Privacy Policy

This policy covers the AI Packages & Fleet website (the AI Packages shop and the Fleet marketing site) under UK GDPR and PECR. For the Fleet product itself, once a customer is live, their organisation is the data controller for their drivers' data — DVLA-sourced licence data is processed by us as their data processor, under a data processing agreement, not covered by this general site policy.

Basket. If you add a product to your basket, we set an httpOnly cart_id cookie (random, no personal identifiers) so your basket persists across visits for up to a year. Basket contents are stored against that ID on our server, not linked to your name or email unless you also submit the contact form.

Contact form.Submitting the contact form sends your name, email, and message to us via Web3Forms, a third-party form-relay processor. Web3Forms stores submissions for up to 30 days for delivery/spam-prevention purposes (see their own privacy policy) and may share the sending IP/email with spam-prevention services. We don't use the contact form to build a marketing list.

No accounts, no analytics.There are no user accounts or passwords, and this site runs no analytics, advertising, or tracking scripts — we don't profile visitors or sell data.

The only cookie this site sets is the basket cart_idcookie described above. It's strictly necessary to provide the basket feature you've asked for (remembering what you added), so under UK PECR it's exempt from prior consent — but we're telling you about it here for transparency. No advertising, analytics, or third-party tracking cookies are set.

Fleet is built around DVLA's Access to Driver Data (ADD) service. Before any driver's licence data can be checked, their employer must hold a signed data protection declaration from that driver (DVLA form D906/ADD or equivalent) — we don't check anyone's record without that on file, and staff can never check their own record (DVLA's separation-of-duty rule). ADD returns current licence status, entitlements, and endorsements only — no historical record — and that data is used solely to verify entitlement to drive, never for identity verification.

• Basket cookie: legitimate interest / necessary to provide the service you requested.
• Contact form: consent (you choose to submit it) and legitimate interest in responding.
• Fleet driver data: performance of a contract with the employer, underpinned by the driver's signed DVLA data protection declaration.

Under UK GDPR you can ask us to access, correct, delete, or export data we hold about you, or object to/restrict our processing. Since this site doesn't hold accounts, most requests will relate to a contact-form submission. Email us via the contact page and we'll respond within one month. If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office (ICO).

This site is still pre-launch and some details above (company/registration info, Fleet's data processing agreement) will be finalised before Fleet goes live to real customers. We'll update the date at the top whenever this policy changes.