IRONLINXINDUSTRIAL DATA AND INFRASTRUCTURE SOLUTIONS

Privacy Policy

IronLinx ("IronLinx", "we", "us") operates a marketplace connecting UK haulage companies with drivers. This policy explains what personal data we collect from Companies and Drivers, why, and what rights you have over it, in accordance with UK GDPR and the Data Protection Act 2018.

1. Data We Collect

For Drivers, we collect:

  • Identity and contact details, and your driving licence number — see Section 2 on why this is your key identifier.
  • Scans of your driving licence, Driver Qualification Card, and CPC card, and a selfie photograph matched against your licence photo to confirm your identity.
  • DVLA licence check results — see Section 3, a dedicated section given how sensitive this data is.
  • Your National Insurance number and bank details, used to pay and, where applicable, run PAYE on your wages.
  • Tachograph-recorded activity data (driving, work, period of availability, and break time) for each shift, used to calculate your pay — see our How it works page. We do not use GPS or phone location data to calculate pay.
  • Location data while the app is in use, for on-site status tracking, safety features (SOS, Emergency Alert), and pre-shift movement checks — this is a live tracking indicator only and is never used to calculate your pay.
  • Ratings, reliability signals, and messages sent through the Platform.
  • Vehicle details and employment status (Employed or Self-Employed).

For Companies, we collect company registration and billing details, and the details of any users the Company invites to the Platform.

2. DVLA Licence Checks

As part of onboarding, we ask for your explicit consent to check your driving record with the DVLA (via a DVLA-approved licence-checking provider), using your licence number. If you consent, we run this check once immediately, and then automatically once a week for as long as you remain active on the Platform.

Each check retrieves and we retain:

  • your current penalty points total;
  • what each point was for (offence code and date), not just the running total;
  • any change in your licence status (valid, expired, suspended, disqualified).

We keep a full history of these checks over time, not just the most recent result, so that a pattern of accumulating points is visible. This is necessary for us to meet our obligations to the companies you work for regarding driver compliance, and forms part of your compliance record on the Platform.

You can withdraw this consent at any time from your account settings. If you withdraw consent, we stop running further checks, but existing companies may require a valid, recent check before offering you further shifts.

3. Why We Process Your Data

  • Consent — DVLA licence checks (Section 2), and background location tracking.
  • Performance of a contract — matching you to shifts, calculating and paying your wages, and operating your account.
  • Legal obligation — retaining tachograph and pay records (kept for 6 years, in line with National Minimum Wage record-keeping requirements), NI number and PAYE records, and DVLA compliance history.
  • Legitimate interests — fraud prevention, platform safety and security, and resolving disputes between users.

4. Who We Share Data With

We share personal data, only as needed to run the Platform, with:

  • the Company you work a shift for, so far as needed for that shift;
  • our DVLA-approved licence-checking provider;
  • our identity-verification/document-scanning provider;
  • our finance and payroll partners, to pay you and, for Employed shifts, to operate PAYE;
  • our accounting and backup/disaster-recovery providers;
  • regulators or law enforcement, where we are legally required to.

We do not sell personal data to any third party.

5. How Long We Keep Data

Tachograph and pay records are kept for 6 years, in line with National Minimum Wage record-keeping requirements. Other categories of data are kept for as long as your account is active, and for a limited period afterwards where we have a legal or regulatory reason to — the specific retention period for each remaining category is still being finalised as part of the platform's DPIA.

6. Security

Data is encrypted in transit and at rest. Sensitive fields — including NI numbers, bank details, DVLA check results, and identity documents — receive additional access controls, so that, for example, a Planner user can see that your documents are verified without being able to view the documents themselves.

7. Cookies

This website does not use tracking or advertising cookies. Any cookies in use are strictly necessary for the site to function.

8. Your Rights

Under UK GDPR, you have the right to access, correct, or request erasure of your personal data, to restrict or object to certain processing, and to receive your data in a portable format. To exercise any of these rights, contact us using the details on our Contact page. You also have the right to complain to the Information Commissioner's Office (ICO) if you believe we have not handled your data properly.

9. Changes to This Policy

We may update this policy from time to time. We will post any changes on this page.