Effective Date: October 31, 2025
Data Controller: G.L. & Sons Logistics
1. Introduction and Scope
G.L. & Sons Logistics (referred to as “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, and process your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to all personal data collected through our website: https://glandson.com, and in connection with the freight transport and logistics services we provide.
Data Controller Contact Details:
- Data Controller: Chintan Shah (or relevant director/owner)
- Address: Glasgow, Scotland, United Kingdom (as per contact details)
- Email for Privacy Matters: chintan@glandson.com
2. The Personal Data We Collect
We collect and process various types of personal data to conduct our business and provide services. This includes:
| Category of Data | Examples of Data Collected | Purpose of Collection |
| Identity Data | Name, job title, company name. | To identify you and your business when providing a quote or service. |
| Contact Data | Business address, email address, telephone numbers. | To communicate regarding services, delivery updates, and invoicing. |
| Financial/Transaction Data | Payment information (e.g., bank details for invoicing/payments), details of services purchased. | To process payments, manage contracts, and fulfill legal accounting obligations. |
| Technical Data | Internet Protocol (IP) address, browser type, operating system, and data collected via Cookies (see below). | To secure our website, analyze website usage, and improve services. |
| Communication Data | Information you provide when submitting an enquiry form, email, or telephone call. | To respond to your requests and manage customer relationships. |
| Logistics/Shipment Data | Consignee names, delivery addresses, collection points, specific delivery instructions. | Essential for the performance of our contract (delivering freight). |
3. How We Collect Your Personal Data
We use different methods to collect data from and about you, including:
- Direct Interactions: You provide data when you fill out forms on our website (e.g., quote requests, contact forms), correspond with us by email or phone, or enter into a contract for our logistics services.
- Automated Technologies: As you interact with our website, we automatically collect Technical Data via cookies, server logs, and other similar technologies. Please refer to our separate Cookie Policy for full details.
- Third Parties: We may receive Identity and Contact Data from third-party partners (e.g., freight forwarders, networking sites) when they introduce us to you for service provision.
4. Lawful Basis for Processing
Under UK GDPR, we must have a lawful basis to process your personal data. We rely on the following bases:
| Purpose of Processing | Lawful Basis under UK GDPR |
| To provide logistics services (Quotes, Collections, Deliveries, Tracking) | Performance of a Contract (with you or your employer). |
| To manage payments and invoicing | Performance of a Contract and Legal Obligation (for tax and accounting). |
| To respond to general enquiries and website form submissions | Legitimate Interests (to grow our business and answer non-contractual communication). |
| To use non-essential cookies (Statistics, Marketing) | Consent (You must actively give consent via our cookie banner). |
| To comply with legal or regulatory requirements | Legal Obligation (e.g., responding to lawful requests from authorities). |
5. Cookies and Tracking Technologies
Our website uses cookies, scripts, and web beacons. These are covered in detail in our separate Cookie Policy (UK), which is linked from our website footer.
In summary:
- Strictly Necessary Cookies are used for essential website function (e.g., storing your consent preferences) and do not require consent.
- Statistics and Marketing Cookies are only used if you provide explicit Consent via our cookie banner.
6. Disclosure of Your Personal Data
We may share your personal data with the following parties:
- Internal Third Parties: Other companies or divisions within G.L. & Sons Logistics necessary for providing the requested service (e.g., sharing a delivery address with the operating depot).
- External Third Parties (Processors): Trusted service providers who process data on our behalf, such as:
- IT and system administration service providers (e.g., website hosting, email servers).
- Professional advisors (e.g., accountants and legal advisors).
- Logistics Sub-Contractors/Carriers: To complete your contracted delivery, we must share names, contact details, and addresses with our trusted partner networks.
We only allow our third-party service providers to process your personal data for specified purposes and in accordance with our instructions and the law.
7. Data Security and Retention
Security
We have implemented appropriate security measures (technical and organizational) to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way.
Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
Generally, we keep customer and transaction data for a minimum of six years after a contract ends to comply with UK tax law. Data collected via website analytics will be retained according to our cookie policy and the retention periods set by the provider (e.g., Google Analytics).
8. Your Legal Rights (UK GDPR)
Under UK GDPR, you have the following rights regarding your personal data:
- The right to be informed: You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for (this policy fulfills this right).
- The right of access: You have the right to request a copy of the personal data we hold about you (a Subject Access Request).
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
- The right to erasure (‘right to be forgotten’): You have the right to request that we delete your personal data, under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
- Rights in relation to automated decision-making and profiling.
If we process your data based on Consent, you have the right to withdraw that consent at any time.
9. Exercising Your Rights and Complaints
To exercise any of the rights listed above, please contact us at chintan@glandson.com.
If you are not satisfied with our response or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the UK supervisory authority:
The Information Commissioner’s Office (ICO)
- Website:
https://www.ico.org.uk/
This policy is a strong foundation. Would you like me to make any specific modifications or additions based on other services G.L. & Sons may provide?