Privacy Policy
1. Who we are
TransportMgr Ltd ("we", "us", "our"), a company registered in England and Wales under company number 17214992, provides a transport and fleet management platform. This policy explains what personal data we collect through our website at transportmgr.com and our applications, how we use and share it, how long we keep it, and the rights you have.
For personal data we process on behalf of our business customers (for example a customer's own bookings, drivers and contacts inside their workspace), the customer is the data controller and we act as their processor under a Data Processing Agreement. For our website, marketing, waitlist and account administration, we are the controller. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, and our data protection contact is [email protected].
2. The personal data we collect
- Contact and waitlist details: the email address you submit to join the early-access waitlist, and any name, company and message you send us.
- Account details: when accounts open at launch, your name, work email, organisation, role and authentication details.
- Usage and device data: information about how you use the Service, such as pages or screens viewed, actions taken, approximate location derived from your IP address, browser or device type, and log data needed to keep the Service secure and reliable.
- Location data: where you or your organisation enable GPS and live tracking features, vehicle and journey location data collected through the apps.
- Payment data: billing contact details and the records needed to manage your subscription. Card details are collected and processed directly by our payment providers; we do not store full card numbers.
- Preferences: settings stored on your device, such as your chosen theme and display currency.
3. How we use personal data and our legal bases
Under UK GDPR and equivalent laws, we rely on the following bases:
- Contract: to create and manage your account, provide the Service, process payments and provide support.
- Legitimate interests: to operate, secure and improve the Service, prevent fraud and abuse, and contact business prospects about products relevant to their work, in each case balanced against your rights.
- Consent: where required, for certain marketing communications and any optional cookies or analytics. You can withdraw consent at any time.
- Legal obligation: to meet tax, accounting and other legal requirements.
4. Cookies and similar technologies
Our marketing website uses your browser's local storage only to remember your theme and currency preferences. It does not set advertising cookies. If we introduce analytics or other optional technologies, we will update this policy and, where required, ask for your consent first.
5. How we share personal data
We share personal data only as needed to run the Service, and we require providers to protect it. Our categories of service providers include:
- Payments: Stripe, and in supported regions Paystack, Flutterwave and M-Pesa.
- Email and messaging: SendGrid for email, and Twilio, Africa's Talking or Termii for SMS.
- Calendar and productivity: Google and Microsoft Outlook calendar integrations where you enable them.
- Identity and sign-in: Microsoft Entra ID, Google and Microsoft OAuth for single sign-on.
- Mapping and geocoding: map and location providers used to display vehicles and routes.
- Hosting and infrastructure: cloud hosting used to run the platform.
We may also disclose personal data where required by law, to enforce our terms, or in connection with a merger, acquisition or sale of assets, in which case we will notify you.
6. International transfers
We operate globally, so personal data may be transferred to and processed in countries outside your own. Where we transfer personal data internationally, we use appropriate safeguards such as UK and EU standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms. Where you need data held in a particular country, we offer regional data residency options.
7. How long we keep personal data
We keep personal data only as long as needed for the purposes described here. Waitlist details are kept until launch and for a reasonable period afterwards, or until you ask us to remove them. For accounts, you can export your data at any time, and we keep it available for 90 days after cancellation in case you change your mind, after which we delete or anonymise it unless the law requires us to keep it.
8. How we protect personal data
We use technical and organisational measures designed to protect personal data, including encryption in transit and at rest, multi-factor authentication, role-based access controls, organisation-level data isolation and audit logging. See our security overview for more detail.
9. Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent where we rely on it. Where we act as processor for a business customer, please direct requests to that customer, and we will support them in responding.
To exercise your rights, contact [email protected]. You also have the right to complain to a regulator: in the United Kingdom the Information Commissioner's Office (ICO). Equivalent rights and regulators apply under the EU GDPR, Nigeria's NDPA 2023, Kenya's Data Protection Act 2019 and South Africa's POPIA.
10. Children
The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy from time to time. We will post the updated version here and, where changes are material, take reasonable steps to notify you.
12. Contact us
TransportMgr Ltd (registered in England and Wales, company number 17214992)
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: [email protected]