We use cookies to make this site simpler. Find out more about cookies

Privacy Notice

Your privacy is important to us.  You should read this Privacy policy carefully as it contains important information about what to expect when we collect personal data about you and how we will use your personal data.

Your privacy is important to us.  You should read this Privacy policy carefully as it contains important information about what to expect when we collect personal data about you and how we will use your personal data.

Wincanton plc, including all its group companies, ('Wincanton') is registered as a Data Controller with the UK Information Commissioners Office, registration number Z549510X.    

We operate as a data controller when managing personal data that relates to the categories of data subject outlined below, our employees and internal operations.  We operate as a data processor when managing personal data on behalf of our customers.

This policy applies to information we collect about:

  • Visitors to our website
  • Our customers
  • Consumer data we hold on behalf of our customers
  • Prospective customers
  • Professional contacts and suppliers of services to us or our customers
  • Potential employees
  • People who attend events
  • Complainants, correspondents and enquirers

If you have any questions about data protection in Wincanton, please contact us at DPO@Wincanton.co.uk or alternatively write to us at Data Protection Team, Wincanton plc, Methuen Park, Chippenham, Wiltshire, SN14 0WT.

When you become a customer, supply us with goods or services, complete a contact form, attend events run or supported by us or register an interest for any job vacancies we have, we may collect some or all of the following personal data about you:

  • Name
  • Address
  • Contact details (email and phone)
  • If you choose to submit a job application we will collect and hold the information that you provide in that application. 
  • IP addresses (internet protocol addresses) of visitors are logged for administration purposes. The IP address indicates the location of your computer on the Internet. We collect these to try to ensure that our site reflects the needs of our users and may be used to track your session.

We do not collect personal data directly from consumers.  We may hold your personal data on behalf of our customers, under contract, in order to fulfil our contractual commitments.  In these cases, we only process personal data as instructed by our customer, the data controller.  This data may be held for up to 6 years after the end of our contract.

For prospective B2B customers our basis for processing is legitimate interest, based upon targeting solely potential B2B customers and opt outs to future marketing communications being provided.  Where we hold any personal data on individuals, sole traders or partnerships it will be based on consent.  

We may also receive information about you if you use any of the other websites we operate or the other services we provide.  In this case we will have informed you when we collected the data that it may be shared internally.

We do not collect sensitive information except where legally required as part of the recruitment process.  Sensitive information includes data relating to race or ethnic origin, political opinions, religious or other similar beliefs, trade union membership, physical or mental health, sexual life or criminal records.

We gather this information to allow us to:

  • Provide contracted services.
  • Process any application for employment.
  • Improve the quality of our services.
  • Keep you updated as to events or information which you may find of interest.
  • Where necessary to verify your identity.  
  • Maintain our records for administrative purposes (internal operations, troubleshooting, testing, security).

By completing a job application you are giving Wincanton permission to hold your data, with a view to entering into a contract if your application is successful.  If you are unsuccessful we will hold your data for no longer than 6 months.

In certain circumstances we may provide you with information about any services or events we think may be of interest to you.  Where we provide you with marketing information, you will be provided with an option to opt out of any future marketing communications.

We only use consent as the basis of processing for individuals, sole traders and partnerships.  Where consent has been obtained it will be refreshed every two years.

You may withdraw your consent at any time by contacting DPO@wincanton.co.uk

We will only share information with third parties where necessary to conduct the services we provide.  We share information with the following categories of firms:

  • Our customers (under contract)
  • Other companies in the Wincanton Group
  • Business and professional advisers
  • Third party processors
  • Legal and regulatory authorities
  • Central government

Wincanton does not share, sell, transfer or disseminate your personal data to third parties and will not do so in future, unless required by law or defined in a contract with our customers.

Wincanton may share data about prospects, customers and attendees with our contracted service providers so that they can provide services on our behalf. These service providers are authorized to use your personal information only as necessary to provide the requested services to us.

We have put in place reasonable security measures, both technical and organisational, to protect your personal data from loss, theft, misuse, alteration, disclosure, unauthorised access or destruction.  For example, we store the personal data you provide on computer systems that have limited access and that are in secure, controller facilities.  In addition, we ensure that your data is secured when being transmitted and at rest.

All Wincanton employees have agreed to a confidentiality clause within their contract of employment and only authorised persons will have access to your personal data.

The information you provide may be transferred to countries outside the European Economic Area (EEA) that do not have similar protections in place regarding your data and restrictions on its use as set out in this policy. However, we will take steps to ensure adequate protections are in place to ensure the security of your information that is consistent with this privacy policy.

You have the following rights regarding your personal data provided to us:

  • a right to request to view;
  • correct if it is inaccurate or incomplete;
  • delete or otherwise modify;
  • restrict processing;
  • object to processing; and
  • in certain circumstances obtains and reuse your data.

If you have questions regarding the processing of your personal data, please contact the Wincanton Data Protection Officer. The Data Protection team is also available to help with information requests, take suggestions or handle complaints and can be contacted via email at DPO@wincanton.co.uk or by sending a letter to The Data Protection Officer, Wincanton plc, Methuen Park, Chippenham, Wiltshire, SN14 0WT.

You should be aware that you also have a right to complain directly to the relevant Supervisory Authority.

You are also able to change your marketing preferences by completing a form in our preference centre (http://go.wincanton.co.uk/preferences), from which the required changes will be made.

We keep our Privacy Notice under regular review. If we change our Privacy Notice we will post the changes on this page, and place notices on other pages of the website, so that you may be aware of the information we collect and how we use it at all times. This Privacy policy was last updated on 22 May 2018.

Our website may contain links to third party websites. This Privacy Notice applies only to this company’s websites only and we therefore have no responsibility or liability for the content and activities of these linked sites. We encourage you to read the privacy statements on any third party websites you access, as they will govern the use of any personal data you provide when visiting those websites.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our Cookie policy.

Term Definition
Data Controller The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Data Processor A data processor is responsible for processing personal data on behalf of a data controller.
Data Protection Officer (DPO) The data protection officer (DPO) is an enterprise leadership role reporting to the risk committee. The DPO is responsible for overseeing the Wincanton data protection strategy and implementation to ensure compliance with GDPR requirements.
Data Subject Any living individual who is the subject of personal data held by an organisation.
Personal data Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Privacy Notice An outward facing document that provides transparent and accessible information to individuals about how Wincanton uses their personal data.  This can be found on the website.