We are committed to protecting your personal data and handling it in line with the UK GDPR and the Data Protection Act 2018. This statement summarises your data‑protection rights and how to exercise them. For the full detail of what we collect, why, who we share it with and how long we keep it, please see our Privacy Policy.
1. Who is responsible for your data
Data Controller:
Onward 2 Upward Ltd trading as Why Knott Hire
56 Woodland Avenue, Pencoed, Bridgend, CF35 6UP
Company registration: 12707392
ICO registration number: ZB575356
Data‑protection contact:
Email: info@whyknotthire.co.uk · Phone: 07983 896389
2. The lawful bases we rely on
We only process your personal data where we have a lawful basis to do so under Article 6 (and, for documents such as driving licences, Article 9 where relevant) of the UK GDPR:
| Lawful basis | When we use it |
|---|---|
| Contract | To take and fulfil your motorhome hire — your booking, payments, confirmations and hire documents. |
| Legal obligation | To verify drivers with the DVLA, keep financial/VAT records (HMRC) and meet our hire‑licensing duties. |
| Legitimate interests | To run and secure our booking system, prevent fraud, and provide customer support (including our AI chat). |
| Consent | For anything optional — e.g. enabling browser notifications. You can withdraw consent at any time. |
3. Your rights under UK GDPR
You have the following rights over the personal data we hold about you:
- Right of access — request a copy of the personal data we hold about you (a Subject Access Request).
- Right to rectification — ask us to correct data that is inaccurate or incomplete.
- Right to erasure (“right to be forgotten”) — ask us to delete your data, where we are not legally required to keep it (e.g. HMRC records for 7 years).
- Right to restriction — ask us to pause processing of your data in certain circumstances.
- Right to data portability — receive your booking data in a structured, machine‑readable format.
- Right to object — object to processing based on our legitimate interests.
- Rights around automated decisions — request a human review of any automated check (such as a DVLA licence check) that affects you.
- Right to withdraw consent — where we rely on consent, withdraw it at any time.
4. How to exercise your rights
To make any of the requests above, contact us at info@whyknotthire.co.uk or write to us at the address above. There is normally no charge, and we will respond within one month. We may ask you to verify your identity first so we can be sure we are dealing with the right person.
5. International data transfers
Your booking and customer data is hosted in the United Kingdom. The main transfer outside the UK is the content of AI chat messages, processed by Anthropic (US) to generate replies. Where personal data is transferred outside the UK, we use UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) and only work with appropriately certified processors. Full details are in our Privacy Policy.
6. How long we keep your data
We keep personal data only as long as necessary — for example, booking and financial records for 7 years (HMRC), and driving‑licence and proof‑of‑address documents for 60 days after your hire returns, after which they are automatically deleted. We only keep your details for marketing while you are subscribed to our mailing list, and once a booking's seven-year financial-record period has elapsed the personal data held against it is erased unless you remain subscribed. Our full retention schedule is set out in the Privacy Policy. After the relevant period, data is securely deleted.
7. Data breaches
We take the security of your data seriously. In the event of a personal data breach that poses a risk to your rights, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, notify you directly.
8. How to complain
If you are unhappy with how we have handled your personal data, please contact us first at info@whyknotthire.co.uk so we can put it right.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): Website ico.org.uk · Helpline 0303 123 1113 · Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.