The data that we collect
We may collect the following information:
Name, address, company name and address and job title.
Contact information including telephone number, address and email address.
Financial information for the purpose of fulfilling orders. If you are using company data, or data belonging to another individual, you must have appropriate authorisation or permission before giving it to us.
If you attend one of our courses, we may be required by law to collect a copy of your driving licence and associated information and records of your training hours to date. For example, if you attend a refresher course, we may need to collect data on when you gained your initial qualification.
As a transport systems auditor, we may collect information about your systems and processes. This is done at your invitation to help us to compile a report which will tell you where your processes are robust and where they need strengthening.
We may conduct such audits for the purposes of an initial audit for the DVSA Earned Recognition Scheme, to assist you with preparation in applying for membership of the FORS scheme or simply to help you to comply with transport industry best practice.
We offer basic assistance to operators faced with the prospect of attending a Public Enquiry. To facilitate this, we will collect basic information about your contact details and the situation with which you require assistance, in order for us to introduce you to an expert transport law specialist. If you need legal assistance for any other reason we will gather the same basic information in order to assist you.
When taking a telephone order or enquiry, we will collect basic contact details in order to assist you.
Some of the courses that we provide require us to ask you for personal information for an enrolment form, and attendance sheet and a feedback form. If you choose to attend the course, we are obliged by law to collect this information.
We may ask you to complete a feedback form on some courses after you have attended a training course. There is normally an option to fill this in anonymously without giving your personal details.
In order to provide analysis of analogue tachograph charts, we scan the charts which you send to us and submit them on your behalf for analysis.
If you are a digital tachograph analysis customer, your data is not stored on our system but on that of our outsourced analysis service provider. You will be made aware of this when you take out a contract with us. We have remote access to this data, in order to help deliver the best service to you, but we do not compile or control it.
How we use your personal data
We may process your information to understand your needs and provide you with a better service, and in particular for the following reasons:
To process orders for products, services or training courses. For sensitive personal information relating to any person other than yourself, you must obtain the explicit consent of the person to whom the information relates, to both the disclosure of the information and its use by us, before giving us this information.
If you are, or have been a customer of ours, then we may continue to process the information for the purpose of administering and otherwise in connection with any account or agreement. This requirement will continue for as long as we have an agreement with you and for a reasonable period of time afterwards (as, for example, we may be legally obliged to retain information about you even after your contract has expired.)
We may email you to tell you about important transport industry news, explain changes in industry best practice or to notify you of changes in transport law. From time to time we may send you important notifications to assist you to comply with the law. For example, we may send you a reminder to change your tachograph clock to local time when the UK changes between GMT and BST twice a year.
We may also send you a reminder that the periodic training which you completed with us is due for renewal.
We may use the data from a transport systems audit to assist you to make changes to improve and strengthen your internal systems, helping you to comply with the law. We will normally retain an electronic copy of this to serve as a back-up and as a useful benchmark for future audits.
Some transport audits that we perform are at the request of a Traffic Commissioner. We will collect all the data required for this audit. However, it will be your responsibility, in this case, to pass the data collected to the Traffic Commissioner. We do not perform this task. We normally retain an electronic copy of this report to serve as a back-up.
We may use the information which you give us in a feedback form following a training course to improve our products and services. If your comment is positive and encouraging, we may ask your permission to feature your comment on our website. We will not do this without your permission.
We may periodically send you promotional emails about our own new products, training courses, services, special offers or other information which we think you may find interesting, using the email address which you have provided.
From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. You are free at any time to opt out of this. We may use the information to improve our website or product and service offering.
Passing your personal data to others
There are a number of circumstances in which we need to pass on your information to third parties. In particular:
We may upload your information to the DVSA database to record your periodic Driver CPC training hours completed.
We may need to submit your information to examination boards so that you are able to sit examinations for professional qualifications.
For some transport training courses, we are required by law to keep records of personal data for attendees for six years. We are required to keep your enrollment form, attendance sheet, photocopy of your driving licence and feedback form for 6 years. This is of benefit to you as it may help you to demonstrate your compliance should you lose your own documentation. These records are kept in paper form in lockable filing cabinets at our premises. After six years, this data is destroyed in an appropriate manner so that your data is kept secure.
