top of page

Privacy Policy

1. Introduction

OBV Development Group Ltd, trading as OBV Secure Transport (“we”, “us”, “our”), is committed to protecting and respecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with:

  • The UK General Data Protection Regulation (UK GDPR)

  • The Data Protection Act 2018

This policy applies to personal data provided directly to us, collected via our website, or shared with us by third parties such as NHS organisations, local authorities, or other referring bodies.

2. Data Controller Details

Organisation Name: OBV Development Group Ltd (trading as OBV Secure Transport)
Registered Address: Unit 47, Lea Green Business Park, St Helens, WA9 4TR
Email: themanager@obvdevelopmentgroup.co.uk
Telephone: [Insert Number]
ICO Registration Number: [Insert Number]

For data protection enquiries, please contact us using the details above.

3. Our Role: Data Controller and Data Processor

Depending on the circumstances, we may act as either:

  • Data Controller – where we determine how and why personal data is processed (e.g. staff records, enquiries, website use)

  • Data Processor – where we process data on behalf of another organisation (e.g. NHS Trusts or Local Authorities referring individuals for transport services)

In some situations, we may act as a separate Data Controller where we are required to process information to meet legal, regulatory, or safeguarding obligations.

4. Information We Collect

We may collect and process the following categories of personal data:

  • Identity and Contact Data: Name, address, telephone number, email address

  • Service Information: Referral details, journey requirements, risk assessments

  • Health and Safeguarding Data: Information necessary to deliver safe and appropriate transport services

  • Employment Data: CVs, references, DBS information, training records

  • Technical Data: IP address, browser type, and website usage data (via cookies)

5. How We Collect Information

We collect personal data when you:

  • Complete website forms (including referral forms)

  • Contact us by email or telephone

  • Apply for employment or work opportunities

  • Are referred to us by a third party (e.g. NHS Trust, Local Authority)

  • Use or browse our website

6. Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Article 6(1)(b) – Contract: To deliver agreed services

  • Article 6(1)(c) – Legal Obligation: To meet regulatory and safeguarding requirements

  • Article 6(1)(f) – Legitimate Interests: To operate and improve our services

  • Article 6(1)(a) – Consent: Where applicable

For special category data (including health information), we rely on:

  • Article 9(2)(h): Provision of health or social care

  • Article 9(2)(g): Substantial public interest (including safeguarding)

7. How We Use Your Information

We use personal data to:

  • Deliver safe and effective transport services

  • Assess risk and ensure safeguarding

  • Communicate with service users, families, and referring organisations

  • Manage recruitment and employment

  • Comply with legal, regulatory, and contractual obligations

  • Improve our services and website functionality

8. Data Protection Principles

We adhere to the UK GDPR principles:

  • Lawfulness, fairness and transparency

  • Purpose limitation

  • Data minimisation

  • Accuracy

  • Storage limitation

  • Integrity and confidentiality

  • Accountability

We demonstrate compliance through policies, staff training, audits, and data protection impact assessments (DPIAs).

9. Sharing Your Information

We only share personal data where necessary and lawful.

This may include sharing with:

  • NHS organisations and referring authorities

  • Regulatory bodies such as the Care Quality Commission (CQC)

  • Safeguarding authorities where required

  • Trusted third-party providers (e.g. IT systems, secure cloud storage, form providers)

All third parties are subject to strict data protection and confidentiality requirements.

10. International Data Transfers

We do not routinely transfer personal data outside of the United Kingdom.

Where international transfers are required, we ensure appropriate safeguards are in place in accordance with UK GDPR.

11. Data Storage and Security

We implement robust security measures to protect personal data, including:

  • Encrypted digital systems

  • Access controls and role-based permissions

  • Secure cloud storage solutions

  • Locked storage for physical records

  • Staff training in data protection and confidentiality

We align our practices with the Data Security and Protection Toolkit (DSPT) standards.

12. Data Retention

We retain personal data only for as long as necessary and in line with legal and regulatory requirements.

Typical retention periods include:

  • Referral and transport records: Up to 8 years (or in line with NHS guidance)

  • Safeguarding records: In accordance with statutory requirements

  • Recruitment data (unsuccessful applicants): Up to 12 months

  • Employee records: 6 years after employment ends

  • General enquiries: Up to 12 months

Data is securely deleted when no longer required.

13. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure (where applicable)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time (where applicable)

  • Not be subject to automated decision-making

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

14. Cookies and Website Data

Our website uses cookies and analytics tools (such as Google Analytics) to:

  • Understand how visitors use our website

  • Improve user experience

  • Monitor website performance

For more information, please refer to our Cookie Policy.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on our website with the revised effective date.

16. Contact

For any data protection enquiries, please contact:

OBV Development Group Ltd
Email: manager@obvdevelopmentgroup.co.uk
Telephone: 07396857440

bottom of page