Privacy Policy

Last updated: March 2026

Govantage Ltd (Company No. 16392209, registered in England & Wales) (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our van rental platform, website, and mobile application.

1. Who We Are

Govantage Ltd (Company No. 16392209) is the data controller for the personal data described in this policy. We are registered with the Information Commissioner’s Office (ICO) under registration reference ZC018517. Our registered address is 28 Burnham Street, Stoke-on-Trent, ST4 3EX. If you have questions about how we handle your data, contact us at privacy@govantage.uk.

2. What Data We Collect

We collect the following categories of personal data:

• Identity data: Full name, date of birth, photo ID, proof of address
• Contact data: Email address, phone number, postal address
• Driving data: Driving licence number, DVLA verification records, penalty points, endorsements
• Financial data: GoCardless Direct Debit mandate details, payment history, deposit records
• Vehicle usage data: GPS location during active rentals, mileage readings, telematics data (speed, harsh braking)
• Inspection data: Weekly check submissions, damage report photos, vehicle condition records
• Document data: Insurance certificates, right-to-work documents, uploaded files
• Communication data: In-app chat messages, support tickets, email correspondence
• Technical data: IP addresses, device information, browser type, login history, app usage analytics

3. How We Use Your Data

We process your data on the following legal bases:

• Contract performance: To manage your rental agreement, process payments, arrange servicing, and provide the van rental service
• Legal obligation: To verify your driving licence, comply with road traffic law, respond to police requests, and meet tax/accounting obligations
• Legitimate interests: Fleet management, vehicle tracking for theft recovery and safety, fraud prevention, service improvement, and marketing (with opt-out)
• Consent: Marketing emails and SMS (you can withdraw consent at any time via your account settings)

4. Who We Share Data With

We may share your data with:

• GoCardless: Payment processing (Direct Debit)
• DVLA: Driving licence verification
• Insurance providers: Fleet insurance (Premium plan) and claims processing
• RAC: Breakdown assistance (Premium plan)
• Service partners: Vehicle servicing, MOT testing, and repair workshops
• Law enforcement: When required by law or to prevent/detect crime
• IT service providers: Cloud hosting, email delivery, monitoring (under strict data processing agreements)

We never sell your personal data to third parties.

5. Data Retention

We retain your data for the duration of your account and for 6 years after account closure, to comply with legal, regulatory, and accounting requirements. Vehicle tracking data is retained for 12 months. CCTV/dashcam footage is retained for 30 days unless required for an incident investigation.

6. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention obligations)
• Restriction: Ask us to restrict processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or direct marketing

To exercise these rights, use the Data & Privacy section in your account dashboard or email privacy@govantage.uk. We will respond within 30 days.

7. Cookies

Our website uses essential cookies for authentication, session management, and security. We use analytics cookies (with your consent) to understand how you use our site. See our Cookie Policy for full details.

8. Security

We implement appropriate technical and organisational measures to protect your data, including: encryption at rest and in transit (TLS 1.3), access controls and role-based permissions, regular security audits, PII field-level encryption (AES-256-GCM), and secure cloud infrastructure on AWS.

9. International Transfers

Your data is stored and processed within the United Kingdom and the European Economic Area. Where data is transferred outside these regions (e.g. for cloud services), we ensure appropriate safeguards are in place, including Standard Contractual Clauses.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email and in-app notification at least 14 days before they take effect.

11. Contact

For privacy-related enquiries, complaints, or data requests:

Email: privacy@govantage.uk
Post: Govantage Ltd, 28 Burnham Street, Stoke-on-Trent, ST4 3EX

ICO Registration Reference: ZC018517

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.