Privacy & Cookie Policy.
How we collect, use and look after personal data — including anything you send us through the driver intake and enquiry forms.
Last updated: 17 September 2026
Who we are
Overdrive Group Ltd (“Overdrive Group”, “we”, “us”) — company number 17460514, registered in England and Wales — is the data controller for the personal data described in this policy. Our registered office is Unit A, 82 James Carter Road, Mildenhall Industrial Estate, Bury St. Edmunds, England, IP28 7DE.
For any data protection query, contact info@overdrivegroup.co.uk.
What we collect and why
Driver intake form (/driver-intake): if you apply to join our driver network, we collect additional information to assess your application — including, where you choose to provide it, DBS (Disclosure and Barring Service) status. Full details of what we collect and why are set out in the privacy notice on that page.
Enquiry form (/contact): name, company or organisation, email, phone, and your message. We collect this to respond to your enquiry and, where relevant, to arrange our services.
Legal basis for processing
Most information is processed on the basis of our legitimate interest in running a driving-talent supply and recruitment business, and, where you are engaged as a contractor, on the basis of contract. DBS and certificate information is special category / more sensitive data: we only collect and process it with your explicit consent, given via the consent checkbox on the driver intake form, and only where a role involves under-18s or vulnerable clients.
Data retention
We keep personal data only for as long as it is needed for the purposes set out above, then delete it or securely destroy it. In practice that means:
- Driver records: kept for as long as you remain part of our hand-picked driving talent pool, and reviewed periodically. You can ask us to delete your record at any time.
- Enquiry records: kept for up to 12 months from the date of enquiry, unless a longer period is needed to progress a booking or resolve a query.
- DBS/certificate data: kept only as long as necessary for the purpose it was provided, and deleted or securely destroyed once no longer needed.
Your rights
Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, to object to or restrict our processing, and to withdraw consent at any time where processing is based on consent (this won’t affect processing carried out before you withdrew it). To exercise any of these rights, contact info@overdrivegroup.co.uk. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you believe your data has been mishandled.
Complaints
If you are unhappy with how we have handled your personal data, please tell us — email info@overdrivegroup.co.uk. We will acknowledge your complaint within 30 days and look into it without undue delay.
If you are not satisfied with how we have dealt with it, you can also complain to the Information Commissioner’s Office (ico.org.uk), the UK’s independent data protection regulator.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it was last revised.
Questions about this policy?
To exercise a right, ask a question, or request deletion of your record, email us directly.