Privacy Policy

1. About this Privacy Policy

This Privacy Policy explains how Web Design MK Ltd (“we”, “us”, “our”) collects and uses personal data when you use:

• the DriverPay website at www.driver-pay.co.uk (the “Website”), and
• the DriverPay platform, including any driver and administrator portals (the “Service”).

We are committed to protecting your privacy and handling personal data in a transparent and secure way.

If you have any questions about this Privacy Policy or how we handle personal data, contact: info@driver-pay.co.uk.

2. Who is responsible for your personal data

For the purposes of UK data protection law, Web Design MK Ltd is the controller for personal data collected via the Website and for personal data we process to operate the Service (except where an operator/business is acting as the controller for their own driver data — see Section 10).

3. The personal data we collect

Depending on how you use the Website and Service, we may collect the following types of personal data:

3.1 Data you provide to us

• Contact details (such as name, email address, phone number)
• Account details (such as username, password — stored in encrypted/hashed form)
• Driver and operator profile details (such as company name, depot/branch details, driver identifiers)
• Communications (messages you send us, support requests)
• Documents you upload for compliance or verification purposes (which may include personal data)

3.2 Data we collect automatically

• Technical data (IP address, browser type/version, device information)
• Usage data (pages viewed, actions taken, timestamps)
• Cookies and similar technologies (see Section 9)

3.3 Payment-related data

Payments may be processed by third-party payment providers (for example, Stripe and/or WorldPay). We may receive limited payment-related information (such as payment status, transaction reference, and amounts). We do not intentionally store full card details.

4. How we use your personal data

We use personal data to:

• provide and operate the Website and Service
• create and manage accounts
• enable document management and payment-related workflows
• provide support and respond to enquiries
• improve and secure the Website and Service
• monitor for fraud, misuse, and security incidents
• comply with legal obligations

5. Our legal bases for processing

Under UK GDPR, we rely on one or more of the following legal bases:

• Contract: to provide the Service and manage accounts
• Legitimate interests: to operate, improve, and secure the Website and Service, and to prevent fraud (balanced against your rights)
• Legal obligation: to comply with applicable laws and regulatory requirements
• Consent: where required (for example, certain cookies or marketing communications)

6. Who we share personal data with

We may share personal data with:

• Payment providers (e.g., Stripe/WorldPay) to process payments
• Hosting and infrastructure providers that help us run the Website and Service
• Support and service providers who help us deliver the Service
• Professional advisers (legal, accounting, insurers) where necessary
• Law enforcement or regulators where required by law

We do not sell your personal data.

7. International transfers

If any of our service providers transfer personal data outside the UK, we will ensure appropriate safeguards are in place (for example, UK adequacy regulations or approved contractual protections).

8. Data retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including:

• to provide the Service
• to comply with legal obligations
• to resolve disputes and enforce our agreements

Retention periods may vary depending on the type of data (for example, account data, support records, and uploaded documents).

9. Cookies

We may use cookies and similar technologies to operate the Website and Service and to understand how they are used.

Where required, we will ask for your consent before placing non-essential cookies. For more information, see our Cookies Policy.

10. Operators/businesses and driver data (roles)

Where an operator/business uses DriverPay to manage drivers and related documents, the operator/business may be the controller for that driver personal data, and we may act as a processor on their behalf.

In those cases:

• the operator/business is responsible for providing privacy information to drivers
• we process driver data to provide the Service, under the operator’s instructions and our agreements

11. Your rights

You may have rights under UK data protection law, including:

• the right to access your personal data
• the right to correct inaccurate personal data
• the right to request deletion (in certain circumstances)
• the right to restrict or object to processing (in certain circumstances)
• the right to data portability (in certain circumstances)
• the right to withdraw consent (where we rely on consent)

To exercise your rights, contact info@driver-pay.co.uk.

12. Security

We use appropriate technical and organisational measures to protect personal data. However, no system can be guaranteed 100% secure.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on the Website.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first at info@driver-pay.co.uk.

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: ico.org.uk