1. Introduction
LoadCollect ("we", "us", "our") operates the LoadCollect platform at loadcollect.com. We are committed to protecting your privacy and processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Platform.
2. Data Controller
LoadCollect is the data controller for the personal data processed through the Platform. For any data protection enquiries, contact us at:
Email: info@loadcollect.com
3. Personal Data We Collect
3.1 Account Data (Brokers and Operators)
- Name, email address, phone number
- Company name and address
- Operator licence number
- VAT number (if provided)
- Fleet description
- Insurance certificate documents
3.2 Driver Data
- Name and phone number (provided by Operators)
- Signatures and photographs submitted as proof of delivery
3.3 Job and Transaction Data
- Collection and delivery addresses and contacts
- Load details, rates, and customs documentation
- Job acceptance, assignment, and completion records
3.4 Communication Data
- SMS messages sent and received (logged for routing and audit)
- Email notification records
3.5 Payment Data
- Stripe customer and subscription identifiers (we do not store card numbers — Stripe handles payment data directly)
3.6 Technical Data
- IP address, browser type, device information
- Usage data and access logs
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract performance: To provide the Platform services, manage subscriptions, and process jobs
- Legitimate interests: To improve the Platform, prevent fraud, and ensure security
- Legal obligation: To comply with applicable laws and regulations
- Consent: For analytics cookies and marketing communications (where applicable)
5. How We Use Your Data
- To provide and operate the Platform
- To process job postings, acceptances, and completions
- To send operational SMS and email notifications
- To manage Operator subscriptions and billing
- To verify Operator accounts and approval status
- To route inbound SMS messages to the correct recipients
- To generate PDF job sheets and proof of delivery records
- To maintain audit trails for compliance
- To improve the Platform and user experience
6. Data Sharing and Third-Party Processors
We share personal data with the following third-party processors, all of whom are contractually bound to process data in accordance with GDPR:
- Supabase — Database hosting, authentication, and file storage (EU/UK data centres)
- Telegram — Messaging notifications via Telegram Bot API
- Resend — Transactional email delivery
- Stripe — Payment processing and subscription management
- Vercel — Platform hosting and deployment
- Google — Maps directions (no personal data transmitted)
We do not sell your personal data to third parties. We do not share personal data for marketing purposes.
7. Cookies and Consent Mode V2
We use cookies and similar technologies to operate the Platform. Our cookie practices comply with Google Consent Mode V2 requirements.
7.1 Cookie Categories
- Strictly Necessary Cookies: Required for the Platform to function (authentication, session management). These do not require consent.
- Analytics Cookies: Used to understand how visitors interact with the Platform. Loaded only with your consent.
- Marketing Cookies: Not currently used. If introduced, they will require explicit consent.
7.2 Google Consent Mode V2
We implement Google Consent Mode V2 to manage consent signals for Google services. This means:
- Default state: Analytics and ad storage are denied by default until you provide consent
- Consent signals: We pass
ad_storage, analytics_storage, ad_user_data, and ad_personalization consent parameters to Google services - Cookieless pings: When consent is denied, Google may still receive cookieless pings for basic measurement without identifying individual users
- You can update your consent preferences at any time via the cookie banner
8. Data Retention
We retain personal data only as long as necessary:
- Account data: Retained for the duration of your account, plus 6 years after closure for legal compliance
- Job data: Retained for 6 years for contractual and tax record purposes
- SMS logs: Retained for 2 years for audit and routing purposes
- Proof of delivery: Retained for 6 years
- Payment records: Retained as required by Stripe and tax legislation
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your data (subject to legal retention requirements)
- Right to restriction: Request restriction of processing in certain circumstances
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at info@loadcollect.com. We will respond within one month.
10. International Data Transfers
Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions, in compliance with UK GDPR.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Row-level security on database tables
- Secure authentication with Supabase Auth
- Webhook signature validation for Telegram and Stripe
- One-time-use tokens for driver access
12. Children's Data
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.
13. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Platform. Continued use of the Platform after changes constitutes acceptance of the revised policy.