Privacy Policy

Who are we?

Winch (also referred to in this Policy as “we”, “us”, or “our”) is a brand name of TECHMAP LTD. We have created this Privacy Policy in order to demonstrate our commitment to protecting the confidentiality and security of the information that you provide to us.

This Privacy Policy is designed to help you understand how we collect and use your information.

We may collect information from you about other people, for example, family members who may drive your car. If you give us information about another person it is your responsibility to ensure and confirm that:

  • you have told the individual who we are and how we use personal information, as set out in this Privacy Policy; and
  • you have permission from the individual to provide that personal information to us and for us to use it, as set out in this Privacy Policy.

What Personal Information do we collect and hold?

The following is a list of the types of data that we may collect and hold about you:

Personal data type:
Details:
Individual
Name, address, email address, telephone numbers and date of birth.
Payment
Payment card details.
Risk
Information about you which we need to collect in order to assess your risk.
Anti-fraud
Sanctions data, claims experience (including details of previous claims), and information received from a range of anti-fraud databases.
Online activity
IP address and other online identifiers.
Marketing
Marketing preferences, information relating to competition, prize draw or other promotion entry, or responses to voluntary customer satisfaction surveys. 

To improve our marketing communications, we may collect information about interaction with, and responses to, our marketing communications

You will be the primary source of the information that we hold that forms part of your personal data, and this data would be provided to us via one or more of the following methods:

  • Over the telephone
  • From price comparison websites
  • Through our website, mobile app or email
  • Face to face

We might also collect your personal data from various third party sources, including:

  • Government Agencies, such as HMRC
  • Fraud Prevention and Sanction Checking Agencies

How do we use Personal Information?

We use Personal Information for different purposes depending on our relationship with you.

The main purposes are to:

  • Provide products or other services
  • Communicate with you
  • Manage, develop and improve our business, products and services
  • Market our services

Are automated decisions made using Personal Information?

Sometimes, as part of our business operations, decisions about you are taken using automated computer software and systems.  These decisions do not involve human input, and the software and systems apply pre-defined logic programming and criteria to make a decision and assess how we deal with you in connection with the provision of services.

Who is Personal Information shared with?

We will pass on your personal data to third parties. The following third parties will receive your personal data for the following purpose(s) as part of the processing activities:

Payment Processors
For the purposes of processing card payments and direct debit payments.
Fraud Prevention Agencies
For the purposes of fulfilling our legal requirements.
Auditing Agencies
For the purposes of auditing our financial statements and regulatory compliance.

Additional third parties may be provided with your personal data under the following circumstances:

  • Where a countries legal system requires us to
  • In connection with any legal proceedings or prospective legal proceedings
  • To establish, exercise or defend our legal rights

 

Where do we process Personal Information?

Certain personal information held on our Information Technology systems may be transferred across geographical borders in accordance with applicable law.

By providing us with your information, you consent to the collection, international transfer, storage, and processing of your information. These transfers are governed by European Union (EU) standard contractual clauses or equivalent data transfer agreements to protect the security and confidentiality of personal information.

What is the legal justification for our use of Personal Information?

We only collect, use and store your information where either;

  • You have provided us with your consent to process your data
  • We have legitimate business reasons
  • We need to process your data in order to administer a contract
  • The processing of your data is necessary in order to comply with any legal obligations that we may have

How long do we keep hold of Personal Information?

We will not keep your personal data longer than is necessary for the purpose for which it was provided unless we are required by law or have other legitimate reasons to keep it for longer (for example, if necessary for any legal proceedings).

We will normally keep data for no more than 7 years after termination or cancellation of a product, contract or service we provide. 

What are my data protection rights as a data subject?

You have certain legal rights under UK data protection law and regulations, summarised as follows:

  • The right to be informed about our data processing activities, including through Privacy Policies such as this.
  • The right of access to the personal information we hold about you.
  • The right of rectification. You may ask us to correct any inaccurate or incomplete data within one month.
  • The right to erasure and to restrict processing. You have the right to have your personal data erased and to prevent processing except where we have a legal obligation to process your personal information. You should bear in mind that by exercising this right you may hinder or prevent our ability to provide products and services.
  • The right to data portability. On your request, we will provide you with your personal data in a structured format.
  • The right to object. You have particular rights in relation to automated decision making and profiling to reduce the risk that a potentially damaging decision is taken without human intervention. You can object to your personal data being used for profiling, direct marketing or research purposes.

How can I withdraw my consent to the use of Personal Information?

Please let us know if your information changes as it is important that the information we hold about you is accurate and up to date.

You can ask us to update or correct your personal information or opt out of our use of your information by contacting us using any of the following methods:

Email: [email protected]

Address: Spitalfields House, Stirling Way, Borehamwood, England, WD6 2FX

 

Who to contact about your Personal Information?

Our Data Protection Officer can be contacted directly by emailing [email protected], or by writing to The Data Protection Officer, Spitalfields House, Stirling Way, Borehamwood, England, WD6 2FX

Your right to complain

In the event that you wish to make a complaint about how your personal data is being processed by us, or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority. In the UK this is the Information Commissions Office (ICO).

We ask that you please attempt to resolve any issues with us before contacting the ICO.

Background Location Access

Our Winchit driver's application may request access to your device's location while running in the background specifically during the process of delivering a vehicle. This background location access is essential for us to display the driver's location to the customer on the map in real-time.

Consent

Before our driver's application accesses your location data in the background for delivery purposes, we will explicitly request your consent. You have the choice to grant or deny this access. You can also adjust your preferences at any time in your device settings.

Location Data Collection

When you grant permission for our driver's application to access your location data in the background for deliveries, we collect and process the following information:

Latitude and Longitude: We collect your precise location data in the form of latitude and longitude coordinates to accurately display your location to the customer.

Device Identifiers: To ensure the security of this data and its association with your driver profile, we may use unique device identifiers.

Data Storage and Retention

Your background location data for deliveries is securely stored on our servers and retained only for the duration required to fulfill the specific purpose of displaying your location to the customer on the map. We employ robust security measures to protect this data from unauthorized access and misuse.

Sharing Location Data

We do not share your background location data for deliveries with third parties for marketing or advertising purposes. However, we may share this data with trusted service providers who assist us in displaying your location accurately to customers.

Security and Transparency

We take privacy and security seriously. Our driver's application utilizes industry-standard security measures to protect your background location data. You can review, update, or delete your location data by reaching out to our Privacy Team or by adjusting your app settings.

How often do you update your Privacy Policy?

We may amend this Privacy Policy from time to time for example, to keep it up to date or to comply with legal requirements. The latest version of this policy can be found at www.winchit.co