Legal, Privacy & Policy

Effective Date: 08/06/2026

1.Introduction
‍
‍Nicholas Rowell Haulage Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy laws.

‍Data Controller
‍
‍Nicholas Rowell Haulage Ltd is the Data Controller responsible for your personal data.

‍Contact Details
‍
‍Company Name: Nicholas Rowell Haulage Ltd
Address:Torr Quarry Industrial Estate, East Allingoton, Totnes, Devon, TQ9 7QQ
Telephone:01548 521333
Email:info@nrhaulage.co.uk

If you have any questions regarding this Privacy Policy or wish toexercise your rights, please contact us using the details above.

Depending on your relationship with us, we may collect and process the following categories of personal data:

Customer and Enquiry Information

• Name
• Postal address
• Email address
• Telephone number
• Company name
• Job title (where applicable)
• Details of enquiries and communications

Transaction Information

• Service requests
• Delivery and collection information
• Payment and billing details
• Purchase history
• Account information

Technical Information

When you visit our website, we may collect:
• IP address
• Browser type and version
• Device information
• Operating system
• Website usage data
• Cookie identifiers
• Analytics information

Marketing Information

• Marketing preferences
• Communication preferences
• Consent records

We only process personal data where we have a lawful basis to do so.

Purpose
Responding to enquiries
Providing haulage and transport services
Managing customer accounts
Processing payments and invoices
Fraud prevention and security
Maintaining business records
Marketing communications
Website analytics and performance monitoring

Lawful Basis
‍Legitimate Interests
Performance of a Contract
Performance of a Contract
Legal  Obligation and Contract
Legitimate Interests
Legal Obligation
Consent
Consent (where required) and Legitimate Interests

Wherewe rely on consent, you may withdraw your consent at any time.

We may use your personal data to:
‍
• Provide our services
• Process orders and bookings
• Manage customer relationships
• Respond to enquiries
• Improve our website and services
• Maintain records and accounts
• Meet legal and regulatory obligations
• Prevent fraud and misuse
• Send marketing communications where consent has been obtained
‍
We will only use your personal data for the purposes for which it was collected unless we reasonably consider another use to be compatible with those purposes.

Where you have consented, we may contact you regarding services, promotions and company updates.You may withdraw your consent or opt out of marketing communications at any time by:

• Clicking the unsubscribe link in emails;
• Contacting us directly; or
• Updating your preferences where available.

Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

Wemay share personal data with trusted third parties where necessary,including:

• IT service providers
• Website hosting providers
• Cloud storage providers
• Payment processors
• Professional advisers
• Accountants and auditors
• Insurance providers
• Regulatory authorities
• Law enforcement agencies where legally required

All third-party providers are required to implement appropriate security measures and process personal data only in accordance with ourinstructions.We do not sell personal data to third parties.

Where personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

These safeguards may include:
‍
• UK adequacy regulations;
• International Data Transfer Agreements (IDTA);
• International data transfer addendums; or
• Other approved legal mechanisms.

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with legal, accounting and regulatory requirements.

Typical retention periods may include:

Record Type
‍General enquiries
Customer contracts
Financial records
Marketing records
Website analytics
CCTV recordings

Retention Period
‍24 months
7 Years from end of contract
6 years from last transaction
Until consent withdrawn, or 2 years after last interaction
14-26 months
2 weeks

Retention periods are reviewed regularly.

We take appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, loss or destruction.

These measures may include:
• Access controls
• Password protection
• Staff training
• Secure backups
• Encryption where appropriate
• Security monitoring
• Supplier security assessments

Despite our efforts, no transmission of data over the internet can be guaranteed as completely secure.

We maintain procedures for identifying, investigating and responding to personal data breaches.

Where required by law, we will notify the Information Commissioner's Office (ICO) and affected individuals.

Under UK GDPR you have the following rights:

Right of Access
You may request a copy of the personal data we hold about you.

Right to Rectification
You may ask us to correct inaccurate or incomplete information.

Right to Erasure
You may request that we delete your personal data in certain circumstances

Right to Restrict Processing
You may request that we limit the way we use your personal data.
‍
Right to Data Portability
You may request a copy of your personal data in a structured, commonly used and machine-readable format.

Right to Object
You may object to processing based on legitimate interests or direct marketing.

Rights Relating to Automated Decision-Making
You have rights relating to automated decision-making and profiling.

We do not currently undertake automated decision-making that produces legal or similarly significant effects.

To exercise any of your rights, please contact us using the details provided in this policy.

If you have concerns about how we use your personal data, we encourage you to contact us first so we can try to resolve your concerns.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).Information Commissioner's Office

Website: https://ico.org.uk

Telephone: 0303 123 1113

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Our website uses cookies and similar technologies to improve functionality, analyse website usage and enhance user experience.

Cookies may be classified as:

Essential Cookies
Required for the operation of the website.

Analytics Cookies
Used to understand how visitors interact with our website.

Marketing Cookies
Used to deliver relevant advertising and measure effectiveness where applicable.

You may manage your cookie preferences at any time through our cookie consent tool.

Google Analytics
We use Google Analytics to understand website usage and improve website performance.

Google Analytics may collect:
• IP address information
• Device information
• Browser information
• Pages visited
• Time spent on pages
• Referral sources

Where required, Google Analytics cookies are only activated after consent has been provided. Further information can be found in Google's Privacy Policy.

Our services are not directed at children and we do not knowingly collect personal data from children under the age of 13.

If we become aware that such information has been collected, we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect legal, regulatory or operational changes.

The latest version will always be available on our website.

Last Updated: 08/06/2026