1. What we collect
- Account data: name, email, phone, role (customer/driver/fleet), and for business customers, company name and VAT number.
- Verification data (drivers): driving licence number, DVLA check code, right-to-work share code, DBS certificate reference, insurance documents.
- Booking data: pickup/dropoff addresses, cargo details, timings, notes.
- Location data (drivers on active jobs): real-time GPS while a booking is in progress.
- Payment data: handled by our payment processor; we do not store full card numbers.
- Technical data: IP address, device information, and cookies (see the Cookie Policy).
2. Why we process it
- To provide the service (Article 6(1)(b) UK GDPR — contract).
- To meet legal obligations, including HMRC record-keeping, DVLA checks, and safeguarding (Article 6(1)(c)).
- For fraud prevention, safety, and platform integrity (Article 6(1)(f) — legitimate interests).
- For marketing, only with your consent (Article 6(1)(a)).
3. Who we share it with
DVLA and identity partners (for licence and right-to-work checks), our payment and insurance partners, Customers and Drivers involved in your bookings (limited to what is necessary), and law enforcement where legally required.
4. International transfers
Where personal data is transferred outside the UK, we rely on UK adequacy regulations or the ICO's International Data Transfer Agreement.
5. Retention
- Account data: for the life of your account plus 6 years (HMRC).
- Driver verification records: 6 years after your last active booking.
- Live GPS traces: 30 days, then aggregated.
- Support tickets: 3 years.
6. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. You can exercise these from Customer Settings → Privacy, or by emailing privacy@driveget.uk. You have the right to complain to the ICO at ico.org.uk.
7. Security
Data is encrypted in transit (TLS 1.3) and at rest. Access is role-based and audited. We follow the NCSC Cyber Assessment Framework.
8. Contact
Data Protection Officer: dpo@driveget.uk.