Data protection
Privacy Notice
Privacy information for applicants, members, administrators and business contacts whose data is used in Haulier Link.
Version: 2026-08-19-draft-1
1
Controller and contact
Haulier Link is responsible for the personal information used to provide the Platform.
2
Information we use
- Identity and account data, including name, work email, role, organisation and authentication identifiers.
- Business application and verification data, such as addresses, company/VAT/operator-licence information, fleet categories and administrator notes.
- Marketplace and contract data, including listings, offers, awards, prices, routes, job status, assigned resources and audit events.
- Operational contact and site data supplied for collection or delivery.
- Job Documents, Proof of Delivery and associated file metadata.
- Technical and security data reasonably needed to operate, diagnose and protect the service.
- Support, complaint, subscription and administrative communications.
3
Sources
We receive data from applicants and members, their organisations and invited colleagues, the other authorised party to an awarded job, platform administrators, and service providers such as authentication and hosting suppliers. We may verify business information against legitimate public or official sources.
4
Purposes and lawful bases
| Purpose | Proposed UK GDPR basis |
|---|---|
| Review applications and provide membership | Steps at the business’s request, contract and legitimate interests |
| Publish loads, match organisations and administer awarded jobs | Contract and legitimate interests in operating the marketplace |
| Maintain contract, status, document and security audit trails | Contract, legitimate interests and legal obligations where applicable |
| Verify organisations, prevent fraud and protect users | Legitimate interests and legal obligations where applicable |
| Subscriptions, billing and accounting | Contract and legal obligation |
| Optional marketing | Consent or legitimate interests only where lawful, with opt-out |
5
Who can see information
- Authorised staff in the member’s own organisation.
- Approved marketplace members for the public part of a live listing.
- The posting and carrying organisations for protected operational information and job files after award, subject to permissions and feature entitlement.
- Haulier Link administrators who need access for approval, support, safety, compliance, disputes or service operation.
- Contracted hosting, authentication, email, file-storage, payment and support providers acting under appropriate terms.
- Regulators, courts, law enforcement, insurers or professional advisers where lawfully required or necessary.
Internal poster notes are not released to the carrying organisation through the normal job flow.
6
International transfers
Where a service provider processes personal information outside the UK, Haulier Link will use an appropriate safeguard required by UK data-protection law and will keep its supplier information under review.
7
Retention
We keep information only for as long as reasonably needed for the purpose for which it was collected, our legal and accounting duties, fraud prevention, security, and the establishment or defence of claims. Retention periods may differ for applications, accounts, job records, documents, support records and security logs.
8
Security and individual rights
Haulier Link uses account controls, organisation permissions, private database policies and restricted file storage, but no online service can promise absolute security. Members must protect credentials and report suspected misuse promptly.
Depending on the circumstances, people may have rights of access, correction, erasure, restriction, objection, portability and complaint. Requests may be raised through Haulier Link support. Identity may need to be checked. People may also complain to the UK Information Commissioner’s Office.
9
Automated decisions, children and updates
Haulier Link is a business service and is not intended for children. The launch design does not use solely automated decisions with legal or similarly significant effects; organisation approval is reviewed by an administrator. If this changes, the notice and controls must be updated first.