Privacy Policy
Effective date: 22 August 2026
1. Introduction
DSPOps is a fleet management and operations platform for Amazon Delivery Service Partners (DSPs). It is operated by Layerform System Limited, a company registered in England and Wales (company no. 16171454), trading as DSPOps. Layerform System Limited is registered with the Information Commissioner's Office (ICO) as a data controller. ICO registration reference: ZC124917.
This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and your rights under UK GDPR. It applies to all drivers, operations managers, and administrators who use the DSPOps platform.
By using DSPOps, you agree to the collection and use of information as described in this policy.
2. Information We Collect
We collect the following categories of personal data:
| Category | Data Collected |
|---|---|
| Identity | Full name, date of birth, email address, phone number, home address |
| Government IDs | National Insurance number, passport number, driving licence details, Right to Work codes |
| Financial | Bank account number, sort code, UTR number, VAT number |
| Documents & Photos | Licence photos, passport photos, Right to Work evidence, van inspection photos and videos |
| Employment | Driver code, shift data, deployment assignments, performance scorecards |
| Device | Push notification tokens, platform type (iOS, Android, or web) |
| Health | Medical fitness self-declarations |
| Emergency Contact | Name, phone number, and relationship of a nominated third party |
| Messages | In-app conversations between drivers and managers |
| Website Chat | Your name, email address, and the messages you send in the chat widget on this website — including replies from our team when a person joins the conversation |
| Audit | IP address, user agent string, timestamps (recorded when signing agreements) |
3. How We Use Your Information
We use personal data only for the purposes for which it was collected:
- Fleet management and driver deployment
- Van inspection and damage detection (AI-assisted)
- Document verification during onboarding (AI-assisted)
- Push notifications for shift and deployment updates
- Driver performance tracking and scorecards
- Payroll and employment compliance
- Answering enquiries you send through this website's chat widget, and following them up
4. Third-Party Services
To operate the platform, we share specific data with the following third-party services. We do not use your data for advertising, and we do not share data across apps or for any tracking purposes.
| Service | Data Shared | Purpose |
|---|---|---|
| Anthropic (Claude AI) | Document images (licence, passport) | Automated field extraction during onboarding |
| Anthropic (Claude AI) | Chat messages (this website's chat widget) | Generating chatbot replies and draft suggestions for our team |
| OneSignal | Device tokens, driver identifiers | Push notifications |
| Cloudflare R2 | All uploaded files and photos | Cloud file storage |
| Neon (PostgreSQL) | All structured data | Database hosting |
| Cal.com | Your name, email address, and any notes you add when booking a demo | Scheduling demo calls booked through the calendar on this website |
Separately, this marketing website uses a simple first-party visit counter to understand how many people view our pages. It records the page visited, a timestamp, and a randomly generated identifier stored in your browser — never your name, email address, or IP address. This data stays on our own systems, is not shared with any third party, and is not used for advertising or cross-site tracking.
This website also offers a chat widget. If you start a conversation, we store your name, email address, and the full message transcript. This lets our AI assistant answer your questions, and lets a member of our team review or join the conversation if you ask to speak to a person. Only DSPOps can see your conversation — we do not sell or share it beyond the Anthropic processing described above. See Data Retention below for how long it is kept.
5. Data Security
We apply appropriate technical and organisational measures to protect your personal data:
- Financial data (bank details, sort codes) is encrypted at rest using AES-256-GCM
- Passwords are hashed using bcrypt
- Two-factor authentication (TOTP) is required for all manager and admin accounts
- All data is transmitted over HTTPS
- Document integrity is verified using SHA-256 checksums
6. Data Retention
We retain personal data for 1 year after a driver is offboarded or their account is closed. After this period, personal data is permanently deleted or anonymised.
Drivers may request earlier deletion of their data at any time. See Your Rights below for how to make that request.
Chat transcripts from this website's chat widget (your name, email address, and messages) are retained for 90 days from your last message, after which they are permanently deleted. You may request earlier deletion at any time — see Your Rights below.
7. Your Rights (UK GDPR)
Under UK GDPR, you have the following rights regarding your personal data:
- Access: You can request a copy of the personal data we hold about you.
- Correction: You can ask us to correct any inaccurate or incomplete data.
- Deletion: You can request that we delete your personal data.
- Restriction: You can ask us to limit how we use your data in certain circumstances.
- Portability: You can request your data in a structured, machine-readable format.
- Withdrawal of consent: Where processing is based on consent, you can withdraw it at any time.
- Complain to the ICO: You have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.
To exercise any of these rights, email us at support@dspops.app. We will respond within 30 days.
8. Children's Privacy
The DSPOps platform is intended for use by adults in employment. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has provided us with personal data, please contact us immediately at support@dspops.app.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, the revised version will be posted at this URL with an updated effective date. Continued use of the DSPOps platform after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
10. Contact Us
For any privacy-related questions, requests, or concerns, please contact us:
Layerform System Limited, trading as DSPOps
Email: support@dspops.app
Registered in England and Wales, company no. 16171454
ICO registration reference: ZC124917