Privacy Policy

1. Who We Are

LCB Transport Ltd ("we", "us", "our") is a transport and courier company registered in England and Wales. Our registered address is Apartment 6, 29 Bishops Close, Erdington, Birmingham, B23 7AY.

For any privacy-related queries, contact us at info@lcbtransport.co.uk or call +44 7383 368666.

2. What Personal Data We Collect

We collect personal data only when you actively interact with our website or services. This includes:

• Identity & contact details — your name, email address, and phone number, entered when requesting a quote or making a booking
• Address & location data — collection address, delivery address, and postcodes entered into our instant quote calculator
• Booking details — van type, service type (Same Day, Next Day, Urgent), cargo type, estimated weight, preferred date and time
• Billing information — billing email address provided during the booking process
• Communications — messages sent to us via WhatsApp, our contact form, or by phone
• Technical data — device type (mobile/tablet/desktop), pages visited, referrer URL, and UTM campaign parameters, collected by our own self-hosted analytics system and stored in our private database. Your IP address is not stored persistently — it is used only at the moment of your visit to determine your approximate city and country for analytics purposes (see Section 4 — ip-api.com), after which it is discarded.
• Approximate location (city/country) — when you visit our website, your IP address is used to determine your approximate city and country via the ip-api.com geolocation service. Only the city name and country are stored in our analytics database — your IP address itself is not retained. This data is used solely to understand which regions our visitors come from.
• Calculator search data — when you use our instant quote calculator and a price result is displayed, we record the collection postcode, delivery postcode, van type, service type, estimated distance and estimated price. This data is stored anonymously, linked only to your random session identifier, and is used to understand which routes are most in demand so we can improve our service and pricing.
• IP address — your IP address is used at the moment of your visit for two purposes: (1) to determine your approximate city and country via ip-api.com (the IP itself is not stored); and (2) for security rate-limiting of repeated failed admin login attempts, in which case it is temporarily stored and automatically deleted after 30 minutes.
• Live GPS location data (drivers) — when a driver uses our driver app or driver portal, their real-time GPS coordinates are transmitted to our server every 10 seconds while a job is active. This data is used solely to power the live tracking feature for the customer and is not retained beyond the active job session.
• Proof of Delivery (POD) photos — photos uploaded by our driver at the point of delivery. These images are stored securely on our server and are accessible only to the customer via their unique tracking link and to our admin team.
• Tracking code usage — when a customer uses a tracking link, we record access to the tracking session for job management purposes only.

3. How We Collect Your Data

We collect data through the following means on our website (lcbtransport.co.uk):

• Quote calculator — when you enter postcodes, select a van type, service type, weight and cargo type to receive an instant price estimate
• Booking form — when you provide your name, addresses, phone number and email to confirm a booking via WhatsApp
• Contact form — when you send us a direct message or enquiry
• WhatsApp — when you use our WhatsApp quick quote or booking button
• Live tracking portal — when a customer enters their unique tracking code to follow their delivery, we record access to that tracking session. No personal account is required.
• Driver app & driver portal — our drivers use a dedicated mobile application (Android/iOS) or web portal to update job status (e.g. On My Way, Loaded, Delivered) and upload proof of delivery photos. GPS location is transmitted automatically during an active job.
• Cookies & browser storage — our website stores your cookie preference, availability settings, and pricing rates in your browser's localStorage and sessionStorage. This data stays on your device and is not transmitted to our servers unless you submit a form.
• Our self-hosted analytics — when you visit our website, our server automatically records: an anonymous random session identifier (generated in your browser), the page you visited, the referring website (if any), your device type (mobile/tablet/desktop), any UTM campaign parameters from the URL, and your approximate city and country (derived from your IP address via ip-api.com — your IP itself is not stored). We also record specific actions such as viewing a price calculation result (including the postcodes entered, van type, service type, distance and estimated price), clicking the WhatsApp button, and how far down the page you scroll. None of this data is linked to your name or personal identity.

