Privacy Policy - MapTools.uk

Introduction

This Privacy Policy explains how MapTools.uk ("we", "us", or "our") handles information in connection with our services. We provide different services, and they handle data differently:

Free mapping tools (the free route planner, postcode tools, and similar) - these run in your web browser and we do not collect or store the data you put into them. This is explained below. The signed-in Route Planner Pro is a separate service, and the data it stores is described in the Account information section below.
Proof of Delivery (POD) - a feature for signed-in subscribers that records delivery evidence (photos, optional signatures, delivery notes) on our servers so you can prove a delivery was made. Because this feature stores data for you, it works differently from the free tools, and the "Proof of Delivery Data" section below explains exactly what we store, why, and for how long.

Please read both the general sections and, if you use POD, the Proof of Delivery section, as they apply together.

By using our Site, you agree to the collection and use of information in accordance with this policy.

Who We Are (Data Controller)

The data controller responsible for your personal data is:

Grainger & Rossall Ltd
Registered office: 189 Lynchford Road, Farnborough, GU14 6HD, United Kingdom
ICO registration: application submitted (reference C1952682); our registration number will be added here once issued.

For any privacy or data-protection query, contact us at privacy@maptools.uk.

Information We Collect

Data processed locally by the free tools (not collected by us)

Our free mapping tools process data entirely within your web browser. When you use these tools:

Postcodes and addresses you enter are processed locally to plan and display routes.
Location data used for these tools is not sent to or stored on our servers by the tool itself.
CSV or spreadsheet files you upload to the free tools are processed in your browser and are not transmitted to us.

For the free tools specifically, we do not collect, store, or have access to your postcode searches, the routes you plan, or the files you use with them.

Please note: this "stays in your browser" position applies to the free tools. It does not apply to the Proof of Delivery feature, which deliberately stores data on our servers - see the Proof of Delivery section below.

Account information

When you sign in to Route Planner Pro, we create an account for you and store:

Your name and email address, as provided by your Google account when you sign in.
A Google account identifier used to recognise you at sign-in.
Your subscription and trial status, and (for paying subscribers) a customer reference from our payment processor, Stripe. We do not store your card details - see Third-Party Services and Processors.
Basic product activity tied to your account (for example, that a route was optimised or a delivery marked done), used to operate and improve the service.
When you optimise a route while signed in, the stops and time windows you submit are processed on our servers to plan the route, and we keep a copy for up to 30 days to diagnose problems and improve the service.
If a postcode you enter into the signed-in route planner cannot be matched to a location, we send that individual postcode - together with the reason it could not be matched and your start and end postcodes, but not the rest of your stops and not any names or notes - to our servers and keep it for up to 30 days to diagnose and fix the problem.

We use this information to provide the Route Planner Pro service, manage your subscription, and contact you about your account.

Information Automatically Collected

When you visit our Site, we may automatically collect certain information including:

IP address (anonymised)
Browser type and version
Device type
Pages visited and time spent
Referring website

This information is collected through cookies and similar technologies as described in our Cookie Policy.

Proof of Delivery (POD) Data

Proof of Delivery is an optional feature for signed-in subscribers. Unlike the free tools, it stores delivery evidence on our servers so that you, our subscriber, can later prove a delivery took place. This section explains what we store and how we handle it.

What we store

When you capture proof of delivery at a stop, we may store:

Delivery photos - the image(s) you take of the delivery (for example, a parcel at a doorstep). Stored on our servers.
Signatures - if captured, an image of a signature taken on your device at the point of delivery. Optional; only stored if you capture one.
Delivery notes - short notes you add to a stop (for example, "left in porch").
Capture details - the date and time of capture, the delivery address or postcode the evidence relates to, and the approximate location (GPS) recorded at the moment of capture.
Run and stop records - your account identifier, the run, the stops on it, and their delivery status.

This information is stored using our infrastructure provider, Cloudflare (see Third-Party Services and Processors).

Whose data this is

POD evidence can include personal data relating to three kinds of person:

You, the subscriber - your account and the records you create.
The person at the delivery address - a photo of a property, the delivery address, and the fact and time of delivery can be personal data about the recipient, even though they are not our customer.
A signature, where captured, can identify the person who signed.

We treat recipient information, and signatures in particular, with care, because the recipient is not our direct customer and a signature is directly identifying. We collect the minimum needed to evidence the delivery.

Why we store it (lawful basis)

For your data, our basis is performance of our contract with you - POD is part of the subscription service you pay for.
For recipient and signature data, our basis is legitimate interests: the legitimate interest of you (and the sender you deliver for) in being able to prove that a delivery was made, balanced against the recipient's reasonable expectation that a delivery to their address may be recorded. Photographing a completed delivery is an established practice across the courier industry. We keep the record proportionate and time-limited.

How sharing works

POD evidence is private to your account by default. If a delivery is queried, you can generate a share link for that single delivery and send it to the person who needs to see the proof.

