PRIVACY POLICY – WEBSITE AND MOBILE APPLICATIONS

Last Updated: 11/06/2025

1. INTRODUCTION

This Privacy Policy (together with any other referenced documents) sets out how SDS Plus Limited (“SDS Plus”, “we”, “us” or “our”) processes personal data across our digital platforms, including the websites and applications operated by our subsidiaries, including Crown SDS Limited (“Crown SDS”).

This Policy applies to users of our services, websites (such as www.sdsplus.co.uk and www.crownsds.com), mobile applications, and individuals interacting with us as customers, drivers, or general visitors.

We are committed to processing your data transparently and lawfully. Please read this Policy carefully to understand how we handle your personal information.

By accessing or using our websites or applications, you accept the practices described in this Privacy Policy. If you do not agree, you must stop using them immediately. This Policy may be updated periodically; continued use will be deemed acceptance of any updates.

Our websites and applications may contain links to third-party platforms. We are not responsible for their privacy practices and recommend reviewing their policies independently.

For any privacy-related queries, please contact us at: privacy@sdsplus.co.uk

You have the right to raise concerns with the UK Information Commissioner’s Office (www.ico.org.uk). However, we would appreciate the opportunity to address any concerns before you approach the ICO.

For verified driver applicants or currently engaged self-employed drivers (especially with Crown SDS), please refer to our Driver Privacy Policy for specific data practices related to engagement.

2. WHO WE ARE

SDS Plus Limited is the parent company of several entities including Crown SDS Limited and other logistics-focused subsidiaries.

The company responsible for collecting your data (the “data controller”) will be the entity that operates the specific website or application you use.

For all privacy matters, our Privacy Manager can be contacted at: privacy@sdsplus.co.uk

We comply with all applicable UK data protection laws, including:
- The UK General Data Protection Regulation (UK GDPR)
- The Data Protection Act 2018
- Other applicable privacy regulations

3. WHAT DATA WE COLLECT

“Personal data” refers to information that can identify you as an individual. It does not include anonymous or anonymised data.

Depending on your interaction with us, we may collect:
- Identity Data – Name, username, and photos
- Vehicle Data – Registration details and insurance
- Contact Data – Email, phone, address
- Financial Data – Bank or card information
- Transaction Data – Services purchased or provided
- Technical Data – IP address, device data, browser type
- Profile Data – Preferences, feedback, login history
- Usage Data – Behaviour on our platforms
- Marketing Data – Communication preferences
- Interaction Data – Forum posts or user-generated content
- Cookies – See section 7
- Third-Party Data – From partners or tools like Google Analytics, Mailchimp, etc.
- Analytics – Including anonymised tracking for performance improvements

We may also create aggregated statistical data, which is not personally identifiable unless combined with personal data.

We do not knowingly collect “Special Category Data” such as race, religion, or biometric data. However, we may process criminal record checks where necessary (e.g. for driver verification).

If you provide data about another individual (e.g. a colleague or recipient), you are responsible for obtaining their consent and informing them of this Policy.

Occasionally, we may enrich your data by combining it with other datasets to provide better service or analysis.

Our services are not intended for children, and we do not knowingly collect data from individuals under 18.

Please ensure your data remains accurate. You can contact us to update your records.

4. LEGAL BASES FOR PROCESSING

We process your data under one or more of the following legal bases:
- Your consent
- To fulfil a contract with you
- To comply with legal obligations
- To protect vital interests
- For public interest tasks
- For our or a third party’s legitimate interests (e.g. fraud prevention, service delivery)

5. HOW WE COLLECT & USE YOUR DATA

We may collect your data via:
- Direct input (forms, phone, email, etc.)
- Account registration or service use
- Surveys, feedback, or promotions
- Automatic tracking on websites/apps

We may use your data to:
- Personalise your experience
- Communicate about services or promotions
- Improve our websites and platforms
- Manage transactions and payments
- Comply with legal or contractual obligations

6. MARKETING

With your consent or where legitimate, we may contact you via email, SMS, or phone.

You may opt in during sign-up or by managing preferences in your account settings.

You can opt out at any time via:
- Unsubscribe links
- Email: info@sdsplus.co.uk
- Profile settings

7. COOKIES

Cookies help us improve user experience and website functionality.

You may block cookies via your browser settings, but this may affect site usability.

See our full Cookie Policy at:
https://www.sdsplus.co.uk/cookies
(or for Crown SDS: https://www.crownsds.com/cookies)

8. INTERNATIONAL DATA TRANSFERS

Data may be stored or processed outside the UK. We ensure protection by:
- Transferring to countries with adequate safeguards
- Using standard contractual clauses approved in the UK

You can request more details via privacy@sdsplus.co.uk

9. DATA SECURITY & RETENTION

We apply technical and organisational safeguards, including encryption, firewalls, and role-based access.

In the event of a breach, we will notify you and the relevant authority if legally required.

Data is only retained for as long as necessary. Retention periods depend on the purpose and legal obligations.

10. SHARING YOUR INFORMATION

We may share data with:
- Group companies (e.g., Crown SDS)
- Fraud prevention or law enforcement agencies
- Professional advisors and service providers
- Business acquirers in the case of sale or restructure

We do not permit third parties to use your data beyond our instructions.

11. YOUR RIGHTS

You have rights under UK data law, including to:
- Access your data
- Correct or update inaccuracies
- Request deletion (“right to be forgotten”)
- Object to processing
- Restrict processing
- Request data portability

To exercise your rights, email: privacy@sdsplus.co.uk

12. AUTOMATED DECISION-MAKING & PROFILING

If we apply automated decision-making, you have the right to:
- Request human review
- Object to decisions made solely by algorithms
- Request explanations

We only use such systems when:
- Required for contracts
- Permitted by law
- You have explicitly consented

We take steps to ensure fairness, transparency, and safeguards in profiling.