Privacy Policy
Last updated: February 2026
1. Who We Are
Compliance Control is a UK-based provider of fleet compliance management software.
For privacy-related queries, contact:
[email protected]
2. What Data We Collect
We collect and process the following data depending on how the system is used:
Account Information
- Full name
- Email address
- Company name
- User role
Fleet & Compliance Data
- Vehicle information
- Defect records
- Daily walkaround check records
- Compliance scheduling data
- Workshop details
Driver Compliance Information
(if entered by the Transport Manager)
- Licence expiry dates
- CPC hours
- Tacho card expiry dates
- Other compliance-related dates
Uploaded Documents
Customers may upload compliance documents (e.g., inspection sheets, certificates). These are stored securely.
Technical Data
Our servers and infrastructure providers may automatically log:
- IP addresses
- Browser type
- Connection timestamps
This data is used for security and system integrity purposes.
3. How We Use Data
We use personal data to:
- Provide access to the platform
- Manage subscriptions
- Maintain audit trails
- Improve system reliability
- Respond to support requests
- Ensure security and prevent misuse
4. Legal Basis (UK GDPR)
We process data under:
- Contractual necessity (to provide the service)
- Legitimate interests (system security, fraud prevention)
- Legal obligation (where applicable)
5. Data Storage & Security
- Data is hosted on UK-based servers.
- Documents are stored securely using encrypted storage.
- Payment processing is handled by Stripe.
- We do not store payment card details.
We take reasonable technical and organisational measures to protect data.
6. Data Retention
If a subscription is cancelled:
- Data is retained for up to 90 days.
- Customers may request a data export during this period.
- After 90 days, data may be permanently deleted.
7. Data Sharing
We share data only with necessary service providers, including:
- Stripe (payment processing)
- Cloudflare (infrastructure and security services)
- Hosting provider (UK-based infrastructure)
We do not share data for marketing purposes.
8. Your Rights
Under UK GDPR, individuals have the right to:
- Access their personal data
- Request correction
- Request deletion
- Restrict processing
- Object to processing
Requests can be made via [email protected]
9. Cookies
We may use essential cookies necessary for authentication and platform functionality.
We do not use advertising cookies.
10. Changes to This Policy
We may update this policy periodically. Continued use of the platform indicates acceptance of updates.