
Comprehensive Privacy Policy
Effective: 01/07/2025 | Version: 5.0
Compliant with: UK GDPR, Data Protection Act 2018, PECR
4. SPECIAL CATEGORY DATA PROCESSING
4.1 Biometric Data (Under-25 Drivers Only):
(a) Types collected:
- Facial stress indicators
- Voice stress analysis
- Pupil dilation metrics
(b) Processing purposes:
- Fatigue detection
- Risk scoring
- Insurance compliance
(c) Retention period: 4 years
4.2 Health Data (Over-65 Drivers):
(a) Medical certificates (MED1 forms)
(b) Driving assessment results
(c) Retention: Duration of rental relationship + 2 years
​
5. INTERNATIONAL DATA TRANSFERS
5.1 Verizon Connect Data Flows:
- Storage location: London AWS datacentre (eu-west-2)
- Transfer mechanism: UK International Data Transfer Agreement
- Safeguards: AES-256 encryption at rest and in transit
5.2 Sub-processors:

6. DATA RETENTION SCHEDULE
6.1 Core Retention Periods:

[CONTINUED - FULL 10 PAGES AVAILABLE AT www.clicknvan.co.uk/privacy]