Privacy Policy

DriverXL, operating at driverxl.com, contact contact@driverxl.com. We are the data controller for personal data of UK users.

Account: email, password (hashed by Supabase Auth), role (driver/employer/admin).

Driver profiles: name, postcode, licence categories, headline, availability, salary expectations, CV uploads, compliance documents (CPC card, tacho card, medical certificate, ADR, etc.) including expiry dates.

Employer profiles: company name, type, address, contact details.

Payments: handled by Stripe, we do not store card details.

Usage data: pages visited, actions taken, timestamps.

To provide the service: match drivers with employers, store compliance documents, process subscriptions, send notifications.

Legal basis: contract (delivering the service you signed up for) and legitimate interest (improving the platform, preventing fraud).

Supabase (database hosting, EU/UK servers), Vercel (web hosting), Stripe (payment processing). We do NOT sell your data to third parties.

Employers can see driver profiles only with the driver's consent (open_to_contact = true and profile_visibility = 'all_employers').

While your account is active, plus 30 days after deletion for backups. Stripe payment records are retained for 7 years as required by UK tax law.

Access (request a copy of your data), Rectification (correct it), Erasure (delete your account), Portability (export your data), Object (opt out of contact). Email contact@driverxl.com to exercise any of these.

We use essential cookies for login sessions (Supabase Auth) and Stripe checkout. We do not use marketing or tracking cookies.

Data may be processed by Vercel and Stripe in the US under standard contractual clauses approved by the UK ICO.

DriverXL is not for under-18s. We don't knowingly collect data from minors.

You can complain to the UK ICO (ico.org.uk) if you think we've mishandled your data.

We'll update this page if our practices change and notify users via email of material changes.