Privacy Policy — GMH Chauffeur Driver App

Last updated: 16 June 2026

This Privacy Policy explains how GMH Chauffeur Service (“we”, “us”, “our”) collects, uses, and protects your personal information when you use the GMH Chauffeur mobile application (“the App”) in your capacity as an affiliate driver or partner of GMH Chauffeur Service.

The App is a job-dispatch tool. It is not used by passengers, does not process passenger bookings, and is not connected to the public-facing GMH Chauffeur Service website for the purposes of this Policy. A separate Privacy Policy applies to passengers and website visitors at https://gmhire.co.uk/privacy-policy/.

By creating a driver account and logging in to the App, you confirm that you have read and accepted this Policy.

1. Who We Are

Data Controller: GMH Chauffeur Service

Registered address: 26 Ashley Close, Rochdale, OL11 3EP, United Kingdom

Email: info@gmhire.co.uk

Telephone: 0333 888 0535

GMH Chauffeur Service is the data controller responsible for your personal data within the meaning of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect Through the App

2.1 Account information

• Your email address (used as your login identifier and for operational communications)
• Your first and last name
• A password (stored only as a one-way hash on our servers; never stored in plain text)
• A profile photograph if you choose to upload one (optional)

2.2 Ride and job data

When you accept or carry out a job through the App, the following is processed:

• The pickup and dropoff addresses for the ride
• The booking reference number and pickup time
• The passenger’s name as supplied by our dispatcher
• Ride status updates that you trigger in the App (en route to pickup, arrived at pickup, passenger on board, completed, cancelled)
• Earnings data for completed rides (fare, deductions, net amount payable to you)

2.3 In-app communications

• Chat messages exchanged through the App between you, our dispatcher, and the passenger for an active ride
• Support requests, including any message content and attachments you provide

2.4 Vehicle inspection data

• Photographs you capture through the App at the start of each shift as part of the pre-shift vehicle inspection (typically three exterior or interior views), used to confirm the vehicle’s condition before any ride is dispatched

2.5 Technical and device data

• A Firebase Cloud Messaging (FCM) token — a unique identifier issued by Google Firebase that allows us to deliver ride-offer and operational push notifications to your device
• Device model and operating system version — used to provide compatibility support and diagnose faults
• IP address — collected in server logs for security, fraud prevention, and abuse detection
• App usage data — for your ride status updates, kept for audit and dispute resolution

2.6 Information we collect outside the App

Driving licence details, PCO / PHV private-hire licence details, hire-and-reward insurance, vehicle registration documents, and bank account details for paying your earnings are collected during your off-app onboarding with GMH Chauffeur Service. They are not collected through the App itself and are governed by our general Privacy Policy at https://gmhire.co.uk/privacy-policy/.

3. Location Information — Important

The App does not access your device’s GPS sensor and does not track your real-time location.

The App does not request the ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION, or any background-location permission, on either Android or iOS. We do not collect, store, or transmit your geographical coordinates from your device.

Pickup and dropoff addresses are received from our booking system. These addresses are processed for the performance of the transport contract — they are not used to build a behavioural profile of your movements.

4. How We Use Your Information — Lawful Bases

We do not use your personal data for solely automated decisions that produce legal or similarly significant effects, and we do not use your personal data for marketing without separate consent.

5. With Whom We Share Your Information

5.1 Processors and sub-processors acting on our behalf

• Our cloud-hosting provider — for the backend API and database
• Google Firebase (Google LLC) — for push notification delivery (Firebase Cloud Messaging)
• Our payment provider — for processing your earnings payments
• SMS and email communications providers — for operational notifications and verification

Each processor is bound by a written data processing agreement and may only use your data to provide the service to us.

5.2 Passengers and dispatch

For the duration of an active ride only, the passenger for that ride will see your first name, vehicle make, model and registration number, and the profile photograph you have uploaded (if any). The dispatcher on shift will see your name, contact details, and live ride status.

5.3 Legal disclosure

We may disclose your personal data where required to do so by law, court order, or to protect our rights, the rights of others, or public safety.

5.4 We do not sell your data

We do not sell your personal data to any third party. We do not share your personal data with any third party for their own marketing purposes.

6. International Transfers

Some of our sub-processors (notably Google Firebase) may transfer or process data outside the United Kingdom. Where this occurs, transfers are protected by:

• The UK Addendum to the EU Standard Contractual Clauses, or
• The UK International Data Transfer Agreement (IDTA),

and are only made to countries recognised as adequate by the UK Government or covered by those safeguards. You may request a copy of the relevant safeguards by contacting us as detailed in Section 13.

7. How Long We Keep Your Information

After account deletion, your account is anonymised within 30 days (see Section 9). Aggregated, anonymised data that can no longer identify you may be retained indefinitely for analytics.

8. Security

• All network traffic between the App and our servers uses TLS 1.2 or higher (HTTPS).
• Authentication tokens are stored on your device using the platform’s secure storage (Android Keystore / iOS Keychain).
• Refresh tokens are rotated on every use; access tokens are short-lived.
• Servers enforce principle-of-least-privilege access; production access is logged and reviewed.
• Passwords are stored only as one-way salted hashes.

No method of transmission or electronic storage is 100% secure; we cannot guarantee absolute security, but we apply industry-standard measures to protect your data.

9. Your Rights — and Account Deletion

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

1. Be informed about how we use your data (this Policy)
2. Access the personal data we hold about you
3. Rectify inaccurate or incomplete data
4. Erase your personal data — you can exercise this directly in the App via Profile → Delete Account, which anonymises your account within 30 days
5. Restrict our processing of your data
6. Data portability — receive your data in a structured, machine-readable format
7. Object to processing
8. Withdraw consent at any time where processing relies on consent (without affecting processing already carried out)

To exercise any of these rights, email info@gmhire.co.uk with the subject line “Data Subject Request”. We will respond within one month. This period may be extended by two months for complex requests; we will tell you within the first month if so.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe we have mishandled your data:

• Website: https://ico.org.uk
• Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns first before you approach the ICO.

10. Children

The App is a professional tool for licensed private-hire drivers aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

11. Cookies and Similar Technologies

The App itself does not use cookies. The backend services and SDKs we use (such as Firebase Cloud Messaging) may store limited identifiers on your device for their normal function. You can manage these via your device’s settings.

12. Changes to This Policy

We will update this Policy when required by law or when our practices change. Material changes will be notified through the App and the “Last updated” date at the top of this page will reflect the change. Continued use of the App after the effective date constitutes acceptance of the updated Policy.

13. Contact

If you have any question about this Policy, your data, or this App, please contact us:

• Email: info@gmhire.co.uk
• Telephone: 0333 888 0535
• Postal address: 26 Ashley Close, Rochdale, OL11 3EP, United Kingdom