Privacy Policy

1. Who We Are

YSOMA Logistics Ltd is the data controller for personal information collected through this website and through its logistics, driver membership and introduction services.

Company number: 12574660 Registered in England and Wales

Trading address: 3 Forest Road TW13 7EA The trading address is not an address for correspondence.

Data Protection Officer: Lady Sophia Hull-Assaf

Privacy enquiries: Email: [email protected] Phone: 075 70 808 808

2. Who This Policy Applies To

This policy applies to: 1. Visitors to our website 2. Individuals who register interest in YSOMA Driver or YSOMA Partner opportunities 3. Registered driver members and contractors 4. Logistics businesses and their representatives 5. Recruitment partners and their representatives 6. Any other person who contacts us or submits information through our website

3. Information We May Collect

Depending on how you interact with YSOMA, we may collect:

1. Your name, email address, telephone number and postcode 2. Registration, membership and enquiry information 3. Driving-licence information and driving experience 4. Vehicle, insurance and operating-area information 5. Availability and opportunity preferences 6. Identity, right-to-work and other verification information where required 7. Contract, invoicing, payment and tax-related information where applicable 8. Communications, complaints and consent records 9. Business names, company numbers and business-contact information 10. Driver or service requirements submitted by logistics and recruitment businesses 11. Website, device, security and cookie information

We do not ask applicants to provide identity documents, bank details or other sensitive documents through the general contact form.

Where special-category information or criminal-offence information is genuinely required, it will only be collected and used when an appropriate lawful condition applies.

4. Where Information Comes From

We normally receive information directly from you.

We may also receive relevant information from: 1. Businesses or recruitment partners involved in a proposed opportunity 2. Identity, licence or document-verification providers 3. Publicly available business registers 4. Professional advisers or service providers 5. Referees or other sources you have authorised

Where information is obtained from another source, appropriate privacy information will be provided where required by law.

5. How and Why We Use Information

We may use personal information to:

1. Respond to enquiries 2. Review registrations and membership profiles 3. Assess whether a profile may match an opportunity 4. Carry out proportionate identity, licence, vehicle or document checks 5. Contact drivers about opportunities they have chosen to hear about 6. Arrange direct YSOMA services and separate van-lease arrangements 7. Make an authorised introduction to a logistics business or approved recruitment partner 8. Review business and recruitment-partner applications 9. Administer contracts, invoices and payments 10. Operate, secure and improve the website 11. Handle complaints, legal claims and regulatory obligations 12. Keep records of preferences, acknowledgements and consent

Registering interest or creating a membership profile does not automatically authorise YSOMA to share your information with another business.

Before an intended introduction, you will be told what information may be shared and with whom.

6. Our Lawful Bases

Depending on the purpose, YSOMA relies on one or more of the following lawful bases:

CONTRACT OR STEPS BEFORE A CONTRACT Where processing is necessary to consider or administer a direct service, contractor, lease or business arrangement requested by you.

LEGITIMATE INTERESTS Where necessary to respond to enquiries, operate and secure our services, review suitable profiles, manage business relationships or protect legal rights. YSOMA considers whether those interests are balanced against your rights and reasonable expectations.

LEGAL OBLIGATION Where processing is necessary to meet legal, tax, accounting, regulatory or record-keeping requirements.

CONSENT Where you choose to receive opportunity updates or authorise information to be shared for a particular introduction. Consent may be withdrawn at any time.

7. Driver Introductions

YSOMA may identify a driver whose profile appears relevant to a business request.

Registration or membership alone will not be treated as permission to disclose that driver's personal information.

Before an intended introduction: 1. The driver will be informed about the proposed recipient and opportunity 2. The information intended to be shared will be explained 3. The driver's agreement will be obtained where consent is the applicable lawful basis

After an authorised introduction, the receiving business may become an independent data controller responsible for its own use of the information.

8. Opportunity Updates and Marketing

Email, SMS and WhatsApp opportunity updates are optional.

