right-fuelcard is committed to protecting your privacy and handling your personal data responsibly. This policy explains what data we collect, why we collect it, and your rights regarding that data.
Device & technical data: IP address, browser type, operating system, referral URLs, and cookies.
Communications: support tickets, emails, and call records you initiate with us.
2. How We Use Your Data
To provision, operate, and improve right-fuelcard accounts and fuel card services.
To process payments, detect fraud, and comply with financial regulations.
To send transactional emails, account alerts, and (with consent) marketing communications.
To meet legal obligations including AML, KYB, and tax reporting requirements.
3. Legal Basis for Processing
Contract performance: processing necessary to deliver the service you have contracted for.
Legitimate interests: fraud prevention, security monitoring, and service improvement.
Legal obligation: compliance with applicable financial, tax, and regulatory laws.
Consent: marketing emails and non-essential cookies, which you may withdraw at any time.
4. Cookies & Tracking
We use strictly necessary cookies to operate the platform and, with your consent, analytics and marketing cookies to measure performance and personalise content. You can manage your cookie preferences via our Cookie Preference Centre at any time. See our Cookie Policy for full details.
5. Third Parties & Sharing
Payment processors and banking partners required to execute fuel card transactions.
Cloud infrastructure providers (data centres located within the EEA or with adequate safeguards).
Analytics providers (e.g. Google Analytics) under strict data processing agreements.
We never sell your personal data to third parties for their own marketing purposes.
6. Your Rights (GDPR & CCPA)
Access: request a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: request deletion of your data where no legal retention obligation applies.
Portability: receive your data in a structured, machine-readable format.
Objection / Restriction: object to or restrict certain processing activities.
California residents may additionally opt out of the sale or sharing of personal information under CCPA.
To exercise any right, email privacy@right-fuelcard.com. We respond within 30 days.
7. Data Retention
We retain account and transaction records for seven (7) years to satisfy financial and tax regulatory requirements. Technical logs are retained for up to 12 months. Marketing consent records are kept for the duration of the relationship plus three years.
8. Security
We apply industry-standard safeguards including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and regular third-party penetration testing. No system is fully invulnerable; in the event of a breach we will notify affected individuals and regulators within 72 hours as required by law.
9. Children's Privacy
right-fuelcard services are intended solely for business users aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently done so, please contact us immediately and we will delete the data without delay.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or prominent in-platform notice at least 14 days before taking effect. The date at the top of this page always reflects the version currently in force.
11. Contact & Data Controller
Data Controller: right-fuelcard Ltd, 12 Fleet Street, London, EC4A 2BN, United Kingdom.
Data Protection Officer: dpo@right-fuelcard.com
General privacy enquiries: privacy@right-fuelcard.com
You have the right to lodge a complaint with the ICO (UK) or your local supervisory authority.
If you have questions about this policy or how right-fuelcard handles your data, contact our Data Protection Officer at dpo@right-fuelcard.com. We are registered with the UK Information Commissioner's Office (ICO) and comply with UK GDPR and the Data Protection Act 2018.