Skip to content
RegisterAccess the app

Drive it and Deliverate privacy notice

Effective 10 September 2026 · Version drive-it-deliverate-2026-09-10-v1

Who is responsible

Drive it is operated by Nexus Delivery Team Ltd. It is responsible for your driver application, membership and the driver-network information it determines how to use. Deliverate is operated by The Home Delivery Guys Ltd. It is responsible for the marketplace account, introduction and booking information it determines how to use.

For privacy questions or requests, contact Nexus Delivery Team about Drive it or contact Deliverate support. You can also use the privacy-request control in your driver application.

The courier awarded a transport job contracts directly with the customer for transport and is responsible for the customer information it uses for that service. A shared application does not make every company the same controller. Where Nexus processes merchant information on a merchant’s instructions, the applicable merchant agreement governs that processing.

What we collect and why

  • Account email, legal and contact names, telephone, optional WhatsApp and depot details let us establish your driver account, contact you and arrange work.
  • Driving licence, commercial motor insurance and Goods in Transit evidence let authorised reviewers assess identity, eligibility and insurance and check expiry dates. Provide only the requested evidence and avoid unrelated identity, medical or third-party records.
  • Vehicle types, counts and optional towing configuration support suitable work allocation. Your public profile can display vehicle types, counts and towing availability.
  • VAT status, VAT number and your certificate if registered support review of invoicing status. Notify us when your status changes.
  • Stripe account status supports payment setup. Stripe collects its own identity, bank and payment credentials directly. A declaration that you have an account is not a verified payment connection.
  • Your existing Google Maps connection supports map display, routing and optimisation. Google receives the mapping requests needed for the functions you use. Server API keys are kept out of public profiles and are not displayed back in the application.
  • Operational contacts, tracking updates, photos, signatures and proof of delivery support a booked delivery and relevant claims. Device location permissions and the job’s tracking controls govern the location features you use.

Our lawful bases

We use information necessary to take steps you request before entering a contract and to perform the account, membership or booking contract. Vetting, fraud prevention, security and handling claims can rely on legitimate interests, subject to necessity and balancing your rights. Applicable tax and accounting obligations may require certain records. We do not treat a privacy acknowledgement as blanket consent to all processing.

Privacy acknowledgement, service terms and optional marketing are separate. The driver application does not enrol you in marketing. Where a separate activity relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

What is shared

Nexus holds the driver application used by Drive it. The approved Deliverate profile exposes only a generated courier username, vehicle types and counts, towing availability and VAT-registration status. It excludes real names, depot addresses, contact details, VAT numbers, licence and insurance documents, and free-text towing descriptions.

Authorised reviewers can access private application records and certificates. Reviewer access and document downloads are recorded. Booking contacts are shared with the parties who need them to perform the awarded transport; the required supplier identity and contractual information must be disclosed before the customer commits. Private applications and documents are not published for search engines or AI indexing.

Service providers and overseas processing

Our services use Supabase for application data and storage, Vercel for hosting, Stripe for payment services, Google Maps for mapping, and the communication providers enabled for the relevant account. Providers may act as processors or as independent controllers for their own services. Processing or support access may occur outside the UK; where the law requires it, applicable adequacy arrangements or contractual safeguards must cover those transfers. Contact the relevant operator for information about the safeguards and providers used for your account.

Retention

We keep information while it is needed for the stated purpose and any applicable legal obligations or claims. We review abandoned and unsuccessful applications separately from active accounts. Replaced or expired identity and insurance evidence is retained only where needed to establish what was checked, resolve a claim or meet a documented obligation. It does not automatically inherit the retention period of a delivery order.

Financial records are kept for applicable accounting and tax requirements. Job contacts and delivery evidence are reviewed against contractual, claims and legal needs. A documented legal hold can delay deletion. Backups are managed separately and are not used to restore deleted information to ordinary use without checking the relevant restriction or deletion decision. Ask us for the retention criteria applying to a particular record.

Security and your choices

Private uploads, verified account ownership, restricted reviewers, short-lived download links and a limited public profile protect application information. Keep your login secure, restrict your Maps keys, and do not send passwords, secret payment keys or bank documents through the application. No security measure can guarantee that an incident will never occur.

Required application information allows us to assess your account. Without it, we may be unable to approve your profile or enable relevant work. Optional WhatsApp and towing information are identified in the form.

Your rights and human review

You can request access, correction, erasure, restriction or portability where applicable, and raise a privacy complaint. You can object to processing based on legitimate interests and to direct marketing. Some records may need to be retained for legal obligations or claims; we will explain relevant limitations. Requests are reviewed, with proportionate identity checks and protection for other people’s information, before data is released or deleted.

A person reviews driver applications. Readiness checks can flag missing or expired evidence; contact us to correct a record or request human review. You may complain to the Information Commissioner’s Office.