Data Protection Policy

1. Data Controller

OWG Group, trading as Omni, is the data controller for the personal information we collect through this website and our service operations. We are responsible for deciding how and why your personal data is processed.

2. Personal Data We Collect

• •Contact details: name, email address, phone number, and delivery address.
• •Payment information: processed securely via our payment provider; we do not store full card details.
• •Booking and delivery data: collection/delivery addresses, parcel details, and tracking history.
• •Account information: login credentials (stored securely) and business account details.
• •Driver and partner data: licence details, vehicle information, and right-to-work documentation.
• •Technical data: IP address, browser type, and usage analytics.

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• •Performance of a contract — to fulfil bookings and deliver parcels.
• •Legal obligation — to comply with transport, tax, and employment regulations.
• •Legitimate interests — to operate and improve our business, prevent fraud, and ensure security.
• •Consent — for marketing communications and non-essential cookies, which you can withdraw at any time.

4. How We Use Your Data

• •To process bookings, collections, and deliveries.
• •To communicate with you about your orders and tracking updates.
• •To manage business accounts, invoicing, and payments.
• •To verify driver and DSP partner applications and manage compliance.
• •To respond to customer service enquiries and complaints.
• •To meet legal and regulatory obligations.

5. Data Sharing

• •Delivery partners and subcontractors who handle your parcels.
• •Payment processors (e.g. Stripe) to process transactions securely.
• •Mapping and distance calculation providers for route planning.
• •Email service providers for transactional communications.
• •Regulatory bodies and law enforcement where legally required.
• •We never sell your personal data to third parties.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Booking records are typically retained for 6 years; driver compliance documents for the duration of engagement plus 6 years; inactive account data is deleted after 2 years of inactivity.

7. Data Security

• •We use encryption in transit (TLS) and at rest for stored data.
• •Access to personal data is restricted to authorised personnel on a need-to-know basis.
• •We conduct regular security reviews and staff training on data protection.
• •In the event of a data breach, we will notify the ICO and affected individuals where legally required within 72 hours.

8. International Transfers

As a UK-based company, most data is processed within the UK. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy decisions.

9. Your Data Protection Rights

Under the UK GDPR, you have the following rights:

• •The right to be informed about how we use your data (this policy).
• •The right of access to your personal data.
• •The right to rectification of inaccurate data.
• •The right to erasure ('right to be forgotten') in certain circumstances.
• •The right to restrict or object to processing.
• •The right to data portability.
• •The right to withdraw consent at any time where processing is based on consent.
• •The right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Contacting Us

To exercise your data protection rights or ask questions about how we handle your data, contact us at info@omnisn.com or write to: Data Protection Officer, OWG Group, United Kingdom.