Route ZERO legal
RouteZero Privacy Policy
This Notice covers personal data Dynamon processes as controller — things like your account, billing, and support history. Data your organisation uploads into RouteZero (for example, depot addresses or route data) is processed by us as processor under our Data Processing Addendum, not covered by this Notice.
1. Who we are
Dynamon Ltd ("Dynamon", "we", "us") is the controller of the personal data described in this Notice.
Registered office: Kenneth Dibben House Enterprise Road, Southampton Science Park, Southampton, United Kingdom, SO16 7NS Company number: 09633575 ICO registration: ZC193440 Data protection queries: support@dynamon.co.uk
We don't currently have a formally appointed Data Protection Officer — our UK GDPR Article 37 assessment is that one isn't required for the scale and nature of our processing. If that changes, we'll update this section. In the meantime, any data protection query can be sent to the email address above.
2. Scope
This Notice applies when you sign up for or use RouteZero, contact us, receive marketing from us, or visit dynamon.co.uk, routezero.app, or related domains.
It doesn't cover personal data you upload into RouteZero about third parties (drivers, depot contacts, and so on) — you're the controller for that, and we process it under our Data Processing Addendum and Terms of Service.
3. What we collect and why
| Category | Examples | Why we collect it |
|---|---|---|
| Account | Name, email, organisation, role | To set up and run your account |
| Authentication | Hashed credentials, MFA state, session tokens | To keep your account secure |
| Usage | Pages visited, credits used, IP address | To run, secure, and improve the Service |
| Billing | Business name, address, VAT/company number, card last-4, invoices | To bill you and meet tax obligations |
| Support | Your messages and our replies | To help you when you contact us |
| Marketing | Contact details and preferences | To send you product updates, if you've agreed |
We don't knowingly collect special-category data (UK GDPR Article 9) about you.
4. Our lawful basis
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Account, authentication, running RouteZero | Contract |
| Billing and invoicing | Contract; legal obligation |
| Operational emails (security, billing, service changes) | Contract; legal obligation |
| Support | Contract; legitimate interests |
| Security and fraud prevention | Legitimate interests; legal obligation |
| Marketing about RouteZero | Consent, or PECR soft opt-in for existing customers |
| Legal compliance | Legal obligation |
Account, authentication, and billing data are needed to provide RouteZero. Marketing data is optional, and you can withdraw consent at any time.
5. Who we share it with
- Our sub-processors, listed at Route ZERO Sub-processors, who help us run RouteZero.
- Professional advisers and authorities, where required by law.
- A buyer, if Dynamon is ever involved in a corporate transaction, under confidentiality obligations.
We don't sell your data, and we don't share it for third-party marketing.
6. International transfers
Your data is stored within the UK. Some of our sub-processors may process data outside the UK — transfer mechanisms are noted on the sub-processor list above.
7. How long we keep it
| Category | Period |
|---|---|
| Account / profile / authentication | While your account is active |
| Usage data | Up to 24 months, then aggregated or deleted |
| Billing records | 6 years (HMRC requirement) |
| Support correspondence | Up to 3 years from your last message |
| Marketing data | Until you unsubscribe |
| Inactive Trial accounts | Deleted after 24 months of no login, with 30 days' email warning first |
If you ask us to erase your data, we'll do so from our primary systems within 30 days, and it'll expire from backups within 90 days. Billing records are kept for the HMRC retention period regardless.
8. Your rights
You have the right to access, correct, or erase your data, restrict or object to its processing (including for direct marketing), request portability, and withdraw consent where we rely on it. We don't make decisions about you using solely automated means with legal or similarly significant effect.
Contact support@dynamon.co.uk. We aim to respond within one month — longer for complex requests, in which case we'll let you know.
You can also complain to the Information Commissioner's Office (ico.org.uk) — we'd appreciate the chance to resolve any concern first.
9. Cookies
We use strictly-necessary cookies and browser storage to operate RouteZero. We don't currently use analytics or advertising cookies. Full details are in our Cookie Policy at Cookie Policy.
10. Children, security, and changes
RouteZero is for businesses only — we don't knowingly collect data from anyone under 18. We use encryption, access controls, and secure development practices to protect your data. If you spot a security issue, tell us at support@dynamon.co.uk.
We'll notify the ICO, and you where required, of any breach that needs reporting. We may update this Notice; we'll tell you about material changes by email or in-app banner.
11. Contact
Support, privacy, and legal: support@dynamon.co.uk ICO registration: ZC193440