Consent choices must be: 1. Separate for each communication method 2. Unticked by default 3. Freely given 4. Recorded 5. Easy to withdraw

You may unsubscribe or change your preferences at any time by using an available unsubscribe facility or contacting [email protected].

Withdrawing consent does not affect processing that took place lawfully before withdrawal.

9. Who We May Share Information With

Where necessary and lawful, information may be shared with:

1. A specifically identified logistics business or approved recruitment partner for an authorised introduction 2. Service providers supporting website hosting, forms, email, communications and IT security 3. Verification, accounting, payment, insurance or vehicle-service providers 4. Professional advisers 5. Courts, regulators, law-enforcement bodies or public authorities where required 6. A purchaser or successor if the business is reorganised, subject to appropriate safeguards

YSOMA does not sell personal information.

Service providers acting on YSOMA's behalf must only process information under appropriate instructions and safeguards.

10. International Transfers

Some website, communication or technology providers may process information outside the United Kingdom.

Where a restricted international transfer occurs, YSOMA will use an appropriate lawful transfer mechanism and safeguards.

Further information about relevant safeguards may be requested by contacting [email protected].

11. How Long We Keep Information

YSOMA keeps personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, regulatory or claims requirements.

Retention depends on factors including: 1. Whether an enquiry, membership or business relationship remains active 2. Whether the information is still needed for a requested opportunity 3. Contractual, tax and accounting obligations 4. Consent and communication records 5. The need to establish, exercise or defend legal claims

Information that is no longer required will be deleted, anonymised or securely archived in accordance with YSOMA's retention procedures.

12. Security

YSOMA uses proportionate organisational and technical measures intended to protect personal information from unauthorised access, loss, alteration or disclosure.

No online system can be guaranteed completely secure.

Please do not send unnecessary sensitive information through general website forms or ordinary email.

13. Your Data-Protection Rights

Depending on the circumstances and applicable lawful basis, you may have rights to: 1. Be informed about how your information is used 2. Request access to your information 3. Correct inaccurate or incomplete information 4. Request erasure 5. Request restriction of processing 6. Object to processing 7. Request data portability 8. Withdraw consent 9. Complain to the Information Commissioner's Office

These rights are not absolute and may be subject to legal exceptions.

IMPORTANT — RIGHT TO OBJECT Where YSOMA relies on legitimate interests, you have the right to object to that processing in certain circumstances. You have the right to object at any time to personal information being used for direct marketing.

To exercise a right, contact the Data Protection Officer at [email protected]. YSOMA may need to verify your identity before responding.

14. Automated Decision-Making

YSOMA does not make decisions producing legal or similarly significant effects solely through automated processing.

Profiles may be reviewed against stated requirements, but suitability and introduction decisions involve human consideration.

15. Cookies and Similar Technologies

The website currently uses only technologies that are strictly necessary for website operation, security, form protection and essential functionality.

YSOMA does not currently use optional analytics, advertising or session-recording technologies on the published website.

Further information is available in the Cookie Policy.

If optional technologies are introduced later, they will not be activated until the required information and consent controls are provided.

16. Children

YSOMA's driver and business services are not intended for anyone under 18.

YSOMA does not knowingly collect registration or membership information from children.

17. Complaints

Please contact YSOMA's Data Protection Officer first if you have concerns about how your information has been handled.

Data Protection Officer: Lady Sophia Hull-Assaf Email: [email protected] Phone: 075 70 808 808

You may also complain to: Information Commissioner's Office Website: https://ico.org.uk/make-a-complaint/ Telephone: 0303 123 1113

18. Changes to This Policy

YSOMA may update this policy when its services, data practices or legal obligations change.

The latest version and revision date will be published on this page.

19. Privacy Contact

For privacy questions, data-protection requests, objections or consent withdrawals, contact:

Lady Sophia Hull-Assaf Data Protection Officer YSOMA Logistics Ltd Email: [email protected] Phone: 075 70 808 808

Trading address: 3 Forest Road TW13 7EA The trading address is not an address for correspondence.