Privacy Notice

Last updated: 4 November 2026

Who we are

Rubber Duck is run by James Clevely, a sole trader based in the United Kingdom. For account and billing data we are the data controller. For the operational data a haulage company adds about its own drivers and jobs, that company is the controller and we process it on its behalf. Contact: clevelyjames53@gmail.com.

What we collect and why

• Account details (name, email, password, phone, company and role) — to create and run your account. Basis: contract.
• Operational data (jobs, collection and delivery addresses, vehicles, walkaround checks, defect photos, driver documents such as licences and expiry dates, announcements and messages) — to provide the service. Basis: contract.
• Support messages — to help you and improve the product. Basis: legitimate interests.
• Usage and device data (IP address, browser, activity logs) — for security, fraud prevention and reliability. Basis: legitimate interests.
• Records we must keep — to meet legal obligations. Basis: legal obligation.

Who we share it with

• Service providers who host the app and store files for us.
• Paddle, our Merchant of Record, for sales, subscriptions, payments, tax and invoicing.
• Professional advisers (legal, accounting).
• Authorities where required by law.

Each company's data is private to its own workspace; other companies cannot see it.

International transfers

Some providers may process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses (including the UK addendum).

How long we keep it

We keep company data while the company's subscription or trial is active and for up to 30 days after it ends, unless law requires longer (for example financial records). After that it is deleted or anonymised.

Your rights

Under UK GDPR you can ask to access, correct, erase, restrict or port your data, object to processing, and withdraw consent. Drivers can also contact their employer, who manages their company's records. Email clevelyjames53@gmail.com; we respond within one month. You can complain to the Information Commissioner's Office (ico.org.uk).

Security

We use encryption in transit, access controls, private file storage and per-company data separation to protect your data.

Cookies

We only use essential cookies and browser storage needed to keep you signed in and remember your chosen company. We don't use advertising cookies.