CAINDIRECT · LINCOLNSHIRE · PRIVACY POLICY

Privacy Policy

How CainDirect collects, uses, and protects your personal data.

1 WHO WE ARE

CainDirect is a sole trader business operated by Andrew Cain, providing bespoke same-day courier, concierge errand, and health logistics services across Lincolnshire.

Data controller: Andrew Cain, trading as CainDirect
Contact: andrew@caindirect.co.uk · 07795 504 739
Website: caindirect.co.uk

Andrew Cain is the data controller for all personal data processed in connection with CainDirect services. For Health Logistics services, Andrew acts as a data processor on behalf of the instructing healthcare provider, who is the data controller for patient data.

2 WHAT DATA WE COLLECT

CainDirect collects only the personal data necessary to deliver the service and fulfil legal obligations. The data we collect includes:

Client contact data - business name, contact name, telephone number, and email address. Collected when you make an enquiry or booking.

Collection and delivery addresses - the addresses from which and to which consignments are collected and delivered. Collected at the point of booking.

Recipient details - the name of the person receiving a delivery, including named patients for Health Logistics deliveries. Collected at the point of booking or from the instructing healthcare provider.

Proof of delivery records - recipient name, date, time, and confirmation of handover. Created on completion of every delivery.

Billing and invoice records - charges, payment records, and invoice history. Created in the course of providing the service.

Booking and communication records - correspondence and booking details held for the duration of the service relationship.

CainDirect does not collect or process sensitive personal data (as defined under UK GDPR Article 9) in the course of courier or errand services. For Health Logistics, patient names and addresses are processed solely for the purpose of completing the delivery, no clinical or health data is collected or retained.

3 WHY WE PROCESS YOUR DATA

CainDirect processes personal data for the following purposes:

To deliver the service - collection and delivery addresses, recipient details, and contact information are necessary to complete a booking. The legal basis is performance of a contract (UK GDPR Article 6(1)(b)).

To invoice and maintain financial records - billing records are required to fulfil legal and tax obligations. The legal basis is legal obligation (UK GDPR Article 6(1)(c)).

To respond to enquiries - contact details provided in the course of an enquiry are used only to respond to that enquiry. The legal basis is legitimate interests (UK GDPR Article 6(1)(f)).

To maintain proof of delivery records - delivery records protect both CainDirect and the client in the event of a dispute. The legal basis is legitimate interests (UK GDPR Article 6(1)(f)).

CainDirect does not use personal data for marketing purposes and does not send unsolicited commercial communications.

4 HOW LONG WE KEEP YOUR DATA

CainDirect retains personal data for the minimum period necessary for the purpose for which it was collected.

Financial and invoice records - retained for 6 years from the end of the relevant tax year, as required by HMRC.

Proof of delivery records - retained for 12 months from the date of delivery, then securely deleted.

Booking and communication records - retained for the duration of the client relationship and for 12 months following the end of the relationship, then securely deleted.

Enquiry contact data - retained for 3 months from the date of the enquiry where no service relationship is established, then securely deleted.

5 WHO WE SHARE YOUR DATA WITH

CainDirect operates as a single-operator service with no subcontracting and no driver pool. Personal data is not shared with third-party courier operators or delivery agents.

Data may be shared in the following limited circumstances:

HMRC and legal obligations - financial records may be disclosed to HMRC or other authorities where required by law.

Healthcare providers - for Health Logistics deliveries, proof of delivery records may be shared with the instructing healthcare provider (GP practice, pharmacy, or care home) on request.

Professional advisers - accountants or legal advisers may access records in the course of providing professional services to CainDirect. These parties are bound by confidentiality obligations.

CainDirect does not sell, rent, or otherwise transfer personal data to third parties for commercial purposes.

6 HEALTH LOGISTICS - DATA PROCESSING

For Health Logistics services, CainDirect acts as a data processor on behalf of the instructing healthcare provider. The healthcare provider (GP practice, pharmacy, or care home) is the data controller for patient data.

CainDirect processes patient names and delivery addresses solely to complete the delivery as instructed. No patient data is used for any other purpose, shared with any third party, or retained beyond the periods set out in section 4.

Healthcare providers commissioning Health Logistics services are responsible for ensuring that patient data is shared with CainDirect on a lawful basis and in accordance with their own data protection obligations.

7 YOUR RIGHTS

Under UK GDPR you have the following rights in relation to your personal data:

Right of access - you may request a copy of the personal data CainDirect holds about you.

Right to rectification - you may request that inaccurate personal data is corrected.

Right to erasure - you may request that personal data is deleted where there is no longer a lawful basis for retaining it, subject to any legal retention obligations.

Right to restriction - you may request that processing is restricted in certain circumstances.

Right to object - you may object to processing carried out on the basis of legitimate interests.

Right to data portability - where processing is carried out by automated means on the basis of consent or contract, you may request that data is provided in a portable format.

To exercise any of these rights, contact Andrew Cain directly at andrew@caindirect.co.uk or 07795 504 739. Requests will be responded to within 30 days.

8 WEBSITE AND COOKIES

The CainDirect website (caindirect.co.uk) is built on the Wix platform. Wix may set cookies on your device when you visit the website. CainDirect uses Google Analytics to understand how visitors interact with the website, this involves the collection of anonymised usage data including pages visited, time on site, and approximate location. Google Analytics data is not used to identify individual visitors and is not shared with third parties for advertising purposes. For full details of cookies set by the Wix platform, refer to the Wix cookie policy. For information on how Google processes analytics data, refer to Google's Privacy Policy.

CainDirect does not use advertising pixels or other third-party tracking tools on the website.

9 DATA SECURITY

CainDirect takes reasonable steps to protect personal data against unauthorised access, loss, or disclosure. Data is held digitally with appropriate access controls. Physical delivery records are not retained beyond the period set out in section 4.

In the event of a data breach that is likely to result in a risk to individuals, CainDirect will notify the Information Commissioner's Office (ICO) within 72 hours and will inform affected individuals where required.

10 COMPLAINTS AND THE ICO

If you have a concern about how CainDirect handles your personal data, please contact Andrew Cain in the first instance at andrew@caindirect.co.uk. All concerns will be taken seriously and responded to promptly.

If you are not satisfied with the response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO helpline: 0303 123 1113
Website: ico.org.uk
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11 CHANGES TO THIS POLICY

This privacy policy may be updated from time to time. The current version is always available at caindirect.co.uk/resources/privacy. The date at the top of this page indicates when the policy was last revised. Where changes are material, existing clients will be notified directly.