Book A Movement Ltd and BAM connect Privacy Policy

Effective date: 27/10/2026

This privacy policy explains how Book A Movement Ltd (“BAM”, “we”, “us” or “our”) handles personal information in connection with our vehicle logistics website, platform and BAM.connect mobile application. It covers drivers, logistics-company and dealer users, collection and delivery contacts, vehicle recipients and people who contact us. Additional services may have supplementary privacy notices.

1 Who we are and how to contact us

Book A Movement Ltd provides services that help dealers, logistics companies and drivers arrange, manage and document vehicle movements.

Privacy enquiries and data requests: [email protected]. Please include “Privacy request” in your subject line.

Postal address: Book A Movement Ltd, 1st Floor, 3 Diamond Avenue, Kirkby in Ashfield, Nottinghamshire, NG17 7GP].

BAM acts as a data controller where we determine why and how information is used, including for our business relationships, account administration, billing, service security and enquiries. For some vehicle-movement and inspection information, BAM processes data on instructions from a dealer, logistics company or other business customer acting as controller. That organisation’s notice also explains its use of the information. Our role depends on the particular processing and contractual arrangements; we do not assume that all platform data has the same controller.

You may contact us about information held through BAM even if another organisation is responsible for it. Where appropriate, we will assist or direct your request to that organisation.

2 Information we handle and where it comes from

Information is provided by you, your employer or contracting logistics company, dealers, booking organisations, collection/delivery contacts, and the service providers involved in a movement. Some information is generated when you use our systems.

We do not need your phone’s entire contacts list or private message inbox merely because you enter a job contact or compose a message using another application.

3 Why we use information and our lawful bases

The following bases describe proposed processing where BAM acts as controller. Where we act as processor, the relevant controller determines its lawful basis and we process according to its lawful instructions.

Where we rely on legitimate interests, we consider the necessity of the processing and balance those interests against your rights. You can ask us for information about that assessment and object to the processing. Where we rely on consent, you can withdraw it without affecting processing lawfully carried out before withdrawal. A device permission is not, by itself, the lawful basis for every subsequent use of the information.

4 Location and device permissions

BAM.connect uses location for enabled movement features such as arrival checks, routing, nearby road tools, progress information and evidence of where an inspection or job action took place. Location evidence attached to a saved record can remain with that record after location access is turned off.

BAM.connect does not currently provide live tracking of drivers or share a live location feed with BAM staff, logistics companies, dealers or customers.

Location and route information is used to calculate routes and estimated arrival times. Where enabled, the app also records location at specific job actions, such as arrival checks and collection or delivery inspections. These individual location records may be retained with the associated job or inspection evidence; they do not constitute continuous live tracking.

You can manage camera, location, microphone and notification permissions through your device settings.

If you decline or withdraw a permission, features that do not depend on it remain available. Camera access is needed to take inspection photographs. Location access supports location-based route and ETA calculations, arrival checks and inspection location evidence. Microphone access is needed only for features that use voice input. Disabling notifications prevents the app from displaying notifications through that permission.

Where a permission is needed to complete a particular action, that action may be unavailable until the permission is granted.

Camera access supports inspection photography. Notifications provide operational updates where enabled. Microphone access, where available, supports the voice feature described in section 2. Permission to access a feature does not mean all data available through that permission is collected.

5 Inspections local storage and own job synchronisation

The app saves job information and inspection evidence on the device so work can continue when connectivity is limited. BAM-job records and photographs are transmitted to BAM as part of the movement workflow. Driver-created “own jobs” can also be synchronised to BAM’s servers, including associated inspection evidence and POC/POD documents, to support backup and restoration on another authorised device.

Own-job data is therefore not exclusively stored on the phone. Synchronisation may begin after sign-in and continue while you use the app; restoration time depends on connection and file sizes. Local records may remain after signing out. Uninstalling the app or clearing its data may remove local copies, and we cannot restore information that was never successfully backed up.

To reduce upload size, the app can create resized JPEG copies while retaining original local photographs. PDFs can use separate display copies to reduce memory use. Resizing a copy does not itself delete the original evidence or establish a retention period.

6 Who receives information

We disclose relevant information only where needed for the purposes described here, subject to access controls and applicable arrangements. Recipients can include:

• Authorised BAM staff and support personnel.
• The relevant logistics company, dealer, movement-booking organisation and authorised collection/delivery recipients, where their role requires access to job information or evidence.
• Service providers acting on our behalf for hosting, storage, communications, notifications, technical support, mapping and other enabled functions.
• Payment providers and professional advisers, where necessary for billing, accounting, insurance, claims or legal advice.
• Authorities where disclosure is legally required or otherwise lawfully necessary, and appropriate parties involved in a business transfer with suitable protections.
• We use service providers to support hosting and storage, route and ETA calculations, notifications, communications and other enabled app features. These providers receive the information needed to perform their particular function. For example, a routing provider may receive journey locations, while a notification provider may receive a device notification token and notification content.
• Where providers process personal information on BAM’s behalf, they act under our instructions and appropriate contractual arrangements. Where a provider determines its own purposes for processing, its own privacy notice also applies.
• If you choose to share a document or location using an external email, messaging or navigation application, information is passed to that service and your selected recipients. Their own privacy arrangements govern their use and retention of that information. Deleting a record from BAM does not automatically delete copies already received by others.
• We do not sell personal information. We do not use inspection photographs, signatures or precise location records for targeted advertising.

