This Privacy Policy explains how Brian Lafferty Transport Consultant Limited (“we”, “our”, or “us”) collects, uses, stores, and protects your personal information. We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other relevant data protection laws.

We are Brian Lafferty Transport Consultant Limited, providing transport consultancy, audits, training, and compliance support services. 
We are registered with the Information Commissioner’s Office (ICO) under registration reference ZB620058.
Data Protection Officer: Mr Bernard Lafferty
Email: brian@brianlaffertytc.co.uk
Telephone: 07795 129496
Postal address: 14 Kitchener Road, Great Yarmouth, NR30 4HU

We may collect and process the following types of personal information:
- Contact details (name, email address, telephone number, postal address)
- Employment or business details relevant to audits or training
- Records of communication with us
- Delegate and trainee details (e.g. driver licence details, CPC card details, signatures) where required for compliance
- Technical data when you visit our websites (e.g. IP address, browser type, and cookies)

We process personal information for the following purposes:
- To provide consultancy, audit, and training services
- To issue invoices, certificates, reports, and related documents
- To comply with statutory and regulatory requirements
- To manage our client and delegate records
- To communicate with clients and respond to enquiries
- To improve our services and websites

We rely on the following lawful bases for processing personal data under UK GDPR:
- Contractual necessity – processing required to deliver our services
- Legal obligation – processing required to comply with the law (e.g. transport compliance records)
- Legitimate interests – for managing business relationships and improving services
- Consent – where you have given explicit consent (e.g. marketing communications)

We will not sell or share your personal data with third parties for marketing purposes. We may share personal data with:
- Regulatory authorities (e.g. DVSA, Traffic Commissioners) where legally required
- Training partners and accrediting bodies (e.g. CPC training records)
- Professional advisers, auditors, or legal representatives
- IT service providers supporting our systems

We retain personal data only as long as necessary to fulfil the purposes it was collected for, including legal, accounting, and reporting requirements. Audit and training records may be retained for statutory minimum periods. After these periods, data will be securely deleted or anonymised.

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Access to personal data is restricted to staff and partners who require it for legitimate business purposes.

Under UK GDPR, you have the following rights:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure of data where legally applicable
- Right to restrict processing in certain circumstances
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time (where processing is based on consent)
- Right to lodge a complaint with the ICO

We use cookies on our websites to improve user experience and analyse website traffic. Details are set out in our separate Cookie Policy, which is available on our website.

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

If you have any questions about this Privacy Policy or how we handle personal data, please contact us:
Email: brian@brianlaffertytc.co.uk
Telephone: 07795 129496
Postal address: 14 Kitchener Road, Great Yarmouth, NR30 4HU