Privacy Policy

1. Who We Are

UK Traffic Updates operates the website uktrafficupdates.uk. We are the data controller responsible for your personal data.

2. Information We Collect

2.1 Information You Provide

We collect personal information that you voluntarily provide when you:

• Request assistance: Name, phone number, email, vehicle location, vehicle details, problem description, photos
• Register as a provider: Business name, contact person, address, phone, email, service areas, insurance details
• Log in to your account: Email address, verification codes
• Contact us: Name, email, phone number, message content
• Submit reviews: Name, rating, comments
• Use discussions: Display name, comments, uploaded images

2.2 Information Collected Automatically

• Technical data: IP address, browser type, operating system, device type
• Usage data: Pages visited, time on pages, links clicked, search queries
• Location data: Approximate location based on IP, or precise GPS if you grant permission
• Cookie data: Information via cookies and similar technologies (see Section 9)

2.3 Information from Third Parties

• Service providers you engage through our platform
• Analytics providers (e.g. Google Analytics)
• Traffic data providers and National Highways public feeds
• Payment processors (Stripe)

3. How We Use Your Information

4. Legal Basis for Processing

Under UK GDPR, we must have a legal basis to process your personal data:

• Consent: You've given clear consent for a specific purpose (e.g. marketing emails)
• Contract: Processing is necessary to fulfil our contract with you (e.g. providing marketplace services)
• Legal obligation: We must process your data to comply with the law
• Legitimate interests: Processing is necessary for our interests, provided your rights don't override them (e.g. improving services, preventing fraud)

5. Sharing Your Information

5.1 Service Providers

When you submit a breakdown request, we share relevant information (name, contact details, location, vehicle info) with service providers who claim your lead.

5.2 Third-Party Service Providers

• Payment processors: Stripe (for credit top-ups and lead purchases)
• Hosting providers: Server and database hosting
• Analytics: Google Analytics for website usage analysis
• Email providers: Transactional email delivery

6. International Data Transfers

Your data is primarily stored in the UK. Where data is transferred internationally (e.g. to Stripe or Google), we ensure appropriate safeguards are in place including Standard Contractual Clauses approved by the UK government and adequacy decisions recognising equivalent protection.

7. Data Retention

We retain your personal data only as long as necessary:

8. Your Rights Under UK GDPR

• Right of Access: Request a copy of your personal data (Subject Access Request)
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion when data is no longer necessary or you withdraw consent
• Right to Restrict Processing: Request we limit how we use your data in certain circumstances
• Right to Data Portability: Request a copy in machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent at any time where we rely on it

9. Cookies

Essential Cookies

Analytics Cookies

You can manage cookies through our cookie consent banner, cookie settings in the footer, or your browser settings.

10. Data Security

We implement robust security measures to protect your data:

• Encryption: SSL/TLS for all data transmission
• Access controls: Limited access on a need-to-know basis with role-based admin permissions
• Secure servers: Regular security updates and patching
• Passwordless login: Time-limited verification codes instead of stored passwords
• Payment security: All payments processed by Stripe (PCI DSS compliant) — we never store card details
• Activity logging: All admin and provider actions are logged for audit purposes

11. Data Breaches

In the event of a personal data breach, we will:

• Notify the ICO within 72 hours where required
• Notify affected individuals without undue delay if there is a high risk to rights and freedoms
• Document the breach, its effects, and remedial actions taken

12. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately for deletion.

13. Changes to This Policy

We may update this policy to reflect changes in practice or law. We will post the updated policy with a new "Last Updated" date and notify you of significant changes via email or website notice.

14. Contact Us

15. Complaints to the ICO

You have the right to lodge a complaint with the supervisory authority: