Data protection

Privacy Notice

Privacy information for applicants, members, administrators and business contacts whose data is used in Haulier Link.

Version: 2026-08-19-draft-1

1

Controller and contact

Haulier Link is responsible for the personal information used to provide the Platform.

2

Information we use

  • Identity and account data, including name, work email, role, organisation and authentication identifiers.
  • Business application and verification data, such as addresses, company/VAT/operator-licence information, fleet categories and administrator notes.
  • Marketplace and contract data, including listings, offers, awards, prices, routes, job status, assigned resources and audit events.
  • Operational contact and site data supplied for collection or delivery.
  • Job Documents, Proof of Delivery and associated file metadata.
  • Technical and security data reasonably needed to operate, diagnose and protect the service.
  • Support, complaint, subscription and administrative communications.

3

Sources

We receive data from applicants and members, their organisations and invited colleagues, the other authorised party to an awarded job, platform administrators, and service providers such as authentication and hosting suppliers. We may verify business information against legitimate public or official sources.

4

Purposes and lawful bases

PurposeProposed UK GDPR basis
Review applications and provide membershipSteps at the business’s request, contract and legitimate interests
Publish loads, match organisations and administer awarded jobsContract and legitimate interests in operating the marketplace
Maintain contract, status, document and security audit trailsContract, legitimate interests and legal obligations where applicable
Verify organisations, prevent fraud and protect usersLegitimate interests and legal obligations where applicable
Subscriptions, billing and accountingContract and legal obligation
Optional marketingConsent or legitimate interests only where lawful, with opt-out

5

Who can see information

  • Authorised staff in the member’s own organisation.
  • Approved marketplace members for the public part of a live listing.
  • The posting and carrying organisations for protected operational information and job files after award, subject to permissions and feature entitlement.
  • Haulier Link administrators who need access for approval, support, safety, compliance, disputes or service operation.
  • Contracted hosting, authentication, email, file-storage, payment and support providers acting under appropriate terms.
  • Regulators, courts, law enforcement, insurers or professional advisers where lawfully required or necessary.

Internal poster notes are not released to the carrying organisation through the normal job flow.

6

International transfers

Where a service provider processes personal information outside the UK, Haulier Link will use an appropriate safeguard required by UK data-protection law and will keep its supplier information under review.

7

Retention

We keep information only for as long as reasonably needed for the purpose for which it was collected, our legal and accounting duties, fraud prevention, security, and the establishment or defence of claims. Retention periods may differ for applications, accounts, job records, documents, support records and security logs.

8

Security and individual rights

Haulier Link uses account controls, organisation permissions, private database policies and restricted file storage, but no online service can promise absolute security. Members must protect credentials and report suspected misuse promptly.

Depending on the circumstances, people may have rights of access, correction, erasure, restriction, objection, portability and complaint. Requests may be raised through Haulier Link support. Identity may need to be checked. People may also complain to the UK Information Commissioner’s Office.

9

Automated decisions, children and updates

Haulier Link is a business service and is not intended for children. The launch design does not use solely automated decisions with legal or similarly significant effects; organisation approval is reviewed by an administrator. If this changes, the notice and controls must be updated first.