We may submit your tachograph data, on your behalf, for analysis purposes in order to fulfill our service to you and to assist you in complying with the law and your undertakings as a Standard or restricted Operator Licence holder. We do not routinely examine the data or store it for any purpose after we have submitted it for analysis. If you ask us to explain specific items in this tachograph data, we will examine it with your permission, and provide the explanation. Tachograph charts are scanned then returned to you, usually within seven working days. We do not hold records of your data once your charts have been returned to you.
We are required, as an auditor for the DVSA Earned Recognition Scheme, to use the data that we collect from your organisation during your second audit for the scheme to report to the DVSA on your suitability for the scheme. This is in order to assist you towards membership of the scheme. As membership of this scheme is voluntary, you give us your data for the DVSA Earned Recognition scheme to submit to the DVSA on an entirely voluntary basis. We normally retain an electronic copy of this report to serve as a back-up.
Apart from disclosures referred to in this policy, we will not disclose any personal information without your permission unless we are legally entitled or obliged to do so (for example, if required to do so by Court order or for the purposes of prevention of fraud or other crime.) You will be held to have given permission for disclosures referred to in this policy.
Your debit and credit card information
If you use your credit or debit card to purchase from us, we will ensure that this is carried out securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).
User names and passwords
You are responsible for all activity completed using your user name and password, whether or not the use is made by you, or someone else using your user name and password. You are responsible for protecting and securing your user name and password from unauthorised use. If at any time you believe your username and password is being used by unauthorised persons, please let us know so we may change your password.
Controlling your personal information
You may choose to restrict the collection or use of your personal information in the following ways:
Whenever you are asked to fill in a form on the website, leave the box which indicates that you are happy to receive direct marketing material unticked.
If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at firstname.lastname@example.org.
You may request at any time that we delete your data from our systems. We are not legally able to do this if it is a legal requirement for us to keep your records for six years following a training course. Any other data, we are happy to delete providing you ask us to do so in writing, either by emailing email@example.com or by sending a letter to Novadata TAB Ltd, 4 Blackwell Drive, Springwood Industrial Estate, Braintree, Essex CM7 2QJ.
You may request details of personal information which we hold about you under the rules of GDPR. If you would like a copy of the information held on you please email firstname.lastname@example.org.
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible at email@example.com or by post to Novadata TAB Ltd, 3 Blackwell Drive, Springwood Industrial Estate, Braintree, Essex CM7 2QJ. We will promptly correct any information found to be incorrect.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
Security - how we keep your data safe
We are committed to keeping your information safe. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
When you place an order with us, the form on which we collect your contact information is filed securely with any orders you may make, or, for enquiries which do not result in a booking or order, held in a lockable filing cabinet. We destroy all paper records in an appropriate manner after six years.
We do not pass on your data to third parties without your express consent. For example, you may consent for us to upload your completed Driver CPC training hours to the DVSA website where you can access your own records, or to enter you for examinations at your request.
We will only divulge your data to a third party when we are legally obliged to do so or with your express permission.
We will never pass your data on to third parties for marketing purposes without your express permission.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
What are cookies?
Cookies are small text files that are placed on your computer, smartphone or other device when you access the internet.
None of the cookies we use collect your personal information in any way and therefore cannot be used to identify you. Our website does not store any information that would, on its own, allow us to identify individual users without their express permission. Any cookies that may be used by our website are used solely on a 'session' basis to maintain user preferences.
This type of 'session cookie' is just temporary and only exists during the time you use our website (or more strictly, until you close the browser after using our website). Session cookies help our website remember what you chose on the previous page to avoid the need to re-enter information.
This website is provided by Novadata Tachograph Analysis Bureau Limited (also referred to as 'Novadata TAB Ltd, 'Novadata' or 'Novadata Transport Training'.) The company is registered in England: No. 2817899.
You can contact us in a number of ways:
By post, sent to Novadata TAB Ltd, 3 Blackwell Drive, Springwood Industrial Estate, Braintree, Essex CM7 2QJ.
By telephone to 01376 552999.
By means of our website contact form, which you can access here.
Data Protection Officer
Our data protection officer is Su Winch. You can contact her at firstname.lastname@example.org.
This policy is effective from May 2018.