Data-processing summary

For public enquiries, Olilau Ltd decides how contact information is used. For operational records entered by a customer, the customer will generally decide the purpose of processing and Olilau Ltd will provide the ProofRoute service. The final agreement confirms the parties’ legal roles.

Depending on enabled modules, ProofRoute may process business contacts, delivery and invoice references, addresses, driver and staff profiles, clock events, reported location, signatures, photographs, returns, cash records and audit information.

Data is used to provide delivery dispatch, route and driver workflows, proof of delivery, operational reconciliation, optional staff time functions, support and service security.

ProofRoute uses authenticated role-based access and organisation-scoped controls. Office, driver, staff and platform administration permissions are separated. Customer users should only receive access appropriate to their organisation and role.

Hosting, database, storage, email, mapping or other technical providers may process limited data to operate the service. The current provider and international-transfer position must be documented in the customer DPA before live processing.

Operational retention, available exports, end-of-service access and deletion timing are agreed before live use. ProofRoute does not currently promise a universal self-service full-account export.

Access controls, audit records and protected storage are part of the service design. No certification or absolute security guarantee is claimed. Incident contacts and contractual notification arrangements are confirmed in the customer documents.

Customers remain the first contact for requests relating to operational data they control. Privacy questions about ProofRoute can be sent to support@proofroute.co.uk.