurance issue or related dispute remains active and for any reasonable period afterwards required for business or legal purposes. Associated private photographs are deleted when no longer required.
• General communications: retained for as long as reasonably necessary to answer the enquiry and maintain appropriate business records.
• Technical/security logs: retained according to our providers' security and operational retention settings and only as long as reasonably required.

7. Your data-protection rights

Depending on the circumstances and lawful basis, you may have rights to request access to your personal information, correction of inaccurate information, erasure, restriction, portability, or to object to particular processing. Where we rely on consent, you can withdraw that consent at any time without affecting processing that was lawful before withdrawal.

To exercise a right, email info@yaqubslogistics.com. We may ask for proportionate information to verify your identity before acting on a request.

8. Cookies, local storage and analytics

The public website does not currently intentionally use non-essential advertising or analytics cookies. Essential security technologies may be used by Cloudflare where necessary to deliver and protect the service. The protected admin area uses Cloudflare Access authentication, and the Site Images admin uses local storage to remember interface preferences for authorised users.

If we introduce non-essential analytics, marketing cookies or similar technologies in future, we will update this notice and implement appropriate consent controls before using them where consent is required.

9. Children

The recruitment application is intended for adults who are considering the advertised driving opportunity and its stated eligibility requirements. We do not knowingly ask children to submit recruitment information through this form.

10. Complaints and contact

Please contact us first at info@yaqubslogistics.com if you have a concern about how we use your information. You also have the right to complain to the UK Information Commissioner's Office (ICO). Visit ico.org.uk/make-a-complaint.

11. Changes to this notice

We may update this Privacy Policy as the website, our services or legal requirements change. The current version and update date will be published on this page.