4. Third-Party Services We Use

Our website and apps use the following third-party services, each with their own privacy practices:

• ip-api.com — we use ip-api.com to convert your IP address into an approximate city and country for our analytics dashboard. Your IP address is sent to ip-api.com at the moment of your visit. Only the resulting city and country name are stored by us — your IP address is not retained. ip-api.com operates under its own privacy policy available at ip-api.com/docs/legal.
• postcodes.io — a free, open-source UK postcode lookup API. When you enter a postcode into our calculator, it is sent to api.postcodes.io to retrieve geographic coordinates. No personal data beyond the postcode itself is transmitted. See postcodes.io.
• OpenStreetMap & OSRM — our interactive map uses Leaflet.js with OpenStreetMap tiles and OSRM for road routing. Your postcodes/coordinates are used to draw the route on screen. OpenStreetMap data is © OpenStreetMap contributors. See openstreetmap.org/copyright.
• Carto (basemaps.cartocdn.com) — our live tracking map uses Carto dark map tiles. Your IP address may be logged by Carto's CDN as part of the tile request. See carto.com/privacy.
• Nominatim (OpenStreetMap) — used for address autocomplete when entering collection and delivery addresses. Your partial address input is sent to nominatim.openstreetmap.org. No account or personal data is stored by this service.
• WhatsApp (Meta) — when you click our WhatsApp buttons, you are redirected to WhatsApp. Any conversation you have is subject to Meta's privacy policy. We receive your WhatsApp number and messages. See whatsapp.com/legal/privacy-policy.
• Google Ads (Conversion Tracking) — we use Google Ads to advertise our services and measure the effectiveness of our campaigns. Our website includes a Google tag (gtag.js) which fires a conversion event when you submit a booking via WhatsApp. This allows us to understand how many bookings result from our adverts. No personal data from your booking form is sent to Google — only a signal that a conversion action occurred. You can opt out of Google's advertising personalisation at adssettings.google.com. See Google Privacy Policy.
• Google Search Console — we use Google Search Console to monitor how our website appears in Google Search results, understand which search queries lead visitors to our site, and identify technical issues. Google Search Console does not place cookies on your device and does not track individual users. It uses aggregated, anonymised data collected by Google's search crawler and does not receive any personal data you enter on our website. See Google Privacy Policy.
• Google Fonts — our website loads fonts from Google Fonts. Google may collect your IP address as part of this request. See Google Privacy Policy.
• Leaflet.js — loaded from unpkg.com CDN for our interactive map. A standard CDN request is made which may log your IP address.
• Expo (expo.dev) — our driver mobile application is built using the Expo framework for React Native. The app does not collect any analytics or usage data beyond what is described in this policy. See expo.dev/privacy.
• Device GPS (driver app) — our driver app requests foreground and background location permissions on the driver's device. GPS coordinates are transmitted to our server only when a job is active. Location tracking stops automatically when the job ends. Drivers may revoke location permissions at any time via their device settings.
• Business directories (Yell.com, Bark.com, FreeIndex, Thomson Local, Hotfrog, Cylex) — our business is listed on various UK business directories for the purpose of improving our search engine visibility. These listings contain our business name, address, phone number, website URL and a business description. If you contact us via one of these platforms, your enquiry may be subject to that platform's own privacy policy. We do not share any of your personal data with these platforms.

5. How We Use Your Data

We use the personal data we collect solely for the following purposes:

• To calculate and provide you with an instant price estimate
• To understand how visitors use our website — which pages they visit, which devices they use, and which actions they take — so we can improve our service. This is done using our own self-hosted analytics system and does not involve any third-party tracking platforms.
• To process and confirm your transport booking
• To contact you regarding your booking, provide updates, and confirm collection/delivery details
• To generate and send invoices (proforma and final)
• To power the live GPS tracking feature — displaying your driver's real-time location on the tracking page accessible via your unique tracking link
• To display delivery milestone updates (On My Way, Collected, Loaded, Delivered) on your tracking page
• To provide Proof of Delivery (POD) photos, visible only to you via your tracking link and to our admin team
• To respond to enquiries submitted via our contact form or WhatsApp
• To maintain booking records as required by UK tax law
• To improve the performance and usability of our website and driver app

We do not use your data for unsolicited marketing, and we do not sell or rent your data to any third party.

