Privacy Policy

Last updated: 25 May 2026

1. Who We Are

K3M is a driver management and compliance platform operated by K³Moves. This policy explains how we collect, use, and protect your personal data when you use our web and mobile applications.

2. Data We Collect

• Account information - name, email address, phone number
• Driver information - licence number, licence expiry, validation code, profile photo
• Location data - GPS coordinates when you use the driver check-in feature
• Device information - device name (for token management)

3. How We Use Your Data

• To authenticate and manage your account
• To track driver locations for fleet management
• To verify driver identity and compliance
• To send operational notifications

4. Data Security

All sensitive personal data (names, emails, phone numbers, licence numbers, banking details) is encrypted at rest using AES-256 encryption. Passwords are hashed using bcrypt. API authentication uses bearer tokens stored securely in the iOS Keychain.

5. Data Retention

When you delete your account, it is deactivated immediately and permanently deleted after 90 days. During this period, an administrator may restore your account. After 90 days, all personal data and associated records (locations, photos, tokens) are permanently removed.

6. Your Rights

You have the right to access, correct, or delete your personal data. You can delete your account directly from the mobile app. For other requests, contact your administrator or email us at the address below.

7. Third-Party Services

• Duo Security - two-factor authentication (processes authentication events only)
• DigitalOcean Spaces - secure file storage for profile photos

8. Contact

For privacy enquiries, contact us at www.k3moves.co.uk.

← Back to home