FleetGenius Lite ("FleetGenius", "we", "us") is provided by Bluepoppy Vehicle Solutions Ltd, a company registered in England & Wales, (company no.08380730), registered office The Sanctuary, Eden Office Park, Ham Green, Bristol, BS20 0DD. ICO registration no. ZA037474.
Contact for privacy matters: privacy@bluepoppy.co.uk (or your DPO/contact: Paul Watts-Barnes / paul@bluepoppy.co.uk).
This policy covers personal data we handle as a controller — i.e. visitors to our website, and the account holders (fleet managers/administrators) who sign in to FleetGenius.
For the fleet, driver and vehicle data held inside a client's portal, the client is the controller and FleetGenius is the processor; that data is governed by our Data Processing Agreement with the client, and by the client's own privacy notice to its drivers. See §9.
We use trusted providers who process data on our instructions:
We do not sell personal data. We only disclose to others where required by law or to protect our rights.
We aim to keep personal data in the UK/EU. Where a provider processes data outside the UK/EU, we rely on appropriate safeguards (UK adequacy regulations / the UK International Data Transfer Agreement or Addendum to the EU SCCs).
We keep account data for as long as your account is active and for 12 months after closure, then delete or anonymise it, unless a longer period is required by law. Client-portal data is retained per our Data Processing Agreement and retention schedule.
Under UK GDPR you may request access, rectification, erasure, restriction, portability, and object to certain processing. To exercise these, contact privacy@bluepoppy.co.uk. You can complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to help first.
If you are a driver and your data sits in a client's portal, please contact that client (the controller) in the first instance; we will assist them as processor.
Where FleetGenius hosts a client's fleet, the client decides what driver/vehicle data is entered and why. FleetGenius processes it only on the client's documented instructions under our Data Processing Agreement, with per-client isolation enforced at the database level (row-level security).
We use per-tenant isolation (row-level security), encryption in transit, access controls, and least-privilege service credentials. No system is perfectly secure, but we take reasonable and appropriate measures (UK GDPR Art. 32).
We'll post updates here and change the "last updated" date; material changes will be notified to account holders.
Bluepoppy Vehicle Solutions Ltd, The Sanctuary, Eden Office Park, Ham Green, Bristol, BS20 0DD· privacy@bluepoppy.co.uk
