Privacy Policy

We collect different data depending on how you use FleetCompliance:

• Account and business data: your name, work email, phone number, and your business's name, operator licence number and depot postcode.
• Driver compliance data: full name, driving licence number and category, licence/medical/DBS check expiry dates, and phone number, entered by a fleet manager for each driver in the account.
• Vehicle data: registration, make, model, MOT and tax status, sourced either from what you enter or from the DVSA MOT History API.
• Documents you upload: photos or PDFs of certificates, licences and inspection records, and any expiry date our on-device or AI-assisted scanning reads from them.
• Payment data: handled entirely by Stripe — we never see or store your card details ourselves.
• Enquiry data: if you submit the Enterprise contact form, we collect the name, email, phone number and vehicle count you provide.
• Usage and device data: login activity, an audit trail of changes made in your account, and — if you enable them — push notification tokens for the mobile app.

We process this data to provide the compliance-tracking service itself: keeping your vehicle, driver and document register, calculating deadlines, sending reminders, and producing the audit trail the service is built around. This is necessary to perform our contract with you. Where the law requires us to retain certain compliance records (for example, DVSA's 15-month retention requirement for walkaround check records), we keep that data to meet that legal obligation. We may also process limited data on the basis of legitimate interest — for example, to detect abuse of the service or prevent fraud.

We don't sell your data. We share it only with the service providers ("processors") that make FleetCompliance work, each bound by a data processing agreement:

• Supabase — our database, file storage and authentication provider.
• Stripe — payment processing for paid subscriptions.
• Resend — sends the email reminders and notifications you're entitled to on your plan.
• Twilio — sends SMS and WhatsApp reminders on Fleet Pro.
• Anthropic — powers the optional photo-based licence and document reading features.
• DVSA / DVLA — the UK government MOT history service we query when you look up a vehicle by registration.

Some of these providers may process data outside the UK/EEA (for example, in the US). Where that happens, we rely on their Standard Contractual Clauses or equivalent safeguards.

We keep your data for as long as your account is active. If you delete your account, we delete your personal login data straight away; records your organisation is legally required to retain for compliance purposes (for example, driver check history relevant to DVSA/HSE obligations) may be retained by your organisation after your individual account is removed, with your personal login access removed. Enterprise enquiry data is kept for as long as reasonably needed to follow up on it.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased, subject to our legal retention obligations above
• Object to or restrict certain processing
• Receive your data in a portable format

You can delete your own account at any time from your account settings. For anything else, contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

FleetCompliance uses only essential cookies/local storage needed to keep you signed in and remember your preferences — no advertising or third-party tracking cookies.

FleetCompliance is a business tool and is not intended for use by children.

We'll update the "last reviewed" date above if this policy changes materially, and where appropriate let account holders know directly.

For any question about this policy or your data, contact cmb.ai.solutions@gmail.com.