Privacy policy

Who we are

DriveDrop Ltd, registered in England & Wales. Company number: 17409161. Registered office: Unit 11, Tilcon Avenue, Baswich, Stafford, ST18 0YJ. Contact: Enquiries@drivedrop.co.uk.

DriveDrop is the data controller for the personal data described below. Our processing is limited in scale and we are not currently required to pay the ICO's data protection fee. For any data protection question, email Enquiries@drivedrop.co.uk.

What we collect

• Account details — name, email address, phone number and password credentials held by our authentication provider.
• Booking details — collection and delivery addresses and postcodes, dates, notes and the distance calculated for your route.
• Vehicle data — registration number (VRN), make, model, condition, dimensions and weights, including specifications returned by our vehicle data lookup provider.
• Payment records — the amount, currency, status and a reference for each transaction. Card details are collected and stored by our payment processor, never by DriveDrop.
• Transporter compliance data — business and bank details for payouts, insurance certificates, operator's licences, driver licences and tachograph calibration certificates, plus fleet photographs.
• Location data (transporters only) — when a transporter is carrying a live job in our mobile app we record their position no more often than once every ten minutes. Tracking starts only when the driver confirms the job, can be paused for breaks and rest, and stops on delivery. The customer of that job sees these positions; we do not track drivers between jobs.
• Proof-of-collection and delivery photographs — images of the vehicle taken at collection and delivery. At least one photograph at each stage has the date, time and location printed onto the image as evidence of condition.
• Customer vehicle photos, exact pins and PO numbers — optional pictures you add of each vehicle, the exact collection and delivery points you pin on the map, and any purchase-order number a business adds for its invoice. These are shared with the transporter on that job and kept with the job record.
• Mobile app and notification data — device push tokens, app version and session records so we can send job notifications and support the app.
• Business API records — the quote requests and bookings made with a business's API credentials, including postcodes, timestamps and the credential used.
• Communications — messages sent through a job conversation, voice notes and their transcriptions, reviews you publish, enquiries, suggestions and dispute submissions.
• Technical data — limited log and audit records, including IP address, used for security and to evidence changes to a job.

Why we use it and our lawful basis

• Performance of a contract — to price, arrange, match and deliver your transport, take payment and pay transporters.
• Legitimate interests — to vet transporters, to prevent fraud and abuse, to moderate reviews, to resolve disputes and to improve our pricing and service.
• Legal obligation — to keep accounting, tax and transport compliance records.
• Consent — where you choose to send us optional marketing or feedback; you may withdraw consent at any time.

Who we share it with

Once you confirm a booking, the matched transporter receives the information they need to carry it out — your name, contact number, full collection and delivery addresses, dates, vehicle details and any notes you added to the job. Before that point, including while a transporter is discussing the job with you, they see only the general area of each end: not your name, phone number or full address.

We also share data with service providers acting on our instructions: our payment processor, our bank for transporter payments, our hosting and database provider, our email provider, our mapping and distance provider, our vehicle data lookup provider and Google for advertising measurement where you have accepted those cookies. We do not sell your personal data.

How long we keep it

Job, payment and ledger records are kept for at least six years to meet accounting and tax requirements. Compliance documents are kept for the duration of a transporter's approval and for six years after it ends. Account details are kept while your account is open and deleted or anonymised on request, subject to the retention above. Vehicle lookup results are cached for 30 days. Location tracking points are kept for 12 months after delivery, and proof-of-collection and delivery photographs are kept for six years because they may be needed for a damage claim.

Security

Data is stored in the UK/EEA on managed infrastructure with encryption in transit and at rest. Access is restricted by row-level security so customers, transporters and our staff can only reach the records they are entitled to see. Compliance documents and fleet photos are held in private storage and only released through time-limited links.

Your rights

Under UK GDPR you have the right to access your data, to have inaccurate data corrected, to erasure, to restrict or object to processing, to data portability, and to withdraw consent where we rely on it. To exercise any right, email Enquiries@drivedrop.co.uk. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

We may update this policy. Material changes will be notified by email or through a notice in the app, and the "last updated" date above will change.