Privacy policy

1. Who we are

Relocar is operated by Echo Thirteen Capital Ltd (“Relocar”, “we”, “us”). This policy covers our website at relocar.app, the Relocar web app at me.relocar.app and the Relocar Driver mobile app.

If you have any questions about this policy or your personal information, email us at [email protected].

2. Our two roles

We act in two different ways depending on whose information it is.

• As a controller for information about people who visit our website, contact us, or hold a Relocar account (business owners, dispatchers and drivers). We decide how that information is used.
• As a processor for information that transport operators put into Relocar about their own customers, jobs and vehicles. The operator is the controller of that information and we only use it to run Relocar for them. If you are a customer of a transport operator, please contact that operator first about your information. We will help them respond.

3. Information we collect

When you visit our website or contact us

• Anything you send through our contact form or by email: usually your name, company, email address, phone number, the size of your team and your message.
• Standard technical information our web server records, such as your IP address, browser type and the pages requested, kept for security and troubleshooting.

When you use Relocar

• Account details: your name, email address, mobile number, password (stored only in hashed form), role, two-step verification settings and the company you belong to.
• Company details: business name, address, contact details, transporter details, logos and brand colour.
• Job information: collection and delivery names, addresses, email addresses and phone numbers, dates and times, prices and notes.
• Vehicle and inspection records: registration, make, model, colour and VIN; mileage, fuel or charge, condition checks, damage reports, photographs, signatures and the names of the people signing. When an inspection is completed we also record the time, the device's location and IP address, and the browser or app used, so the record can be relied on later.
• Location: while a job is active and location sharing is switched on, the driver's device shares its position so the operator and the customer can follow the vehicle. In the Relocar Driver app this can continue while the phone is locked. Sharing stops when the job is delivered, when it expires, or when the driver turns it off.
• Messages: messages, photos, files and shared locations sent in a job's chat, and ratings and comments customers leave after delivery.
• Notifications: records of the emails and text messages Relocar sends, and the device tokens needed to send push notifications.
• Billing: subscriptions are handled by Stripe. We keep your subscription status and Stripe reference numbers. We never see or store full card numbers.

4. How we use it, and why we're allowed to

• To provide Relocar under our contract with you: running your account, jobs, inspections, tracking, messages, proofs of delivery and customer notifications.
• To keep Relocar secure and working well, which is in our legitimate interests: preventing misuse, fixing faults and improving the product.
• To reply to you when you contact us, which is in our legitimate interests.
• To meet legal obligations, for example keeping financial records.

We do not sell personal information, and we do not use it for advertising. If we ever want to send you marketing, we will ask first and you can opt out at any time.

5. Who we share it with

We use trusted suppliers to run Relocar. They only process information on our instructions and under contracts that protect it.

• Hosting and storage: Northflank (application hosting, London), Neon (database, London region) and Amazon Web Services (file storage, London region).
• Email and text messages: Resend (email) and Twilio (SMS).
• Payments: Stripe.
• Push notifications: Apple, Google and Expo, to deliver notifications to drivers' phones.
• Maps and addresses: OpenStreetMap services and postcodes.io, which receive addresses or coordinates to show maps, look up locations and estimate routes.
• Our website is hosted by IONOS and loads fonts from Google Fonts, which means your browser shares your IP address with Google when you visit.

Customers of a transport operator see the information the operator chooses to share with them, such as the tracking page, the condition record and the proof of delivery. Some suppliers may process information outside the UK. Where they do, we rely on the safeguards UK law requires, such as the UK International Data Transfer Agreement or adequacy regulations.

We may also share information if the law requires it, or to protect the rights and safety of our users and others.

6. How long we keep it

• Account, job, inspection and proof of delivery records are kept for as long as the operator's account is open, so they can be relied on if a question comes up later.
• When an account is closed, we delete or anonymise its records within 90 days, unless we need to keep something longer to meet a legal obligation.
• Contact form messages are kept for up to 24 months.
• Backups are overwritten on a rolling basis.

7. Keeping it safe

Information is encrypted in transit. Passwords are hashed, two-step verification is available to every user, and access inside each company is limited by role. Files such as photos, signatures and proofs of delivery are only reachable through short-lived signed links. Completed inspections cannot be edited.

8. Your rights

Under UK data protection law you have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how it is used, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.

To use any of these rights, email [email protected]. If your information was added by a transport operator, we will pass your request to them and help them respond.

9. Cookies

Our website does not use analytics or advertising cookies. The Relocar app uses essential cookies to keep you signed in. If we add anything else in future, we will update this policy and ask for your consent where the law requires it.

10. Children

Relocar is a business tool and is not intended for anyone under 18.

11. Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

12. Changes to this policy

We will update this policy when Relocar changes. If a change is significant, we will tell account holders by email or in the app before it takes effect.