7 International processing

BAM is based in the United Kingdom. However, some service providers may store, access or process personal information outside the UK when supporting our services. A provider’s UK office or UK hosting location does not necessarily mean that all processing and support access take place within the UK.

Where a transfer is subject to UK international data-transfer requirements, we ensure that an appropriate transfer mechanism applies. This may include UK adequacy regulations or approved contractual safeguards, together with any required assessment and additional protections.

You can contact [email protected] for information about the countries in which your information is processed, the safeguards applicable to a particular transfer, and how to obtain a copy of those safeguards, subject to necessary redactions.

8 How long information is kept

We keep personal information only for as long as needed for the stated purpose, relevant customer instructions, legal obligations and the establishment or defence of claims. We consider the type and sensitivity of information, operational need, contractual requirements and the risks of continued retention.

Where particular records are needed for an outstanding claim, dispute, investigation or legal obligation, we may retain the relevant information beyond the standard period. We restrict its use to that purpose, review the continued need and delete or anonymise it when retention is no longer justified. Where BAM processes information on behalf of a business customer, retention also follows that customer’s lawful instructions and the applicable agreement.

9 Security

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure. These include account authentication, access permissions based on users’ roles, and procedures for handling security concerns.

BAM.connect communicates with BAM’s API over HTTPS to protect information in transit between the app and those endpoints. This does not mean that information is end-to-end encrypted or that every file stored on a device is separately encrypted.

We review security arrangements for our systems and service providers and investigate reported incidents. Where a personal data breach requires notification under applicable law, we notify the relevant authority and affected individuals as required.

Users should protect their login details, secure their devices with a screen lock and keep their operating system and app updated. Please report suspected unauthorised access or a security incident to [email protected].

No system can guarantee absolute security.

10 Your rights and deletion requests

Depending on the circumstances, you have rights to access your personal information, correct inaccurate information, request erasure, restrict or object to processing, receive certain information in a portable form, withdraw consent and exercise applicable rights concerning significant decisions made solely by automated processing. These rights are subject to legal conditions and exemptions.

Email [email protected] to request access, correction, account deletion or deletion of associated personal information. Identify your account and the information concerned without sending unnecessary sensitive documents. We may request proportionate identity verification or clarification.

We normally respond without undue delay and within one calendar month, subject to lawful rules on verification, clarification and extensions. If extra time is permitted and needed, we will explain why. Requests are normally free; we charge or refuse only where legally permitted and explain the reasons.

Deleting or disabling an account is distinct from deleting associated information. We assess the underlying records, remove or anonymise information where appropriate, and explain any information retained, the reason and relevant period. Job evidence may need to be retained for claims, financial records for legal obligations, or records processed on behalf of another controller subject to its lawful instructions. We will not describe account deactivation alone as erasure.

If another business controls the relevant data, we will explain that role and assist as appropriate; you can also contact that business directly. Removing the app from your phone does not delete server-held information. Device copies, server records and other recipients’ copies may require different deletion processes.

11 Cookies optional communications and other services

BAM.connect stores information on your device to support sign-in, retain settings, save jobs and inspection evidence, and synchronise information with BAM. This includes authentication information and locally saved records needed to operate the features you use. Local app storage is distinct from website cookies.

Our website may use cookies or similar technologies. Details of the technologies used, their purposes, providers, durations and available controls are explained in our website cookie notice. Where consent is required for non-essential technologies, we request it before using them and provide a way to change your choice.

We send operational communications relating to movements, inspections, account administration, security and support. You can manage app notification permissions through your device settings. Disabling push notifications does not necessarily stop essential account or service communications sent through other channels.

If we send marketing communications, we do so in accordance with applicable law. Where consent is required, we obtain it. You can withdraw consent or object to direct marketing at any time by following the unsubscribe instructions in the communication or contacting [email protected].

12 Automated processing children and updates

BAM.connect uses automated calculations to support features such as estimated arrival times, job sorting and game scores. These features provide operational information or support optional activities. ETAs are estimates and can change with traffic, route conditions and information supplied by users.

We do not use these features to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals. If this changes, we will explain the processing and any applicable safeguards and rights before introducing it.

BAM.connect is intended for adult professional vehicle-logistics users and is not directed at children. If you believe a child has provided personal information through our services, please contact [email protected] so we can investigate and take appropriate action.

We review and update this policy when our services or data-handling practices change. The effective date appears at the beginning of the policy. Where required, we provide additional notice of material changes and obtain consent before starting processing that requires it.

13 Complaints

Please contact us first so we can investigate a privacy concern. You may also complain to the UK Information Commissioner’s Office: ico.org.uk/make-a-complaint/ or telephone 0303 123 1113. This does not affect any other rights or remedies available to you.