Privacy Policy
Learn how we protect your personal data at DriverLink
Last updated: 28 September 2026
1. Introduction
DriverLink is a platform that enables secure communication between vehicle owners and people who want to contact them via the licence plate number. This Privacy Policy explains how we collect, use, store and protect your personal data.
We comply with all provisions of the General Data Protection Regulation (GDPR) and Polish personal data protection law. Your privacy is our priority.
By using our services, you consent to the processing of your personal data in accordance with this policy.
2. Data Controller
The controller of your personal data is:
3. What Data We Collect
We collect only the data that is necessary to provide our services:
User account data:
- Email address (for signing in and notifications)
- Phone number (for SMS notifications and verification)
- First and last name (optional, for personalisation)
- Password (stored in encrypted form)
Vehicle data:
- Licence plate number
- Country code of the vehicle registration
- Notification preferences (email/SMS)
Communication data:
- Content of messages sent through the platform
- Time messages were sent and received
- Message attachments (if any were uploaded)
- Contact details of the message sender (shared with the vehicle owner)
Payment and order data:
- Invoice details (first name, last name, address, tax ID (NIP) – if applicable)
- Delivery address for QR sticker orders
- Payment information (transaction number, amount, date)
- Data necessary to issue a VAT invoice
- Order and purchase history (Full Access, QR stickers)
4. How We Use Your Data
We use your personal data solely for the following purposes:
- Relaying messages between users – the sender's contact details are shared with the vehicle owner
- Sending email and SMS notifications about received messages
- Verifying the identity of message senders (Pro feature)
- Protection against spam and unwanted contact
- Processing payments for Full Access and QR stickers
- Delivering QR stickers to the address provided
- Issuing VAT invoices and keeping accounting records
- Providing and improving our services
- Fulfilling legal obligations and protecting our rights
5. Legal Basis for Processing
We process your personal data on the basis of:
- Consent – For marketing notifications and optional features
- Performance of a contract – For providing the core services of the platform
- Legitimate interest – For platform security and abuse prevention
6. Data Sharing
We do not sell, rent or share your personal data with third parties for marketing purposes.
Your data may be shared in the following cases:
- The message sender's contact details are passed to the vehicle owner to enable communication
- With payment operators (Stripe, PayPal, przelewy24) to process transactions for Full Access and QR stickers
- With courier companies to deliver ordered QR stickers to the address provided
- With technical service providers (hosting, analytics) acting on our behalf
- With an accounting office to keep accounting records and issue invoices
- With law enforcement authorities on the basis of a final court order
- With your explicit consent in specific cases
IMPORTANT: By using the DriverLink service, you consent to your contact details (name, email, phone) being shared with the owner of the vehicle to which you send a message. This is the core functionality of our service.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access – You can request a copy of all data we process about you
- Right to rectification – You can request correction of inaccurate or incomplete data
- Right to erasure – You can request deletion of your data ('right to be forgotten')
- Right to data portability – You can receive your data in a format that allows it to be transferred
- Right to object – You can object to the processing of your data in certain cases
- Right to lodge a complaint – You can lodge a complaint with the President of the Personal Data Protection Office (UODO)
8. Data Security
We apply appropriate technical and organisational measures to protect your personal data:
- Encryption of data in transit and at rest
- Access to data restricted to authorised personnel only
- Regular monitoring of systems for security threats
- Secure backups with regular verification
9. Data Retention Period
We keep your personal data only for as long as necessary:
- Account data – Until the account is deleted or 3 years after the last activity
- Message history – 12 months from when the message was sent
- System logs – 6 months for security and diagnostic purposes
11. Google Sign-In and Google User Data
You can create a DriverLink account and sign in to it with your Google account (the “Sign in with Google” button or Google One Tap). We use only Google's basic sign-in scopes: openid, email and profile.
When you sign in with Google, DriverLink receives only basic profile data from Google:
- your name,
- your email address,
- your profile picture.
We use this data only to create your DriverLink account and to authenticate you when you sign in. We do not access any other data in your Google account, such as contacts, email, calendar or files.
We do not sell data received from Google, share it with third parties, or use it for advertising.
DriverLink's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can delete this data at any time by deleting your DriverLink account in your profile settings (how to delete your account) or by writing to [email protected]. You can also remove DriverLink's access in your Google account permissions.
12. Contact
For matters relating to personal data protection, contact us:
Email: [email protected]
We will respond to your enquiry within 30 working days.