Privacy Policy
Last updated: July 2026 — Recoverer Ltd
1. Who we are
Recoverer Ltd is the data controller for all personal data processed through the Recoverer platform. We are registered with the Information Commissioner's Office (ICO). Contact: privacy@recoverer.co.uk.
2. What data we collect
For customers: name, email address, phone number, GPS location during active bookings only, payment card details (processed by Stripe — not stored on our servers), vehicle registration and details, booking history and ratings. For drivers: name, email, phone number, home postcode, vehicle details and registration, copies of driving licence, insurance, MOT and operator's licence, bank account details for payouts, GPS location when online and during active jobs, job history, ratings and earnings.
3. Why we collect it
We use your data to provide the recovery service (matching drivers with customers), process payments and payouts, verify driver documents and insurance, send booking confirmations and job updates by SMS, maintain safety and security records, improve our service and resolve disputes. We do not sell your data to third parties. We do not use your data for marketing without your explicit consent.
4. How we protect privacy between customers and drivers
Customer phone numbers are never shown to drivers. Driver personal phone numbers are never shown to customers. All calls are routed through our masked calling system (Twilio). The masked number expires 30 minutes after job completion. Customer addresses are shown to drivers only for active job pickup and drop-off — they are not stored or accessible after job completion. Payment details are never shared between parties. Driver home addresses are never shared with customers.
5. GPS and location data
Customer location is collected only during the booking process and while a job is active — it is used to calculate distance, assign the nearest driver, and enable live tracking. Driver GPS location is collected only when the driver is set to 'online' in the app and during active jobs. When a driver goes offline, GPS tracking stops immediately. We retain GPS data for 90 days for dispute resolution, then it is permanently deleted.
6. Payment data
All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment provider. Recoverer never sees, stores, or has access to your full card number. We store only the last four digits and expiry date for display in your account. Driver bank details are stored securely and used only for weekly payout processing.
7. Data sharing
We share data with: Stripe (payment processing), Twilio (SMS notifications and masked calling), Google Maps (routing and distance calculation), and Firebase/Google Cloud (secure data storage). We may share data with law enforcement if required by law or court order. We do not share data with advertisers, marketing companies, or data brokers.
8. Data retention
Account data is retained while your account is active. Booking records are retained for 6 years (UK tax requirements). GPS data is retained for 90 days. Driver documents are retained for 1 year after account closure. Payment records are retained for 6 years. You may request deletion of your account at any time — we will delete all data not required for legal or tax purposes.
9. Your rights (UK GDPR)
You have the right to access your data (Subject Access Request), correct inaccurate data, request deletion of your data, object to processing, request data portability, and withdraw consent at any time. To exercise any of these rights, email privacy@recoverer.co.uk. We will respond within 30 days.
10. Cookies
Our website uses essential cookies only — for session management and security. We do not use tracking cookies, advertising cookies, or analytics cookies that identify you personally.
11. Changes to this policy
We may update this privacy policy from time to time. Significant changes will be notified by email. The latest version is always available at recoverer.co.uk/privacy.
Recoverer Ltd — privacy@recoverer.co.uk — ICO Registration: ZB123456