Privacy Policy
We take your privacy seriously. This policy explains, in plain English, what information we collect, how we use it, and your rights. It applies to everyone who uses PayAVan — customers and drivers.
Who we are
PayAVan ("we", "us", "our") operates an online platform that connects customers who need goods moved with independent, self-employed drivers. This policy explains what personal information we collect, how we use it, who we share it with, and your rights.
We are Altaf Patel, a sole trader trading as "PayAVan", based in England. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO registration number]. We are the "controller" of your personal data, which means we decide how and why it is used.
For any privacy questions or requests, contact us at privacy@payavan.com.
What information we collect
Depending on whether you are a customer or a driver, we may collect:
- Identity and contact details — your name, email address and phone number.
- Job details — pickup and delivery addresses and postcodes, item descriptions, and any photos you upload of the goods to be moved.
- Driver verification (drivers only) — documents you upload such as ID, driving licence, insurance and vehicle details, so we can approve you to take work.
- Payment information — handled securely by our payment provider, Stripe. We do not store your full card or bank details; Stripe processes these on our behalf.
- Account and usage data — your login details and basic technical information (such as your device/browser) needed to run the site securely.
- Messages — communications you send through the platform (for example, messages between a customer and driver about a job).
How we use your information
We use your information to:
- Create and manage your account.
- Connect customers with drivers, process job postings, bids and bookings.
- Take payment from customers and pass the driver's share to them after delivery (via Stripe).
- Verify drivers and keep the platform safe and trustworthy.
- Send you service notifications about your jobs (e.g. a new bid, a booking, a delivery update) by email and in-app.
- Provide customer support and resolve disputes.
- Comply with our legal obligations (for example, tax and fraud prevention).
Our legal basis
Under UK GDPR we rely on the following lawful bases: performance of a contract (to provide the service you've asked for); our legitimate interests (to run, secure and improve the platform and prevent fraud); legal obligation (to meet tax and regulatory duties); and consent (where required — for example, optional marketing emails, which you can withdraw at any time).
Who we share it with
We only share what is necessary, and we do not sell your personal data. We share information with:
- The other party to your job — to complete a booking, a customer and the assigned driver are shown the details needed to carry out the move (such as names, contact details and addresses). Please only use these details for that job.
- Stripe — our payment provider, to process payments and driver payouts.
- Supabase — our secure database and hosting provider, which stores the platform's data on our behalf.
- Email provider — to send you service notifications.
- Authorities and advisers — where we are legally required to (e.g. HMRC, law enforcement, courts), or to establish or defend legal claims.
International transfers
Some of our providers (such as our payment and hosting providers) may process data outside the UK. Where they do, we rely on appropriate safeguards — such as UK adequacy decisions or standard contractual clauses — so your data receives an equivalent level of protection.
How long we keep it
We keep your personal data only as long as needed to provide the service and to meet our legal obligations (for example, financial records are kept for the period required by tax law). When it is no longer needed, we delete or anonymise it. If you close your account, we remove your data except where we are required to retain certain records.
How we protect it
We use secure, access-controlled systems and reputable providers (Stripe, Supabase) with appropriate technical and organisational measures. No system is completely secure, but we take reasonable steps to protect your information. Never share your password or one-time codes with anyone.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased where there is no good reason for us to keep it.
- Restrict or object to how we use it.
- Receive your data in a portable format.
- Withdraw consent (where we relied on it) at any time.
Marketing
We will only send marketing emails if you have opted in, and you can unsubscribe at any time using the link in any marketing email or by contacting privacy@payavan.com. Service messages about your actual jobs are not marketing and will still be sent.
Cookies
We use only the cookies necessary to keep you logged in and to run the site securely. We do not use advertising or tracking cookies. You can control cookies through your browser settings, though some features may not work without the essential ones.
Complaints and contact
If you have a question or want to exercise any of your rights, email privacy@payavan.com and we'll respond within one month. If you're unhappy with how we've handled your data, you have the right to complain to the ICO at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The version published here, with the date below, is the one in force.
Last updated June 2026.