Privacy Policy

1. Who we are

Drift ("Drift", "we", "us") sells a small GPS tracker for cars and runs the Drift app and membership. Drift is a small UK business. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Drift is the controller of the personal data described in this policy.

If you have any question about your data, email [email protected]. We aim to reply within 5 working days.

2. The short version

• Your vehicle's location is encrypted and stored against your Drift account.
• Only you, and people you choose to share with, can see it in the app.
• We do not sell your data. We do not use your location for advertising.
• You can ask for a copy of your data, or ask us to delete it, at any time.

3. What we collect

Account data

Your name, email address, password (stored in hashed form, we cannot read it), and your account settings, such as alert preferences, saved places and who you share access with.

Vehicle and location data

When your tracker is fitted and your membership is active, the tracker sends data to our servers. This can include:

• GPS position, with date and time
• speed, direction of travel and journey start and end points
• ignition on or off, movement events and vehicle battery voltage
• alerts you have set up, such as Guardian alerts and arrivals at or departures from saved places
• the vehicle details you add, such as a nickname, make, model or colour

Location data can show where you live, work and travel, so we treat it as the most sensitive data we hold.

Device data

The tracker's identifiers (for example its IMEI and SIM number), firmware version and connection status. When you use the app or this website, we and our hosting providers may also process your IP address, browser or device type, and basic technical logs needed to keep the service running and secure.

Order and payment data

When checkout is live, payments are handled by Stripe. We receive your name, email, delivery address, what you bought and your payment status. We do not see or store your full card number.

Pre-order interest

Right now, checkout is not open. If you use the "Pre-orders open soon" form, your name and email are saved only in your own browser (local storage) and an email to us is prepared in your mail app. We only receive your details if you send that email.

Messages

If you email us, we keep the email and our replies so we can help you.

4. Why we use it, and our lawful basis

5. How we protect location data

Location data is encrypted when it travels between the tracker, our servers and the app, and is stored against your account. Access inside Drift is limited to what is needed to run and support the service. We do not look at an individual's location history unless you ask us to (for example to fix a fault), or we are required to by law.

6. Who we share data with

We use a small number of trusted providers to run Drift. They act on our instructions and may only use your data to provide their service to us:

• server and database hosting for the tracking platform
• the mobile data (SIM) provider that connects the tracker
• app hosting (Lovable) and mapping (Mapbox, which supplies map images to your device)
• payments (Stripe), and email (Proton)
• website hosting (Surge) and web fonts (Google Fonts)

We will also share data with people you choose to share access with in the app, and where the law requires it, for example a valid request from the police. If your vehicle is stolen, we can help you share information with the police at your request.

Some providers may process data outside the UK. Where they do, we rely on safeguards recognised under UK law, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

7. How long we keep it

• Location and journey history: kept while your account is open so you can view past journeys. You can delete journeys in the app or ask us to. We will tell you in the app if we set a fixed history limit.
• Account data: kept while your account is open, then deleted within 30 days of closing it.
• Backups: deleted data may remain in secure backups for up to 90 days before it is overwritten.
• Order and payment records: kept for 6 years, as UK tax law requires.
• Support emails: kept for up to 2 years after your last contact.
• Pre-order interest emails: kept until launch, then deleted within 12 months if you do not become a customer.

8. Your rights

Under UK data protection law you have the right to:

• access your data and get a copy of it
• delete your data (we will delete your account and location history, except records we must keep by law)
• correct data that is wrong
• restrict or object to some uses
• take your data with you in a common format (portability)
• withdraw consent to marketing at any time

To use any of these rights, email [email protected] from the address on your account. We may need to check it is you. We will reply within one month, and there is normally no charge.

If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Other drivers of your vehicle

If someone else drives a vehicle with a Drift tracker, the tracker will record their journeys too. You must tell regular drivers that the vehicle is tracked. Using Drift to track a person without their knowledge can be unlawful. See our Terms.

10. Cookies

This website does not use advertising or analytics cookies. See our Cookie notice for the small amount of browser storage we do use.

11. Children

Drift accounts and purchases are for adults aged 18 and over. We do not knowingly collect data from children.

12. Changes

We will update this policy when the service changes, for example when checkout opens. We will show the new date at the top, and tell account holders by email about important changes.