Legal
Privacy Policy
This policy explains what personal data we collect, why we collect it, who we share it with and what rights you have. It covers this website, the enquiry form on it, and the driver apply pages we run for carriers.
DRAFT, needs legal review. This policy has not yet been reviewed by a lawyer.
Last updated: 29 October 2026
Who we are
This website is operated by Wall Media Ltd, a company registered in England and Wales under company number 15045668, whose registered office is Longfrey Cottage, Dorking Road, Chilworth, Surrey, GU4 8RH. CDL Lead Partner is a trading name of Wall Media Ltd and is not a separate legal entity.
Wall Media Ltd (“we”, “us”) is the data controller for personal data collected through this website and our driver apply pages, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact us about anything in this policy by email: hello@wallmedia.co.uk.
When we deliver a driver's application to the carrier named on the apply page, that carrier becomes a separate controller of the data it receives, and its own privacy notice also applies.
What we collect
From carriers and recruiting teams who use our enquiry form: company name, your name and role, phone number, work email, DOT and MC numbers, fleet size, hiring states, lanes and trailer types, and the applicant tracking system you use. We also record the consent wording you were shown, its version and the time you submitted, the page address and any campaign tags in the link you arrived from: the UTM parameters utm_source, utm_medium, utm_campaign, utm_content and utm_term, and the ad click identifiers gclid (Google Ads) and fbclid (Meta).
From drivers who apply through one of our apply pages: first and last name, mobile number, home ZIP code, and your answers to the screening questions (whether you hold a Class A CDL, whether you are 21 or older, your CDL-A experience, endorsements, DUI or DWI history for the period the carrier sets, and whether you are an owner-operator). We also keep a record of the consent you gave, including a certificate from a consent-verification provider (TrustedForm or Jornaya) and the outcome of any verification call. We never ask for your date of birth and we do not pull driving records.
From website visitors: if you accept analytics cookies, the pages you view, approximate location derived from your IP address, device and browser type, and how you arrived at the site.
Why we use it, and our lawful basis
To respond to a carrier's enquiry and discuss working together. Lawful basis: legitimate interests in answering business enquiries, and steps taken at your request before entering into a contract.
To pass a driver's application to the carrier named on the apply page, and to contact the driver about that job. Lawful basis: your consent, which you give on the apply page and can withdraw at any time.
To keep proof of consent and to meet legal obligations, including US telemarketing rules. Lawful basis: legal obligation and legitimate interests in being able to show that consent was given.
To measure how the website is used. Lawful basis: your consent, given through the cookie banner.
Who we share it with
The carrier named on the apply page, for driver applications. A driver's application goes to the carrier named on the page where it was submitted.
Service providers who process data on our instructions, each bound by a written agreement: HighLevel (GoHighLevel, also known as LeadConnector), our customer relationship management and booking system, which stores enquiries, applications and consent records, provides the booking calendar on our Book a call page, and is based in the United States; our website hosting provider; a consent-verification provider (TrustedForm or Jornaya); and the applicant tracking system the carrier uses (Tenstreet or DriverReach), into which applications are posted.
Google, which provides Google Analytics 4 through Google Ireland Limited, with Google LLC also processing the data. Google receives analytics data only if you accept analytics cookies.
Authorities or professional advisers where the law requires it.
We do not sell personal data.
International transfers
We are based in the United Kingdom and serve carriers in the United States, so personal data is transferred between the two. HighLevel and Google process data in the United States. For these transfers we rely on the UK Extension to the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the International Data Transfer Addendum to the EU standard contractual clauses, together with appropriate additional safeguards.
How long we keep it
We keep enquiry and application data for as long as we need it to provide the service, and then for a limited further period to deal with questions and to show that consent was given. Consent records are kept for longer than the application itself, because US law allows claims about consent to be brought several years later. Specific retention periods: [NEEDS: specific retention periods, Colin and legal review].
If you accept analytics cookies, Google Analytics keeps the event data it collects for 14 months and then deletes it. The _ga and _ga_ cookies in your browser last for up to two years from your last visit, and we delete them straight away if you withdraw your consent.
Your rights under UK GDPR
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time where we rely on it. Withdrawing consent does not affect anything we did before you withdrew it.
To use any of these rights, email us at hello@wallmedia.co.uk. We will respond within the time limits set by law.
You can also complain to the Information Commissioner's Office (ico.org.uk), the UK supervisory authority.
Notice for US residents, including California
This section applies to residents of US states with consumer privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA).
Categories of personal information we collect: identifiers (name, phone number, email address); professional or employment-related information (role, company, CDL status, experience, endorsements, owner-operator status); characteristics relevant to the job (whether you are 21 or older); records of DUI or DWI history you choose to disclose; geolocation limited to home ZIP code or approximate location; and internet activity, if you accept analytics cookies. The sources, purposes and recipients are described in the sections above.
We do not sell personal information and we do not share it for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics about you.
Depending on your state, you may have the right to know what personal information we collect and how we use it, to access it, to have it corrected or deleted, to opt out of its sale or sharing, and not to be discriminated against for using these rights. To make a request, email us at hello@wallmedia.co.uk. We will verify your request before acting on it, and you may use an authorised agent.
Cookies and browser storage
Without your consent this website stores two things in your browser, both strictly necessary and neither shared with anyone: the cookie choice you made, and, if you start our enquiry form, your answers so far, so you can finish later. The form answers are deleted from your browser when you submit.
If you accept analytics cookies, Google Analytics also sets cookies named _ga and _ga_ followed by an identifier, so we can count visits and see which pages are used. They are not set unless you accept.
Campaign tags. If the link you arrived from carries any of utm_source, utm_medium, utm_campaign, utm_content, utm_term, gclid or fbclid, we read them so an enquiry can be credited to the advert or campaign that brought you. Until you accept cookies they are held only in the open page and never written to your browser's storage. If you accept, they are saved in your browser's session storage under the key cdl-attribution-v1 until you close the tab. If you reject, or later withdraw your consent, they are deleted.
Booking calendar. The calendar on our Book a call page is provided by HighLevel (GoHighLevel, also known as LeadConnector), our processor. It is not loaded until you click Load calendar, or until you have accepted cookies. Once loaded, it connects your browser to HighLevel's servers, which may set their own cookies.
You can change or withdraw your choice at any time using the Cookie settings link at the foot of every page, or through your browser settings.
Contact
For any privacy question, or to use any of the rights above, email us at hello@wallmedia.co.uk, or write to Wall Media Ltd at Longfrey Cottage, Dorking Road, Chilworth, Surrey, GU4 8RH.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last revised.