Privacy

What RideShield is

RideShield is a driver trust and verification platform operated as part of the Loadcircle app family. Operators use it to verify that drivers and their documents are legitimate, current, and compliant; drivers use it to prove it.

What we collect

Account data: your email address, your name if you give one, and a bcrypt-hashed password. We never store your password in a readable form.

Driver profile: the jurisdiction you drive in, and any profile fields you complete.

Verification documents: the identity and compliance documents you upload (licences, insurance, registrations, proofs of address, photographs), their technical metadata (file type, size, SHA-256 content hash, expiry date), and the extracted fields our systems read from them. Uploaded image metadata including location (EXIF/GPS) is stripped before storage.

Verification record: every decision made about your documents, who made it, when, and the written reason.

Trust score: a numeric score with its full factor breakdown, recomputed on defined triggers and retained as history.

Technical logs: audit records of actions taken in the platform, including IP address and user agent where relevant to the audit trail.

Why we process it (lawful basis)

To provide the verification service you or your operator signed up for (contract).

To comply with the record-keeping expectations that make a verification platform meaningful — decisions are retained as immutable, attributable history (legal obligation / legitimate interests).

Identity documents are sensitive by nature. We collect only what the verification requires for your jurisdiction, nothing more (data minimisation).

Where it lives

All data is stored in Cloudflare D1 and private R2 buckets reachable only through our own server — there is no public endpoint and no client-side key. Documents are streamed to authorised viewers only; there are no signed URLs that can be copied, forwarded, or leaked.

Document storage is jurisdiction-partitioned by design (UK / EU / US families) so residency is configuration, not afterthought.

Who sees it

Authorised reviewers and administrators of your verification — every view and decision is attributed and audited.

Processors strictly for operating the service: Cloudflare (hosting, database, storage), Resend (notification email, when enabled), Sentry (error diagnostics). We do not sell personal data, ever, to anyone.

How long we keep it

Retention follows your jurisdiction's schedule (for example, six years post-relationship for the UK), configured in the platform rather than improvised. Documents are never hard-deleted: erasure requests are fulfilled by redaction — personal data is removed while the fact that a verification happened is preserved where the law requires, and the redaction itself is audited.

Your rights

Access, export, rectification, erasure, and objection requests are handled by email. Write to privacy@loadcircle.co.uk and we will respond within the statutory window. You have the right to complain to the ICO (ico.org.uk) at any time.

Changes

We will update this page when the platform changes and date every revision. This version: 2026-11-02.