Privacy Policy

ENVYTAX ("we", "us", "our") is the company behind this platform and is committed to protecting the privacy and security of your personal data. ENVYTAX Ltd provides the underlying technology infrastructure and services. This Privacy Policy explains what data we collect, how we use it, how we store it, and your rights regarding your data. This policy applies to all users of the ENVYTAX platform, including drivers, company administrators, and other authorised personnel.

Data Controller

ENVYTAX is the data controller for the personal data processed through this platform. If you have any questions about how your data is handled, please contact us at the details provided at the bottom of this policy.

What Data We Collect

We collect the following categories of personal data:

Why We Collect This Data

We process your data for the following purposes:

• Driver onboarding and compliance — verifying your identity, right to work, and driving eligibility
• Fleet management — tracking vehicle condition, mileage, damages, and safety compliance
• Payroll and invoicing — calculating earnings, generating invoices, and processing payments
• Fraud prevention and accountability — device information and GPS data on vehicle checks helps verify the authenticity of submissions and prevents fraudulent claims
• Health and safety — ensuring vehicles are roadworthy and drivers are fit to drive
• Legal compliance — meeting HMRC, DVLA, and employment law obligations
• Communication — sending shift notifications, system alerts, and operational messages
• Performance management — tracking delivery metrics and scorecard ratings

How We Store Your Data

• All data is stored on secure, encrypted cloud infrastructure
• Data is transmitted using TLS/SSL encryption
• Access to personal data is restricted to authorised personnel only, based on role-based access controls
• Documents and photographs are stored in secure cloud storage with access logging
• We regularly review and update our security measures to protect against unauthorised access
• Backups are encrypted and stored securely in compliance with data protection standards

Data Retention

• Active accounts: Data is retained for as long as your account is active and you are engaged with a company on the platform
• After offboarding: Essential records (contracts, invoices, tax documents) are retained for a minimum of 6 years in accordance with HMRC requirements
• Vehicle check records: Retained for a minimum of 15 months in line with DVSA guidelines for operators
• Device and technical data: Retained alongside the vehicle check record it relates to
• Messages and communications: Retained for the duration of the business relationship plus 12 months

Who We Share Your Data With

We may share your data with:

• Your DSP / employer company — company managers and administrators who need access to manage operations
• ENVYTAX Ltd — who builds and maintains the platform infrastructure
• HMRC — for tax filing obligations (Self Assessment, VAT returns)
• Cloud service providers — who host our platform infrastructure (data processing agreements are in place)
• Law enforcement — only when required by law or court order

We do not sell your personal data to any third parties, and we do not use your data for marketing purposes unrelated to the platform.

Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

• Right of access — request a copy of all personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your data where there is no legal requirement to retain it
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to data processing based on legitimate interests

Cookies & Local Storage

We use essential cookies and browser local storage to maintain your login session, remember your preferences, and temporarily store form progress (e.g. vehicle check data) to prevent data loss if the app is closed accidentally. We do not use third-party advertising or tracking cookies.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact the platform administrator directly through the app: