Privacy notice
Draft (2026-10-draft). This document has not yet been reviewed by a solicitor and must be approved before the service is offered to paying customers.
Two different roles
Records your company keeps in the service (drivers' names, usernames and emails, checks, photos, locations, signatures, incident reports): your employer or the company you drive for decides what is recorded and why. It is the controller of that data and ATRA Transport Ltd processes it on its behalf. Questions about those records, including requests to see or correct them, go to that company. We will help it answer.
Running the service and billing (the business account, administrators' and managers' names and emails, sign-in records, invoices): ATRA Transport Ltd is the controller of this data.
What we collect for our own purposes
- Account details: company name and number, names, work emails, roles.
- Billing: handled by Stripe. We keep the Stripe customer and subscription references and the subscription status; we never see full card numbers.
- Security records: sign-in times, failed sign-ins, IP addresses in server logs.
Why, and on what basis
- To provide the service under our contract with the business (contract).
- To keep the service secure and prevent misuse (legitimate interests).
- To keep accounting records (legal obligation).
Who we share it with
Only the providers that run the service for us: hosting (Railway), file storage for photos and videos (an S3-compatible provider), email delivery (Resend) and payments (Stripe). [Confirm each provider, the country where it stores data and the safeguards for any transfer outside the UK before publishing.]
How long
Account data is kept while the account is open, then deleted with the company's records (90 days after closing). Invoices and payment records are kept for 6 years for tax purposes. Server logs are kept for a short period only.
Your rights
You can ask for a copy of your personal data, ask for it to be corrected or deleted, object to or restrict its use, and ask for it in a portable form. You can also complain to the Information Commissioner's Office (ico.org.uk). Contact us at atratransportation@aol.com.
Cookies
The service uses only the cookies it needs to work: a session cookie that keeps you signed in and protects forms. No advertising or tracking cookies. The driver app stores the offline copy of the checklist and unsent checks on the phone itself.