LEGAL
Privacy Policy
This policy explains how Aim Group France Ltd collects and processes personal data as a data controller under UK GDPR and the Data Protection Act 2018.
1. Who we are
Aim Group France Ltd is the data controller for personal data collected via this website, our customer accounts, and the freight operations we carry out on your behalf.
2. What data we collect
We collect the following categories of personal data:
- Contact data — names, business email addresses, business phone numbers, job titles of operational and commercial contacts at your organisation.
- Booking data — addresses, contact persons, dock instructions, vehicle registrations, driver names where required for security or site access.
- Customs data — EORI numbers, commodity codes, consignee and consignor details, commercial invoice content. Some of this data is required by HMRC and DGDDI by law.
- Financial data — invoice and billing details, bank account details for payment of invoices.
- Website data — IP address, browser type, pages visited, referring page (via essential analytics only). See our cookie policy.
3. How we use it
- To quote, plan, execute and invoice freight movements on your behalf.
- To make customs declarations to HMRC, DGDDI and other customs authorities where required to move your goods.
- To communicate with you about live consignments, account matters, and operational changes that affect your freight.
- To meet regulatory record-keeping obligations under HMRC, DVSA, and EU customs requirements.
- To prevent fraud, secure our systems, and resolve disputes.
4. Legal bases
We process personal data on the following legal bases under UK GDPR Article 6:
- Contract performance — to perform the freight services we are contracted to perform for your organisation.
- Legal obligation — to satisfy customs, tax, transport-licence, and other regulatory requirements.
- Legitimate interest — to operate the business, respond to enquiries, and maintain operational records.
- Consent — only where consent is the appropriate basis (e.g. for any optional marketing communications).
5. Who we share it with
- HMRC, DGDDI, and other competent customs authorities where required for clearance and declaration purposes.
- Sub-contractors who carry portions of a movement on our behalf — including our pallet network partner, ferry operators, and final-mile carriers.
- Our customs software providers and IT/cloud infrastructure providers, who act as data processors on our instructions.
- Our auditors, insurers, and legal advisers in the conduct of normal business administration.
- Law enforcement and regulators where we are legally required to disclose.
We do not sell personal data to any third party.
6. International transfers
Our work is by definition cross-border. Personal data necessarily moves between the UK, France, and other EU member states as part of customs declarations and operational execution. Where data is transferred outside the UK we rely on UK adequacy regulations and, where required, standard contractual clauses.
7. Retention
Customs records are retained for the period required by HMRC and DGDDI (currently six years from declaration). Accounting records are retained for the period required by HMRC (currently six years). General operational and contact records are retained while your account is active and for a reasonable period after closure.
8. Your rights
Under UK GDPR you have rights including access, rectification, erasure (subject to our legal retention obligations), restriction, portability, and objection. Where we rely on consent, you can withdraw it at any time. To exercise any right, contact us at .
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority — see ico.org.uk.
9. Security
We apply technical and organisational measures to protect personal data, including access controls, encryption in transit, and segregation of systems handling customs data.
10. Changes
We update this policy when our processing changes. The latest version is always at this URL.
11. Contact
Contact the data controller.