1. Controller and contact
Fleeta Limited is the controller for HGV247 platform data. Contact privacy@hgv247.co.uk or write to the registered office shown on this page. Include enough information for us to identify the relevant account, request or listing.
2. Data we collect
- Search and technical data: search terms, the approximate location you enter, device, browser, security logs, IP-derived information and consent choices.
- Emergency request data: name, phone, optional email, vehicle and fault details, the incident location, urgency and your sharing consent.
- Account and provider data: identity, contact, authentication, business profile, address, coverage, services, opening hours, availability, verification notes, subscription status and support history.
- Communications and feedback: enquiries, complaints, listing corrections and evidence you choose to provide.
- Payment references: customer, subscription and transaction identifiers. Card details are collected by Stripe, not stored by HGV247.
- Connected sign-in data: basic account identifiers and profile fields returned by Google, Microsoft or Facebook when you choose that method.
3. Why we use it
We use data to provide search and account features; create and route help requests to the providers matched to them; send request, enquiry, account and password-reset emails; publish and verify provider listings; manage membership and billing; prevent fraud and abuse; answer enquiries and complaints; comply with law; and improve performance and usability.
Depending on the activity, our UK GDPR lawful basis is performance of a contract or steps requested before one, legitimate interests in operating and securing the marketplace, compliance with legal obligations, or consent for optional analytics. You may withdraw consent without affecting earlier processing.
4. Who receives data
Help-request details are shared only with the providers matched to your request, as explained before submission, and with our operations team so unmatched requests can be followed up. We also use vetted infrastructure, hosting, security, authentication, email delivery, analytics and payment suppliers acting under appropriate terms. Stripe processes subscription payments; Cloudflare supports delivery and bot protection; connected identity providers process sign-in under their own notices.
We may disclose information where required by law, to protect people and the service, in a corporate transaction, or to professional advisers. We do not sell personal data.
5. International transfers
Some suppliers may process data outside the UK. Where required, we use an adequacy decision, the UK International Data Transfer Agreement or UK Addendum to approved contractual clauses, plus proportionate safeguards. Contact us for relevant transfer information.
6. Retention
Emergency requests that receive no response are marked expired after 48 hours. Closed requests, and the leads created from them, have personal and precise location details redacted 30 days after closure and are deleted 180 days after redaction. Contact-form enquiries are kept for up to 12 months. Account, provider and billing records remain while the account is active and may be retained in restricted form afterwards where required for complaints, fraud prevention or accounting. An administrative audit trail records who changed what and when. You can ask for the retention rule applying to a specific record.
7. Your rights
Depending on the circumstances, you can request access, correction, deletion, restriction, objection and portability, and complain about automated decisions that have legal or similarly significant effects. HGV247 does not use solely automated decisions to accept a provider as verified. We may need to verify your identity.
You can complain to the UK Information Commissioner's Office at ico.org.uk, but we would value the chance to address the issue first.
8. Security
Controls include encrypted transport, restricted access, credential hashing, rate limits, bot checks, signed webhooks, an administrative audit trail and isolated production infrastructure. No online system is risk-free. Tell us promptly if you believe an account or request has been compromised.
9. Cookies and analytics
Essential cookies support security and sign-in. Optional analytics is enabled only according to the consent choice described in our cookie notice.
10. Changes
We will update this notice when purposes, suppliers or rights information materially change and show the current date above.