Privacy

Auroute Ltd (company number 17054702) runs this website and the Auroute platform. We are registered with the Information Commissioner's Office (ICO) under ZC235202. This notice covers two things: this website, and the platform.

Who is responsible

For this website and for messages you send us, Auroute Ltd is the controller. For the platform, the council, police force or other authority that uses it is the controller of the notifications and decisions held there, and Auroute Ltd is its processor, acting only on that authority's written instructions under a data processing agreement. If a question is about a notification or a decision, ask the authority first.

This website

The website's pages set no cookies and have no advertising or analytics trackers. The only thing they store in your browser is your choice to pause or play animation, kept on your device and never sent to us. Our hosting provider keeps standard server logs (IP address, time and page requested) to run and secure the site.

The network map also remembers how you like it, such as light or dark, the area shown, the filters you have switched off and the last place you looked at. Those choices stay on your device. If your browser allows it, the map asks for your location when it opens without a place in its link, so that it starts where you are: the location is used in your browser to move the map and is not kept or sent to us, although, as for any place you look at, the map then asks our servers for what is in view there. When you choose light or dark, a small cookie shared by auroute.uk and app.auroute.uk carries that one choice between the map and the platform, so both look the same. It is set only when you choose, lasts a year, and is never used to identify or track you.

If you email us or ask for a demonstration, we hold your name, work email, organisation and what you tell us. We use it to reply and to deal with your request, which is our legitimate interest in running the business and answering people who write to us. We keep it while we are in touch, and for up to two years afterwards unless you become a customer. We do not sell it or use it for marketing you have not asked for.

The platform

The platform helps authorities review abnormal-load notifications. It holds the details in each notification: names, work email addresses and phone numbers of haulier contacts and authority staff, operator licence numbers, vehicle registration numbers, movement dates and routes, the decisions made and who made them. Signed-in users also have a sign-in record (Microsoft Entra identifiers, times, IP address and browser). The authority's lawful basis is its public task of managing its road network.

The network map also shows public datasets, such as police-recorded crime counts for small areas, collisions, traffic counts and streetworks. These are published by public bodies and are not used to identify individuals.

Who can see it

Access is controlled by role. People see what their responsibilities require and no more. Our staff access customer data only to run and support the service.

Who else handles it

We use a small number of providers to run the service: Amazon Web Services (hosting, email sending and receiving, and backups), Supabase (database) and Microsoft (sign-in). Map pictures come from Google, Ordnance Survey and Esri, and your browser contacts them directly when you open a map. Customer data is not used to train artificial intelligence models. We do not sell personal data.

How long we keep it

Platform records (notifications, decisions and their audit trail) are held for the authority that uses the platform, which decides how long they are kept and sets that period in its data processing agreement with us. When an agreement ends, we return or delete that authority's data within 30 days. Encrypted backups then expire within 30 days. Messages you send us are kept as described above.

Your rights

You can ask to see the personal data we hold about you, have it corrected or erased, restrict or object to how it is used, or have it moved to another provider. For platform data, we will pass your request to the authority that is the controller, or you can write to us at admin@auroute.uk and we will do so.

Questions and complaints

Write to admin@auroute.uk with any data protection or privacy question and we will answer it. If you are not happy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

We update this notice when what we do changes. The date on the site's pages shows when it was last revised.