Privacy policy

Our role under UK data protection law depends on whose data is involved.

We are a data controller for personal data relating to:

• Our own business customers — the operators who subscribe to Hizke, and their staff who hold accounts with us
• Visitors to hizke.co.uk, enquirers, and people who contact us
• Applicants and recipients of our marketing communications

We are a data processor for personal data that an operator processes through the Hizke platform — principally their drivers’ and passengers’ data. In those cases the operator is the controller and decides how that data is used; we process it on their documented instructions under a data processing agreement. If you are a driver or a passenger and want to exercise your rights over that data, contact the operator you deal with in the first instance, and we will support them in responding.

Operator and staff accounts (we are controller)

Name, work email, telephone number, job role, business address, login credentials, authentication and session records, support correspondence, billing and subscription records.

Driver data (we are processor for the operator)

Name, contact details, date of birth, profile photograph, private hire or hackney carriage licence details, DVLA driving licence details, right-to-work documentation, vehicle and insurance documents, disclosure and barring information where the operator’s licensing authority requires it, bank or payout details, shift and availability records, job history, and location data while on duty.

Passenger data (we are processor for the operator)

Name, telephone number, pickup and destination addresses, journey history, accessibility or service notes provided by the passenger, ratings and feedback, and payment reference data.

Location data

Where the operator has enabled it, the driver app collects location data while a driver is signed on to a shift, so that jobs can be allocated and journeys tracked. Drivers are told about this in the app and location collection stops when a driver signs off.

Payment data

Card and bank details are collected and processed by our payment provider. Hizke does not store full card numbers on its own systems.

Website and technical data

IP address, browser and device information, pages visited, referral source, and cookie identifiers. See section 10.

Special category and criminal offence data

Some compliance documents an operator uploads — for example DBS certificates or medical fitness records — may constitute criminal offence data or health data. We process these only as a processor, on the operator’s instructions, for the operator’s licensing compliance purposes, and we apply additional access restrictions to them.

Where we act as controller, we rely on the following:

Where we act as processor, the lawful basis for processing driver and passenger data is determined by the operator as controller.

We share personal data only where necessary, and never sell it. Our categories of recipient are:

• Cloud hosting and infrastructure providers who host the platform and its databases
• Payment processors who handle card payments and driver payouts
• Communications providers used to send SMS, email and push notifications relating to bookings
• Mapping and routing providers used to calculate routes, fares and estimated times
• Error monitoring and analytics providers used to keep the service reliable
• Professional advisers such as accountants and lawyers, where necessary
• Regulators, licensing authorities, the police or other authorities where we are legally required to disclose, or where an operator instructs us to do so in connection with their licensing obligations

A current list of our sub-processors is available to operators on request.

We aim to host personal data in the United Kingdom or the European Economic Area. Where a provider processes data outside those regions, we ensure an appropriate safeguard is in place — typically UK adequacy regulations, or the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

• Operator account and billing records: for the life of the subscription and six years afterwards, to meet accounting and limitation-period requirements
• Driver and passenger data processed on behalf of an operator: for as long as the operator instructs, and deleted or returned on termination of their agreement in accordance with that agreement
• Location and telemetry data: retained for the period set out in the operator's agreement unless an operator’s licensing authority requires longer
• Website analytics and cookie data: as set out in section 10
• Support correspondence: kept for as long as we need it to resolve the query and any follow-up

We apply technical and organisational measures appropriate to the risk, including encryption of data in transit, encryption at rest for stored documents, role-based access controls, audit logging of administrative actions, multi-factor authentication for privileged accounts, and regular backups. Access to compliance documents is restricted to users the operator has authorised.

Under UK GDPR you have the right to request access to your personal data, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You will not be charged for making a request, and we will respond within one month.

To exercise these rights against Hizke as controller, contact hello@hizke.co.uk. If your data was entered into the platform by an operator, contact that operator, who is the controller.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113. We would appreciate the chance to address your concern first.

To request deletion of your data:

1. Email hello@hizke.co.uk with the subject line “Data deletion request”.
2. Tell us which account or record the request relates to, and include enough detail for us to identify it.
3. We will verify your identity and confirm what will be deleted before we act.
4. We will complete verified requests within 30 days and confirm in writing when the deletion is done.

If you hold an operator account, you can also delete your account from within the console under Settings, which begins the same process.

If your data was uploaded to Hizke by a taxi or private hire operator, we will pass your request to that operator, as they are the controller and decide what may be deleted. Some data may need to be retained where the law requires it — for example records an operator must keep for their licensing authority, or transaction records we must keep for tax purposes. We will tell you if that applies.

We use cookies and similar technologies that are strictly necessary to run the platform — for example to keep you signed in and to secure your session. These do not require consent.

Where we use analytics or marketing cookies, we ask for your consent first through our cookie banner, and you can change or withdraw that consent at any time using the banner controls. You can also block or delete cookies in your browser settings, though the platform may not function correctly without the necessary ones.

We maintain business pages on social media platforms including Facebook, Instagram, LinkedIn, X, YouTube and TikTok. We use those platforms’ official publishing tools and APIs to post our own content to our own accounts, and to view aggregated statistics about how that content performs.

We do not collect or store personal data about people who follow or interact with those pages beyond what the platform itself shows us, and we do not use these tools to access data about accounts we do not own. Each platform is a separate controller for the data it collects about you when you use it, governed by its own privacy policy.

The Hizke platform is a business tool for licensed operators and is not directed at children. We do not knowingly collect personal data from anyone under 16 through our website or operator console.

We may update this policy from time to time. When we make material changes we will update the date at the top and, where the change significantly affects our operators, notify them directly.

Hizke
Email: hello@hizke.co.uk

A postal address will be published here once the company registration completes. Until then email reaches us fastest.