Privacy Policy
Effective date: 16 April 2026
1. Introduction
DSPOps is a fleet management and operations platform for Amazon Delivery Service Partners (DSPs). It is operated under the trading name DSPOps. DSPOps is registered with the Information Commissioner's Office (ICO) as a data controller. ICO registration reference: 00013790820.
This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and your rights under UK GDPR. It applies to all drivers, operations managers, and administrators who use the DSPOps platform.
By using DSPOps, you agree to the collection and use of information as described in this policy.
2. Information We Collect
We collect the following categories of personal data:
| Category | Data Collected |
|---|---|
| Identity | Full name, date of birth, email address, phone number, home address |
| Government IDs | National Insurance number, passport number, driving licence details, Right to Work codes |
| Financial | Bank account number, sort code, UTR number, VAT number |
| Documents & Photos | Licence photos, passport photos, Right to Work evidence, van inspection photos and videos |
| Employment | Driver code, shift data, deployment assignments, performance scorecards |
| Device | Push notification tokens, platform type (iOS, Android, or web) |
| Health | Medical fitness self-declarations |
| Emergency Contact | Name, phone number, and relationship of a nominated third party |
| Messages | In-app conversations between drivers and managers |
| Audit | IP address, user agent string, timestamps (recorded when signing agreements) |
3. How We Use Your Information
We use personal data only for the purposes for which it was collected:
- Fleet management and driver deployment
- Van inspection and damage detection (AI-assisted)
- Document verification during onboarding (AI-assisted)
- Push notifications for shift and deployment updates
- Driver performance tracking and scorecards
- Payroll and employment compliance
4. Third-Party Services
To operate the platform, we share specific data with the following third-party services. We do not use your data for advertising, and we do not share data across apps or for any tracking purposes.
| Service | Data Shared | Purpose |
|---|---|---|
| Anthropic (Claude AI) | Document images (licence, passport) | Automated field extraction during onboarding |
| OneSignal | Device tokens, driver identifiers | Push notifications |
| Cloudflare R2 | All uploaded files and photos | Cloud file storage |
| Neon (PostgreSQL) | All structured data | Database hosting |
5. Data Security
We apply appropriate technical and organisational measures to protect your personal data:
- Financial data (bank details, sort codes) is encrypted at rest using AES-256-GCM
- Passwords are hashed using bcrypt
- Two-factor authentication (TOTP) is required for all manager and admin accounts
- All data is transmitted over HTTPS
- Document integrity is verified using SHA-256 checksums
6. Data Retention
We retain personal data for 1 year after a driver is offboarded or their account is closed. After this period, personal data is permanently deleted or anonymised.
Drivers may request earlier deletion of their data at any time. See Your Rights below for how to make that request.
7. Your Rights (UK GDPR)
Under UK GDPR, you have the following rights regarding your personal data:
- Access: You can request a copy of the personal data we hold about you.
- Correction: You can ask us to correct any inaccurate or incomplete data.
- Deletion: You can request that we delete your personal data.
- Restriction: You can ask us to limit how we use your data in certain circumstances.
- Portability: You can request your data in a structured, machine-readable format.
- Withdrawal of consent: Where processing is based on consent, you can withdraw it at any time.
- Complain to the ICO: You have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.
To exercise any of these rights, email us at support@dspops.app. We will respond within 30 days.
8. Children's Privacy
The DSPOps platform is intended for use by adults in employment. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has provided us with personal data, please contact us immediately at support@dspops.app.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, the revised version will be posted at this URL with an updated effective date. Continued use of the DSPOps platform after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
10. Contact Us
For any privacy-related questions, requests, or concerns, please contact us: