Privacy Policy

1. Who we are

The data controller is Saunders Simmons Ltd, Company No: 15839557, of 15 Oxford Road, Pen Mill Trading Estate, Yeovil, Somerset BA21 5HR. If you have any questions about this policy or how we handle your data, contact us at hello@paperroute.co.uk.

2. What data we collect

We collect personal data in the following ways:

Account and subscription data

When you register for or use SkipRoute, we collect:

• Name and email address
• Business name, address, and contact details
• Billing information (payment details are processed by Stripe and not stored by us)
• Account login credentials (passwords are hashed and never stored in plain text)

Usage data

We automatically collect certain information when you use the Service:

• IP address and device type
• Browser type and version
• Pages visited and features used within the Service
• Time and date of access

Customer and operational data

When you use SkipRoute to manage your business, you may upload data about your customers, jobs, drivers, and waste movements. This data is processed on your behalf as described in our Data Processing Policy.

Contact and enquiry data

If you contact us via our website form, email, or phone, we collect the information you provide (name, email, phone number, message content).

3. How we use your data

We use personal data for the following purposes:

• Providing the Service — to create and manage your account, process payments, and deliver SkipRoute functionality.
• Customer support — to respond to your enquiries and resolve issues.
• Service improvements — to analyse usage patterns and improve the Service.
• Legal compliance — to meet our obligations under applicable law.
• Marketing communications — to send you updates about SkipRoute (you can unsubscribe at any time).

4. Lawful basis for processing

We process your personal data on the following lawful bases:

• Contract — processing necessary to provide the Service under our Terms of Service.
• Legitimate interests — to improve the Service, prevent fraud, and manage our business.
• Legal obligation — where processing is required by law.
• Consent — for marketing emails (you can withdraw consent at any time).

5. Data sharing

We do not sell your personal data. We share it only with:

• Stripe — to process subscription payments securely.
• Supabase — our database and authentication provider.
• Resend — to deliver transactional and notification emails.
• Professional advisers — where necessary for legal or financial purposes, under strict confidentiality obligations.
• Law enforcement or regulators — where required by applicable law or to protect legal rights.

All third-party processors are required to handle data securely and only as instructed by us.

6. Data retention

We retain personal data for as long as necessary to provide the Service and meet our legal obligations:

• Account data is retained for the duration of your subscription plus 30 days following cancellation, after which it is deleted.
• Financial and billing records are retained for 7 years to comply with HMRC requirements.
• Enquiry and contact data is retained for up to 2 years.

7. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data (subject to legal obligations).
• Restriction — ask us to restrict processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at hello@paperroute.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take data security seriously. Measures in place include encrypted data storage and transmission (TLS), hashed passwords, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; if you become aware of a security concern, please notify us immediately at hello@paperroute.co.uk.

9. Cookies

We use cookies to operate and improve the Service. For full details, see our Cookie Policy.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified to you by email or via a notice in the Service. Continued use of SkipRoute after the effective date of any change constitutes acceptance of the updated policy.

11. Contact

For any privacy-related queries, contact us at: hello@paperroute.co.uk or call 0330 043 6608.

Saunders Simmons Ltd, 15 Oxford Road, Pen Mill Trading Estate, Yeovil, Somerset BA21 5HR. Company No: 15839557.