Last updated: March 2026 · Effective immediately
Haulion ("we", "us", "our") is a fleet management software platform. We provide software-as-a-service (SaaS) to transport and logistics businesses ("Tenants") and their staff ("Users").
For the purposes of UK and EU data protection law, Haulion acts as a data processor on behalf of Tenant businesses (who are the data controllers for their drivers, customers, and staff data), and as a data controller for Tenant account and billing information.
Contact: privacy@haulion.com
The following data is entered by Tenants and their staff and is processed on their behalf:
| Category | Examples |
|---|---|
| Driver records | Name, email, phone, address, licence number, date of birth, emergency contacts, medical notes |
| Customer records | Company name, contact person, email, phone, address |
| User accounts | Name, email address |
| Job data | Collection/delivery locations, dates, load details, pricing |
| Invoice data | Invoice amounts, VAT, payment status |
| Activity logs | Who did what and when |
We do not sell your data. We do not use your data for advertising.
| Processing activity | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Providing the SaaS platform | Contract (Art. 6(1)(b)) |
| Billing and subscription management | Contract (Art. 6(1)(b)) |
| Security logging and fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Processing driver/customer data for Tenants | Legitimate interests of the Tenant (Art. 6(1)(f)) or consent |
| Consent records | Legal obligation / Legitimate interests |
Data is retained for as long as a Tenant's account is active, plus a reasonable period after account closure to comply with legal obligations.
Tenants may request earlier erasure through the Data & Privacy section of Settings.
We do not sell or rent personal data. We share data only where necessary:
All third-party processors are bound by Data Processing Agreements (DPAs) ensuring GDPR-compliant handling.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. Our security measures include:
Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
Please notify us immediately at privacy@haulion.com if you believe your account or data has been compromised.
If you are based in the UK or EU, you have the following rights regarding your personal data:
| Right | Description | How to exercise |
|---|---|---|
| Access (Art. 15) | Obtain a copy of your personal data | Submit an export request in Settings → Privacy & GDPR |
| Rectification (Art. 16) | Correct inaccurate data | Edit your profile or contact your workspace admin |
| Erasure (Art. 17) | Request deletion of your data | Submit an erasure request in Settings → Privacy & GDPR |
| Portability (Art. 20) | Receive your data in a structured format | Use the data export function |
| Restriction (Art. 18) | Restrict processing in certain circumstances | Contact us at privacy@haulion.com |
| Objection (Art. 21) | Object to processing based on legitimate interests | Contact us at privacy@haulion.com |
We will respond to all requests within 30 days. If we cannot fulfil a request, we will explain why.
Right to complain: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at any time.
We use only strictly necessary cookies — no analytics or advertising cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie (PHPSESSID) | Maintains your authenticated session | Browser session / 2 hours idle |
| CSRF token | Protects against cross-site request forgery | Session |
You can disable cookies in your browser settings, but the platform will not function without session cookies.
Haulion is a business-to-business service. We do not knowingly collect data from anyone under 18. If you believe a child's data has been entered into the system, please contact us immediately.
We may update this policy to reflect changes in our practices or legal requirements. We will notify Tenant administrators by email of any material changes and update the "Last updated" date above. Continued use of the platform after changes constitutes acceptance of the updated policy.
For any privacy questions or to exercise your rights: