GDPR & Your Data Rights

1. Overview

FleetFlow is operated by FORGEAI STUDIO LTD, a company registered in England and Wales and trading as “NovaStack”. We are committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation (the “UK GDPR”) and, where applicable, the EU General Data Protection Regulation (the “EU GDPR”).

This page explains the rights you have over your personal data and how to exercise them. It should be read together with our Privacy Policy, which describes what personal data we collect and how we use it, and, for business customers, our Data Processing Agreement (DPA).

2. Your rights

Under the UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

• Right to be informed — to be told how your personal data is collected and used, which we explain in our Privacy Policy.
• Right of access — to obtain confirmation that we process your personal data and to receive a copy of it.
• Right to rectification — to have inaccurate personal data corrected and incomplete data completed.
• Right to erasure (“right to be forgotten”) — to request deletion of your personal data in certain circumstances.
• Right to restrict processing — to request that we limit how we use your personal data in certain circumstances.
• Right to data portability — to receive certain personal data in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
• Right to object — to object to certain processing of your personal data, including processing based on legitimate interests and direct marketing.
• Rights related to automated decision-making and profiling — to not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. FleetFlow does not carry out automated decision-making that has legal or similarly significant effects on individuals.

Some of these rights apply only in particular circumstances and may be subject to exemptions under applicable law.

3. How to exercise your rights

To exercise any of your rights, please contact us by email at support@fleetflowtech.com. We will respond to your request within one month of receipt. This period may be extended by up to two further months where requests are complex or numerous, in which case we will inform you within the first month and explain the reason for the delay.

If you are an employee, driver or customer of a FleetFlow business customer, that business is generally the controller of your personal data. In that case, please direct your request to the relevant organisation; we will assist them as their processor in responding to you.

4. Identity verification

To protect your personal data, we may need to verify your identity before acting on a request. We may ask you for additional information reasonably necessary to confirm that you are who you say you are. We will only use this information for the purpose of verifying your identity.

5. Fees

We will not charge a fee to handle your request in most cases. However, we may charge a reasonable fee, or refuse to act on a request, where the request is manifestly unfounded or excessive, in particular because it is repetitive. If we charge a fee or decline to act, we will explain our reasons.

6. Complaints to the ICO

We hope that we can resolve any concern you raise about our use of your personal data. You also have the right to lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO), which you can contact via ico.org.uk. If you are in the European Economic Area, you may contact your local data protection authority. We would, however, appreciate the chance to address your concerns before you approach a regulator.

7. Contact

For any questions about your data rights, please contact us at support@fleetflowtech.com. You can also read more about how we handle personal data in our Privacy Policy and, for business customers, our Data Processing Agreement.