Privacy notice

Draft for legal review. This text was prepared as a starting point and has not been reviewed by a lawyer. Items in brackets must be completed by VelaHema's owner before launch.

This notice explains what personal information VelaHema processes. [Legal entity name] is the controller for website visitors and account holders; for operational data in a company workspace, we process it on behalf of that company. [Confirm roles with counsel.]

What we collect

Account details: name, work email, role, sign-in times, IP address and browser for security logs.
Workspace data your company enters: loads, customers, drivers' qualification records and documents, vehicles, duty status, and invoices.
Driver location, only while the driver turns on sharing in the driver app.
Billing: Stripe processes card details. We receive the subscription status and customer identifiers, never card numbers.
Website requests: the details you send in a form.

How we use it

To provide and secure the service, to bill companies, to respond to requests, and to meet legal obligations. We do not sell personal information and do not use workspace data for advertising.

Driver location

Location is visible only to dispatchers, fleet managers and admins of the driver's company. Location history is deleted automatically after [retention period, default 90 days].

Sharing

Service providers we use: [hosting provider], Stripe (payments), [email provider]. [List any others.] Support staff access a workspace only through time-limited, read-only access that is recorded in the company's audit log.

Retention and deletion

[Retention periods for account, workspace, billing and log data after cancellation to be set by the owner.] Companies can export their data at any time.

Your choices

[Access, correction and deletion rights, including any state privacy law requirements, to be confirmed with counsel.] Contact: [privacy contact email].

Last updated [date].