6. Legal Basis for Processing (UK GDPR)

We rely on the following lawful bases under the UK GDPR:

• Contract performance (Article 6(1)(b)) — processing your name, address, contact details and booking information is necessary to fulfil your transport booking or provide you with a quote
• Legal obligation (Article 6(1)(c)) — retaining booking and invoice records for 6 years as required by HMRC and UK tax law
• Legitimate interests (Article 6(1)(f)) — improving our website, responding to general enquiries, and maintaining basic technical logs. We have assessed that these interests do not override your rights.
• Legitimate interests (Article 6(1)(f)) — for our self-hosted website analytics. We have a legitimate interest in understanding how our website is used in order to improve it. Our analytics system is self-hosted, collects only anonymous data, and does not involve any third-party tracking platforms.
• Consent (Article 6(1)(a)) — for non-essential cookies. You are asked for consent via our cookie banner when you first visit the site and can withdraw consent at any time.

7. Cookies & Browser Storage

Our website uses cookies and browser storage (localStorage / sessionStorage) as follows:

• lcb_cookies (localStorage) — stores your cookie consent choice (accepted or declined). Essential.
• lcb_availability (localStorage) — stores the availability status shown on the website (set via the admin panel). No personal data.
• lcb_rates (localStorage / sessionStorage) — caches the current pricing rates for the quote calculator. No personal data.
• lcb_terms (localStorage) — stores the terms & conditions text for invoice generation. No personal data.
• lcb_visitor_sid (sessionStorage) — a randomly generated anonymous session identifier used by our self-hosted analytics system to count page views and actions within a single browsing session. It contains no personal information, is not linked to your identity, and is cleared automatically when you close your browser tab.
• bannerClosed (sessionStorage) — records whether you have dismissed the urgent banner for the current session. Cleared when you close your browser.

The localStorage items listed above contain no personal data — they are configuration and preference settings stored entirely on your device. The lcb_visitor_sid sessionStorage item is an anonymous random identifier used only to group your actions within a single session for analytics purposes. It cannot be used to identify you personally.

You can clear all browser storage at any time via your browser settings (Settings → Privacy → Clear browsing data).

8. Who We Share Your Data With

We share your personal data only in the following limited circumstances:

• Our own backend (api.php / lcbtransport.co.uk) — when you submit a booking, your details are sent to our secure server hosted at lcbtransport.co.uk and stored in our private database for booking management and invoicing purposes
• WhatsApp (Meta) — booking details are shared with you via WhatsApp for confirmation. You initiate this contact.
• Legal authorities — if required to do so by law, court order, or regulatory authority

We do not share your data with any marketing companies, data brokers, or other third parties.

9. How Long We Keep Your Data

• Booking and invoice records — retained for 6 years from the date of the transaction, as required by HMRC for tax purposes
• Live GPS location data — transmitted in real time during an active job only. Location data is not stored persistently — only the most recent coordinates are retained in the database and are overwritten with each update. Once tracking is turned off, no further location data is stored.
• Proof of Delivery (POD) photos — stored on our server for as long as the associated booking record is retained (6 years), then deleted
• General enquiries — retained for 12 months from the date of last contact
• WhatsApp messages — subject to your own WhatsApp retention settings; we may retain message history in our WhatsApp account until manually deleted
• Browser storage data — stored on your device indefinitely until you clear your browser data; contains no personal information

10. Data Security

We take the security of your personal data seriously and implement the following measures:

• Our website is served over HTTPS (TLS encryption) at all times
• Our backend API uses token-based authentication to prevent unauthorised access
• Our booking database is hosted on a private server and is not publicly accessible
• Access to booking records and invoices is restricted to authorised personnel only via a password-protected admin panel
• The driver app communicates with our server exclusively over HTTPS. GPS data is transmitted securely and is only accessible to the customer via their unique tracking code and to our admin team.
• Proof of Delivery photos are stored server-side and are only accessible via the customer's unique tracking link

No method of internet transmission is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

11. Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct any inaccurate or incomplete data
• Right to erasure — ask us to delete your data, subject to our legal retention obligations
• Right to restriction — ask us to limit how we process your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing carried out on the basis of legitimate interests
• Right to withdraw consent — withdraw cookie consent at any time by clearing your browser's localStorage

To exercise any of these rights, email us at info@lcbtransport.co.uk or call +44 7383 368666. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

12. Children's Privacy

12. Children's Privacy

Our services are intended for adults and businesses. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us immediately at info@lcbtransport.co.uk and we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: info@lcbtransport.co.uk
• Phone: +44 7383 368666
• WhatsApp: Chat on WhatsApp
• Address: LCB Transport Ltd, Birmingham, United Kingdom