Privacy Notice

1. Who we are

Skyway Investments Ltd (trading as Swifty Lease) is the "controller" responsible for your personal data.

2. The personal data we collect

Depending on your relationship with us, we may collect:

• Identity & contact details — your name, date of birth, home address, phone number and email address.
• Driving licence details — your driving licence number, categories, validity and endorsements, a photo or scan of your licence, and (where required) a DVLA "check code" so we can confirm your entitlement to drive.
• Rental information — the vehicle hired, hire dates, mileage, deposit and payment details, and the signed rental agreement.
• Incident & enforcement information — records of damage, accidents, insurance claims, penalty charge notices (PCNs), fines and traffic offences relating to your hire.
• Correspondence — messages you send us (including by phone, email or WhatsApp) and enquiries you submit through our website.
• Marketing preferences — whether you have asked not to receive marketing.

We do not routinely collect special category data. Your driving licence is sensitive personal information and we handle it with particular care.

3. How we collect it

We collect most of this data directly from you — when you enquire, when you provide your licence and details to book, and during the hire. Where you send us a copy of your licence by WhatsApp or another messaging service, the image is encrypted in transit; once we have checked it, we move it to secure storage promptly and delete it from the message thread and device gallery.

We may also receive data from third parties, such as the DVLA (to verify your licence), insurers, and the authorities that issue PCNs and traffic fines.

4. Why we use it, and our lawful bases

Under the UK GDPR we must have a lawful basis for using your data. We rely on the following:

We rely on contract, legal obligation and legitimate interests — not consent — to process your licence and hire data, because this processing must continue throughout and after the hire (for example to deal with DVLA, PCNs or debt recovery) and cannot simply be withdrawn part-way through. The one exception is optional marketing, which we only send with your consent and which you can stop at any time.

5. Who we share it with

We only share your data where necessary, with:

• The DVLA, to verify your driving entitlement;
• Our insurers and insurance brokers;
• The police and other enforcement or regulatory authorities where we are required to;
• Local authorities, Transport for London and other bodies that issue PCNs and traffic fines, in order to identify the driver responsible;
• Payment providers, our accountant, and debt-recovery agents where needed;
• HMRC and other government bodies where the law requires;
• Our IT, hosting and professional service providers, who act on our instructions.

We do not sell your personal data. Where a provider processes data outside the UK, we make sure appropriate safeguards are in place.

6. How long we keep it

We keep your personal data for 6 years after the end of our relationship or the resolution of any matter relating to your hire (such as PCNs, claims or debts), to meet our legal, tax and insurance obligations and to defend potential claims. Where we do not need to keep the full image of your licence for that period, we keep only the record that the check was carried out, rather than the scan itself. If you ask us not to send marketing, we keep a minimal record of that request so we can honour it.

7. How we keep it safe

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Licence images and sensitive records are stored securely and access is limited to those who need it to do their job.

8. Your rights

Under the UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you;
• Ask us to correct data that is wrong or incomplete;
• Ask us to erase your data, where there is no ongoing legal or contractual reason to keep it;
• Ask us to restrict or object to how we use your data, including objecting to direct marketing at any time;
• Ask us to transfer certain data to you or another provider;
• Withdraw consent, where we rely on consent for a particular use.

We do not make decisions about you using solely automated processing. To exercise any of these rights, contact us using the details in section 1. We will respond within one month.

9. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at enquiries@swiftylease.co.uk so we can try to put it right. We will acknowledge your complaint and respond as soon as we can.

10. Changes to this notice

We may update this notice from time to time. When we do, we will change the "last updated" date at the top. Please check back for the latest version.