Last updated: 2 July 2026

Who we are

Onward 2 Upward Ltd (company number 12707392), trading as Why Knott Hire, is the data controller for the personal information described in this policy. We are registered with the Information Commissioner’s Office (ICO) under registration number ZB575356. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact us about your data: [email protected] · 07983 896389 · Why Knott Hire, 20 Coegnant Close, Brackla Industrial Estate, Bridgend CF31 2AY.

What we collect

• Identity and contact details — name, address, email, phone number and date of birth.
• Driver and licence details — photocard driving licence, DVLA licence check code, and endorsement/penalty-point information, for every named driver.
• Proofs of address — two documents, as required for hire.
• Booking and payment details — your bookings, extras and payment history. Card payments are processed securely by Opayo (Elavon); we never see or store your full card number.
• Communications — emails, calls, WhatsApp messages and website chat (including conversations with our AI assistant).
• Website usage — analytics data, collected only if you consent to analytics cookies.
• Vehicle location — our motorhomes may be fitted with GPS trackers, used for security, recovery of the vehicle, and investigating suspected breaches of the hire terms.

Why we use it (lawful bases)

• To perform our contract with you — managing bookings, payments, vehicle handover, your customer portal and support.
• Legal obligations — verifying driving licences, keeping tax and accounting records, and responding to police, DVLA, toll and parking authorities (including transferring liability for fines and charges incurred during your hire).
• Legitimate interests — protecting and recovering our vehicles, managing damage claims and security deposits, preventing fraud, recovering debts and improving our service.
• Consent — marketing emails and analytics/marketing cookies. You can withdraw consent at any time.

Who we share it with

• The DVLA (driving licence verification).
• Our insurers and brokers (arranging your cover).
• The RAC (breakdown assistance).
• Opayo / Elavon (card payment processing).
• Xero (accounting and invoicing).
• Police, DVLA, toll, parking and other enforcement authorities where we are required to identify the driver.
• Our IT and hosting providers (including Supabase and Vercel) and Anthropic, which processes website chat conversations.
• Meta, if you contact us on WhatsApp.
• Google Analytics and Microsoft Clarity — only if you consent to analytics cookies.
• Our professional advisers where necessary.

We never sell your personal data.

International transfers

Some of our providers process data outside the UK (for example in the USA). Where they do, the transfer is protected by UK adequacy regulations or the UK International Data Transfer Agreement/Addendum and appropriate safeguards.

How long we keep it

• Booking, hire and payment records — up to 7 years (tax rules and potential legal claims).
• Driver documents — only as long as needed for the hire and any claims arising from it.
• GPS location data — short-term, unless needed for an incident.
• Marketing preferences — until you unsubscribe.

Your rights

You have the right to access, correct, delete or restrict your personal data, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time. Exercising your rights is free of charge — email [email protected] and we will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113 (our ICO registration: ZB575356).

Cookies

See our Cookie Consent page for details of the cookies we use and to change your choices. Analytics and marketing cookies are only set with your consent. With your consent we also set one cookie of our own, wkh_attr_ft, which remembers how you first found us — for example that you arrived from an advert — so that we can tell which of our advertising actually works. It is shared with our booking site, bookings.whyknotthire.co.uk, because that is a separate address and the answer would otherwise be lost in between. It holds no name, email address or booking details, it lasts 90 days, and declining analytics means it is never set.

Changes to this policy

Any changes to this policy will be published on this page.