Data Protection Rights

Last updated: 1 June 2026

01Our approach

AutoMauve is designed for UK and European fleet operators, so we treat UK GDPR, EU GDPR where applicable, and the Data Protection Act 2018 as core product requirements.

This page summarises your rights. The full Privacy Policy explains the data we collect, our controller and processor roles, lawful bases, retention, subprocessors, transfers, security, and contact details.

02Your rights

Access

Article 15

Ask whether we process your personal data and request a copy of the data we hold about you.

Correction

Article 16

Ask us to correct inaccurate personal data or complete incomplete personal data.

Deletion

Article 17

Ask us to delete personal data where the law gives you that right. This right may be limited where records are needed for legal, compliance, billing, security, or customer-controlled fleet purposes.

Restriction

Article 18

Ask us to restrict how we use certain personal data while a concern or objection is being considered.

Portability

Article 20

Ask for certain data you provided to us in a structured, commonly used, machine-readable format.

Objection

Article 21

Object to processing based on legitimate interests or to direct marketing at any time.

03Customer-controlled records

Many AutoMauve records are created by a customer organisation, such as your employer, fleet operator, or account administrator. This can include driver profiles, vehicle check reports, defect records, incident reports, photos, signatures, location data, support tickets, site assignments, and compliance evidence.

For those records, the customer organisation usually decides the purpose and lawful basis. We normally act as its processor. If you make a request to us about customer-controlled records, we may need to pass the request to that organisation or ask you to contact it directly.

04How to make a request

To help us handle your request, include your name, email address, the organisation or company account you are connected to, the right you want to exercise, and enough detail for us to identify the relevant data.

  • We may ask you to verify your identity before acting on a request.
  • We aim to respond within one month. If a request is complex or we receive multiple requests, the law may allow us more time.
  • Some requests may be refused or limited where an exemption applies, where the data belongs to a customer-controlled record, or where we need to retain data for legal, security, billing, dispute, or compliance reasons.

05Lawful bases

We rely on different lawful bases depending on the purpose. These include contract, legal obligation, legitimate interests, consent, and customer instructions where we act as a processor. Direct marketing can be stopped at any time.

Our Privacy Policy gives a product-specific breakdown covering accounts, billing, support, fleet records, analytics, security, waitlist submissions, and legal administration.

06Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can investigate. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk, or to another relevant supervisory authority if one applies to your situation.

07Contact us

For privacy requests or data protection questions, contact:

[email protected]