Home › Privacy policy
Privacy Policy
This policy explains what personal data Drivora collects, why we use it, who we share it with and what rights you have. It applies to visitors to our website, businesses that hire drivers through us, and the drivers and applicants we supply. Last updated: 5 October 2026.
Who we are
Drivora is a trading name of TK RSS Ltd, a company registered in the United Kingdom (company number 16433482). We supply temporary PCV and HGV drivers to operators. We also trade as Get Drivers. TK RSS Ltd is the data controller for the personal data described in this policy, which means we decide how and why it is used.
- Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
- ICO registration number: ZB693889
- Privacy contact: privacy@tk-rss.com
You can contact us at any time about this policy or your personal data using the details above.
What personal data we collect
What we hold depends on how you deal with us.
Website visitors and enquirers
- Name, email address, phone number and company name, and the content of any message you send us
- Technical data such as IP address, browser type, device and pages visited (see Cookies below)
Client businesses (operators who hire drivers)
- Contact names, job titles, work email addresses and phone numbers
- Booking details, invoicing and payment records, and correspondence with us
Drivers and applicants
- Identity and contact details: name, address, date of birth, phone, email, National Insurance number, right-to-work evidence
- Driving credentials: licence details and DVLA check codes, Driver CPC and tachograph card details, CV and employment history, references
- Availability, job history with us, timesheets, pay and payroll details including bank account and tax status
- Compliance information: driving offences or endorsements, and where a role requires it, criminal record check results
- Health information relevant to fitness to drive, only where needed to meet legal driver-fitness requirements
- Records of incidents, complaints or disciplinary matters involving a driver you supply
How we collect it
- From you directly: through our website forms, email, phone calls, registration and onboarding, and when you book or accept work
- From third parties: the DVLA (or the DVA for Northern Ireland licences), Disclosure Scotland, the Disclosure and Barring Service or Access NI where relevant, referees, previous employers, recruitment job boards, and our client businesses (for example, feedback on a driver's assignment)
- Automatically: through cookies and similar technologies when you use our website
Why we use your data and our lawful bases
Under UK GDPR we must have a lawful basis for using your personal data. These are the ones we rely on.
| Purpose | Lawful basis |
|---|---|
| Answering enquiries and quoting for driver supply | Legitimate interests (running our business) |
| Registering drivers, matching them to assignments and managing bookings | Contract, or steps taken before entering one |
| Paying drivers, running payroll and PAYE, issuing and paying invoices | Contract and legal obligation |
| Right-to-work, licence, Driver CPC and tachograph checks | Legal obligation and legitimate interests (our compliance duties to operators and regulators) |
| Criminal record and health information, where a role legally requires it | Legal obligation or legitimate interests, plus a condition under the Data Protection Act 2018 |
| Keeping records for tax, accounting and legal claims | Legal obligation and legitimate interests |
| Sending marketing emails to business contacts | Legitimate interests, with an easy way to opt out |
| Sending marketing to individuals who have opted in | Consent, which you can withdraw at any time |
| Website security, analytics and improvement | Legitimate interests, or consent for non-essential cookies |
We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect.
Who we share it with
We do not sell your personal data. We share it only where needed, with:
- Client businesses: driver details such as name, licence status, qualifications and compliance checks, so an operator can accept a driver for an assignment
- Drivers: contact and booking details of the client they are assigned to
- Official and checking bodies: the DVLA, the DVA in Northern Ireland, DBS, Disclosure Scotland, Access NI, HMRC, the Traffic Commissioner and other regulators or authorities, where required by law or to verify credentials
- Service providers acting on our instructions: accounting and payroll software, cloud hosting and email, document storage, rota and timesheet tools, and IT support
- Professional advisers and insurers: accountants, lawyers, auditors and insurers
- Other parties by law or in a business sale: where a court or authority requires disclosure, or if the business is sold or reorganised and the new owner continues to use the data under this policy
Where a provider handles data for us, we have a written agreement requiring it to protect the data and use it only for our purposes.
International transfers and how long we keep data
We aim to keep personal data within the UK. Some of our providers may process data outside the UK. Where that happens we use a safeguard approved under UK law, such as the UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
We keep personal data only as long as we need it for the purposes above. Our standard periods are:
| Data | How long we keep it |
|---|---|
| Website enquiries with no resulting work | 12 months |
| Unsuccessful driver applicants | 12 months after the application |
| Driver records, timesheets and assignment history | 6 years after the last assignment |
| Payroll, tax and invoicing records | 6 years after the end of the tax year |
| Right-to-work evidence | 2 years after the driver stops working with us |
| Criminal record check outcomes | Result recorded only, not the certificate, and removed once the check is no longer needed |
| Marketing contact details | Until you opt out or ask us to delete them |
We delete or anonymise data when its period ends, unless the law requires us to keep it longer.
How we keep your data secure
We use technical and organisational measures to protect personal data, including access controls limited to staff who need the data, encrypted connections, secure cloud storage and regular review of who has access. No system is completely secure. If a breach is likely to put your rights at risk, we will tell you and the Information Commissioner's Office (ICO) as the law requires.
Cookies and our website
Our website uses cookies and similar technologies. Essential cookies make the site work and do not need your consent. We only use analytics or marketing cookies if you accept them through our cookie banner, and you can change or withdraw that choice at any time. You can also block cookies in your browser settings, though some parts of the site may not work properly. See our cookie page for details. Our website may link to other sites, which have their own privacy policies and are not covered by this one.
Your rights
Under UK data protection law you have the right to:
- be told how your data is used (this policy)
- access a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data erased in certain circumstances
- restrict how we use your data in certain circumstances
- receive your data in a portable format where we use it under contract or consent
- object to us using your data based on legitimate interests, and to direct marketing at any time
- withdraw consent where we rely on it, without affecting earlier use
To use any of these rights, contact us using the details at the top of this policy. We will normally reply within one month and will not charge a fee unless a request is clearly unfounded or excessive. We may need to confirm your identity first. Some rights are limited where we have a legal duty to keep data, for example payroll and tax records.
Complaints
Please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, telephone 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date of the last update shown at the top. If we make a significant change, we will tell you directly where we can.