Privacy Policy

UdoDrop is operated by:

• Legal entity: RSDPtech Ltd
• Registered address: 58 Fruen Road, Feltham, TW14 9NR, United Kingdom
• Privacy contact: contact@udodrop.com

This Privacy Policy applies to visitors to our public website and to users of the UdoDrop Platform, including Contractors, workspace users across multiple workspaces, Drivers, Employees, and other authorised users.

Depending on how you use UdoDrop, we may collect the following categories of information.

Business and Contractor information

• Business or company name
• Business contact details
• Contractor account and profile information
• Subscription and billing-related account information

Account information

• Full name
• Email address
• Phone number
• Login credentials
• Account role and permissions
• Account preferences and settings

Multiple workspace user information

• Name and contact details
• Role and assignment information
• Account access and activity information

Driver and Employee information

• Name and contact details
• Profile information
• Referral or registration information
• Assigned Contractor and workspace
• Route, schedule, and work-related information
• Registration and approval status

Contact information

• Email addresses
• Phone numbers
• Other contact details provided through account registration, support requests, or communications

Documents uploaded by users

• Identity, licence, or compliance documents uploaded by Drivers or Employees
• Business or operational documents uploaded by Contractors or workspace administrators
• Other files uploaded through the Platform where that functionality is enabled

Attendance and working hours

• Clock In and Clock Out records
• Working hours
• Attendance history
• Assigned working days

Location information

Where location tracking is enabled and a Driver or Employee has clocked in, UdoDrop may collect location information to support live visibility and operational management for authorised Contractor and workspace users.

Location collection is intended to operate during active working periods and may stop when the individual clocks out, subject to the application's technical configuration and device permissions.

Payment and subscription information

• Pay-slip or payment records entered by Contractors
• Payment status and related operational payment information
• Subscription plan, billing interval, and account billing details
• Payment information processed by third-party payment providers where applicable

Where subscription payments are processed by a third-party payment provider, payment card details may be handled directly by that provider rather than stored by UdoDrop.

Newsletter subscription information

• Email address
• Subscription preferences
• Unsubscribe and communication preference information

Technical information

When you use our website or applications, we may automatically collect certain technical information, such as:

• IP address
• Browser type and version
• Device type and operating system
• Application version
• Log and diagnostic information
• Security and authentication information

Contractors may provide workforce information to UdoDrop. Contractors are responsible for ensuring they have an appropriate legal basis and any required notices, permissions, or authorisations for the information they provide.

We use personal information for purposes including:

• Providing and operating the Platform
• Creating, managing, and administering accounts
• Managing workforce and operational activities
• Registering, approving, and managing Drivers and Employees
• Recording attendance, Clock In / Clock Out, and working hours
• Supporting route, schedule, and assignment functionality
• Providing live location functionality where enabled
• Processing subscriptions, billing, and payment-related account activity
• Sending operational notifications, broadcasts, and service communications
• Providing customer support, including AI-assisted support where available
• Maintaining platform security and preventing fraud or unauthorised activity
• Improving, maintaining, and developing our services
• Complying with legal and regulatory obligations

We do not use personal information for purposes incompatible with those described in this Privacy Policy without providing appropriate notice or obtaining consent where required.

Where UK data protection law applies, we process personal information using appropriate lawful bases depending on the circumstances, including:

• Contract — to provide the Platform, manage accounts, and deliver subscribed services.
• Legal obligation — where processing is required to comply with applicable law.
• Legitimate interests — for security, fraud prevention, service administration, customer support, and business operations where those interests are not overridden by individuals' rights.
• Consent — where consent is required, such as certain marketing communications or non-essential cookies if introduced in the future.

The applicable lawful basis may differ depending on the type of information and the purpose of processing.

We may share information in the following circumstances:

• With authorised users within a Contractor's organisation across multiple workspaces, according to role and permissions
• With service providers that help us operate the Platform
• With payment providers that process subscription or billing transactions
• With email and notification providers, including Amazon SES for service and operational communications where applicable
• With infrastructure and cloud hosting providers
• With professional advisers where reasonably necessary
• With regulators, law enforcement, courts, or other authorities where legally required

We do not sell personal information as part of our business model.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• Providing the Platform and related services
• Meeting contractual, operational, and billing requirements
• Maintaining business and security records
• Resolving disputes and enforcing agreements
• Complying with legal obligations

Retention periods may vary depending on the type of information and the reason it was collected. When information is no longer required, we take reasonable steps to delete, anonymise, or securely dispose of it.

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include access controls, authentication, secure communications, monitoring, and other security practices appropriate to the nature of the information processed.

No online service can guarantee absolute security.

Some of our service providers or infrastructure may process or store information outside the United Kingdom or the country where you live.

Where personal information is transferred internationally, we take steps designed to ensure that appropriate safeguards required by applicable data protection law are in place.

The specific transfer mechanisms used may depend on the service provider, the destination country, and applicable legal requirements.

Our public website currently uses only essential or strictly necessary cookies and similar browser storage where required for core functionality, security, and remembering your cookie notice preference.

We do not currently use analytics, advertising, or marketing tracking cookies on this website.

You can open Cookie Settings from the website footer to review the current cookie approach. For more detail, please see our Cookie Policy.

Cookie Policy: /en-gb/cookies

Where UK data protection law applies, you may have rights relating to your personal information, including:

• The right to access your personal information
• The right to rectification of inaccurate information
• The right to erasure, where applicable
• The right to restrict processing
• The right to object, where applicable
• The right to data portability, where applicable
• The right to withdraw consent where processing is based on consent

To exercise your rights, contact us at contact@udodrop.com.

We may need to verify your identity before completing certain requests.

If you have concerns about how we handle personal information, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to raise a complaint with the relevant UK supervisory authority, including the Information Commissioner's Office (ICO), where applicable.

ICO website: https://ico.org.uk/

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements, or business practices.

When we make significant changes, we may provide additional notice where appropriate. The updated version will be published on this page with a revised Last Updated date.

If you have questions about this Privacy Policy or how UdoDrop handles personal information:

• UdoDrop
• RSDPtech Ltd
• 58 Fruen Road, Feltham, TW14 9NR, United Kingdom
• Privacy: contact@udodrop.com
• Support: support@udodrop.com