A share link shows only that one delivery's evidence - never your other stops, runs, or customers.
A share link expires automatically after a fixed period (see Retention).
GPS coordinates and your customer's name are never shown on a public share link. The location is kept for your internal records only.
Signatures and delivery notes are only included on a share link if you choose to include them; they are off by default.
You can revoke a share link at any time, which takes effect immediately.

Retention

Delivery photos and signatures are automatically deleted from our storage 90 days after the photo is uploaded to our servers.
Share links expire 30 days after they are created, regardless of the 90-day data retention, so a link stops working before the underlying data is deleted.
After deletion, evidence cannot be recovered.

Your control and erasure

You can delete an individual photo, or delete an entire run (which removes its stops, photos, signatures, and any share links), from within the app.
If a recipient asks you, or asks us, to delete a delivery photo or signature relating to their address, we can locate and delete it. We keep a record that a deletion took place (for accountability), but that record does not retain the deleted image.
That accountability record may retain the contact details of whoever made the deletion request (for example, an email address), so that we can evidence who asked and when.
To make a request to us directly, contact us at privacy@maptools.uk.

Deleting your whole account

You can delete your entire account at any time from within the app (open the account menu and choose "Delete account"). This is immediate and cannot be undone. When you delete your account:

Your account and the data we hold for it are erased from our live systems straight away - your routes, runs, delivery photos, signatures, delivery notes, saved settings, and any share links you created.
If you have a paid subscription, it is cancelled immediately. We do not provide a refund for any unused portion of the current billing period.
For legal and accounting reasons, we keep payment and invoice records held by our payment processor, Stripe, for the period required by UK law (for example, HMRC tax records). These are retained separately from your account.
We keep a dated record that a deletion took place, for accountability. This record does not contain your deleted content; where an email address is held it is stored only so we can evidence that the request was made and actioned.
Copies of data may persist temporarily in our encrypted backups. We do not use backups to restore deleted accounts, and backup copies are overwritten and age out automatically on our normal backup rotation.

How We Use Your Information

We use the automatically collected information to:

Understand how visitors use our Site to improve our services
Monitor and analyse trends and usage
Detect and prevent technical issues
Display relevant advertising through our advertising partners

We use Proof of Delivery data only to provide the POD feature to you - to store, display, and let you share the delivery evidence you capture. We do not use POD photos or signatures for advertising, we do not sell or license them, we do not use them to train machine-learning models, and we do not perform facial recognition on them.

Third-Party Services and Processors

Google AdSense

We use Google AdSense to display advertisements. Google may use cookies to serve ads based on your prior visits to our Site or other websites. You can opt out of personalised advertising by visiting Google's Ads Settings.

For more information about how Google uses data, please visit How Google uses information from sites that use our services.

OpenStreetMap and Nominatim

Our maps use data from OpenStreetMap, and address searches use the Nominatim geocoding service. When you search for a location, that query is sent to these services. Please refer to OpenStreetMap's Privacy Policy for information about how they handle data.

Cloudflare

We use Cloudflare to host our service and to store Proof of Delivery data (photos, signatures, and associated records). Cloudflare processes this data on our behalf as our infrastructure provider.

Google (sign-in)

Route Planner Pro uses Google Sign-In to let you sign in to your account. When you sign in, Google provides us with your name, email address, and a Google account identifier. Your use of Google Sign-In is also subject to Google's Privacy Policy.

Stripe

We use Stripe to process subscription payments. Stripe handles your payment-card details directly; we do not store full card numbers ourselves. Stripe acts as our payment processor and retains transaction and invoice records as required for financial and legal purposes.

Cookies

We use cookies to enhance your experience on our Site. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect the information we collect. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Proof of Delivery data is transmitted over encrypted connections and stored with our infrastructure provider. Public share links use long, non-guessable addresses, are served only over secure connections, and are rate-limited to prevent anyone from trying to discover links by guessing. Treat a share link as confidential: anyone who has the link can view that delivery's evidence until it expires or you revoke it.

Your Rights (UK GDPR)

Under UK data protection law, you have rights including:

Right of access - to request copies of your personal data
Right to rectification - to request correction of inaccurate data
Right to erasure - to request deletion of your data
Right to restrict processing - to request limitation of data processing
Right to object - to object to processing of your data
Right to data portability - to request transfer of your data

For the free tools, we hold little or no personal data, so in practice these rights mostly concern data collected through analytics and advertising. For Proof of Delivery, we do store personal data (including data about delivery recipients), and these rights apply to it - including the right of a recipient to ask for a delivery photo or signature to be erased. To exercise any of these rights, contact us at privacy@maptools.uk. We aim to respond within one month, as required by UK GDPR.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

Children's Privacy

Our Site is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us at:

Email: privacy@maptools.uk

Our data controller details (registered entity and address) are set out in the "Who We Are (Data Controller)" section above.