1. Who We Are
Vanzy is operated by Mastery Labs ("we", "us", "our"). We are the data controller for personal data collected through the Vanzy platform at usevanzy.com. Contact: hello@usevanzy.com
2. Data We Collect
Customers:
- Name, email address, phone number
- Pickup and drop-off addresses
- Payment information (processed securely by Stripe — we do not store card details)
- Job history and preferences
Drivers:
- Name, email address, phone number
- Driving licence number and photo
- Goods in Transit insurance certificate
- Public Liability insurance certificate
- DBS certificate (if provided)
- Profile photo / selfie
- Vehicle details (type, model, registration)
- Bank account details for payouts (held by Stripe)
- GPS location data while on a job
3. How We Use Your Data
- To provide and operate the Vanzy platform
- To match customers with available drivers
- To process payments and payouts
- To verify driver identity and compliance
- To send service notifications via email and WhatsApp
- To resolve disputes and handle complaints
- To comply with our legal obligations
4. Legal Basis for Processing
We process your data under the following legal bases (UK GDPR Article 6):
- Contract performance — to deliver the services you've requested
- Legal obligation — to comply with applicable laws
- Legitimate interests — to operate and improve our platform safely
- Consent — for marketing communications (you can withdraw at any time)
5. Who We Share Data With
- Drivers — receive customer pickup address and contact details for jobs they accept
- Customers — see driver name, photo and vehicle details
- Stripe — payment processing and driver payouts
- Supabase — secure database and file storage (EU/UK data centres)
- Twilio — WhatsApp and SMS notifications
- Resend — email delivery
We never sell your personal data to third parties.
6. Data Retention
We retain your data for as long as your account is active plus 6 years thereafter for legal and accounting purposes. Driver compliance documents are retained for 7 years. You may request deletion of your account and data at any time (subject to legal retention requirements).
7. Your Rights
Under UK GDPR you have the right to:
- Access a copy of your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to processing or request restriction
- Data portability
- Withdraw consent at any time
To exercise any right, contact hello@usevanzy.com. You also have the right to complain to the ICO at ico.org.uk.
8. Cookies
We use essential cookies only — for authentication sessions and security. We do not use advertising or tracking cookies. No cookie consent banner is required for essential-only cookies under UK law.
9. Security
All data is encrypted in transit (TLS 1.3) and at rest. Driver documents are stored in private, access-controlled storage and are only accessible to authorised Vanzy staff. Payment data is processed entirely by Stripe and never touches our servers.
10. Changes to This Policy
We may update this policy from time to time. We'll notify you of significant changes by email. Continued use of Vanzy after changes constitutes acceptance of the updated policy.