Privacy Policy

1. Who controls your data

Paperroute Lite is operated by Saunders Simmons. For privacy questions or data requests, contact hello@saunders-simmons.co.uk.

For account, billing and app usage data, we act as controller. For customer, site, contact, signature and waste paperwork information that you enter for your own business, you are responsible for making sure you have a lawful basis to use and share that information.

2. Personal data we collect

Account data: name, email address, password authentication data, business name and user ID.

Business profile data: carrier registration details, business address, phone number, website, logo, representative name, representative signature, default ticket settings and compliance defaults.

Customer and document data: customer names, contact details, site addresses, SIC codes, destination and receiver details, vehicle registrations, waste transfer note information, signatures, notes, PDFs, email delivery status and booking details.

Billing data: subscription status, trial status, Stripe customer and subscription identifiers, checkout and billing portal activity. Full card details are handled by Stripe or the relevant app store and are not stored by Paperroute Lite.

Support and communications data: messages you send to support, related account details and replies.

Technical data: device, app, session, diagnostic, security, sync and error information needed to run and protect the service.

3. How we use personal data and our lawful bases

To create and manage your account, authenticate sign-in, verify email addresses and provide app access. Lawful basis: contract.

To provide core app features including saved business records, customers, waste streams, containers, destinations, vehicles, tickets, PDFs, signatures, booking emails and document emails. Lawful basis: contract and legitimate interests in operating a business record-keeping service.

To process subscriptions, trials, renewals, cancellations, invoices and payment status. Lawful basis: contract and legal obligation for accounting records.

To provide support, investigate issues and respond to requests. Lawful basis: contract and legitimate interests in supporting users.

To protect the app, prevent misuse, maintain security, troubleshoot errors and improve reliability. Lawful basis: legitimate interests.

To send important service messages, such as verification codes, password reset codes, ticket emails, booking emails, billing notices and policy updates. Lawful basis: contract, legal obligation and legitimate interests.

To meet legal, regulatory, tax, accounting or dispute-resolution duties. Lawful basis: legal obligation and legitimate interests.

4. Who we share data with

Supabase, for authentication, database hosting, storage and server-side functions.

Stripe, for subscription checkout, billing, payment status and customer billing portal services.

Resend, for sending verification emails, password reset emails, support emails, booking emails and customer document emails.

Apple, Google, Expo and app platform providers where needed for app distribution, updates, diagnostics, device operation or app store processes.

Regulators, professional advisers, insurers, law enforcement, courts or other parties where required by law or needed to protect rights, users or the service.

Customers or recipients you choose when you send a transfer note, booking confirmation or other document from the app.

We do not sell personal data.

5. International transfers

Some providers may process data outside the United Kingdom. Where this happens, we rely on appropriate safeguards such as UK-approved contractual terms, adequacy arrangements or provider transfer mechanisms designed to protect personal data.

6. How long we keep data

Account and business profile data is kept while your account is active and for a reasonable period afterwards for support, security, accounting and dispute purposes.

Waste transfer note records, customer records, destination records, vehicle records, generated PDFs and related document data are kept while your account uses the service, unless you delete them or ask us to delete your account. You are responsible for keeping copies of records your business must retain by law.

Billing and transaction records may be kept for up to seven years where needed for tax, accounting and legal obligations.

Support messages and diagnostic records are kept only as long as reasonably needed to handle the request, maintain security, improve reliability or defend legal claims.

7. Your rights

Under UK data protection law, you may have rights to access, correct, erase, restrict, object to or receive a copy of your personal data. You may also have the right to complain to the Information Commissioner’s Office.

To make a request, contact hello@saunders-simmons.co.uk. We may need to verify your identity before acting on a request.

If we process data because you gave consent, you can withdraw that consent. Withdrawal will not affect processing that happened before withdrawal. Some app features may not work if required data is deleted or restricted.

8. Account deletion

You can request account deletion by contacting hello@saunders-simmons.co.uk or by sending a support message from inside the app.

Deletion may remove access to your records. We may retain limited information where required for legal, accounting, fraud prevention, dispute handling or regulatory reasons.

9. Security

We use technical and organisational measures designed to protect personal data, including account authentication, access controls, encrypted provider connections and row-level access controls in the database.

No system is completely secure. You should use a strong password, keep your device secure and tell us promptly if you think your account has been compromised.

10. Children

Paperroute Lite is a business app and is not intended for children. You must not create an account if you are under 18.

11. Changes to this policy

We may update this policy when the app, providers, law or regulatory requirements change. If changes are material, we will take reasonable steps to notify you in the app or by email.