Privacy Policy

RSA Recovery ยท Last updated: 16 October 2026

1. Introduction

RSA Recovery ("we", "us", "our") provides 24/7 vehicle recovery, mobile tyre fitting, wrong-fuel fix and jump-start services across the UK through our website (rsarecovery.co.uk) and mobile apps (together, the "Services"). We take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use and protect it, who we share it with, and the rights you have.

This policy applies to:

  • Users: people who request or book our services.
  • Providers: drivers, recovery operators and companies who deliver services through our platform.
  • Visitors: anyone who uses our website or contacts us.

By using our Services you confirm that you have read this policy. If you do not agree with it, please do not use the Services.

2. Who We Are (Data Controller)

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, RSA Recovery is the data controller of your personal data.

  • Company name: RSA Recovery
  • Registered address: [Address]
  • Company number: [Number]
  • ICO registration number: [Number]
  • Contact: [privacy email address]

3. Personal Data We Collect

3.1 Information you provide

All users: name, email address, mobile number, address, date of birth, gender (where needed for age checks or to allow rider and provider preferences), profile photo, and payment details (processed by our payment provider; we do not store full card numbers).

Providers: in addition to the above, government-issued ID, driving licence details, vehicle details, insurance and operator documents, bank details for payouts, and a photograph. This is collected for identity and background verification and to maintain service quality and safety.

Communications: messages, call records and details you send us when you contact support, give feedback or report an issue.

3.2 Information collected when you use the Services

  • Location data: precise location from GPS, IP address and Wi-Fi, used to find your breakdown location, dispatch a provider, provide navigation and track the job. Providers' location is collected while they are online or on a job. You can turn location access off in your device settings, but you may then need to enter your pick-up address manually.
  • Service data: type of service requested or delivered, vehicle details, pick-up and drop-off addresses, date and time, price and payment status.
  • Usage and device data: device model, operating system, app version, IP address, language, crash reports, pages and features used, and access times.
  • Call and in-app communication data: the date, time and duration of calls and messages between Users and Providers, and, where applicable, their content, for safety, dispute resolution and support.
  • Cookies and similar technologies: see Section 8.

3.3 Information from other sources

We may receive information from payment providers, insurers and partner recovery companies, identity and background-check providers, other users (for example, ratings or a request made on your behalf), marketing and analytics partners, and publicly available sources.

4. How We Use Your Data and Our Legal Basis

Purpose

Examples

Legal basis

Provide the Services

Create and manage your account, dispatch providers, track jobs, process payments, send job updates

Contract

Safety and security

Verify identity, detect fraud, prevent unauthorised access, investigate incidents

Legitimate interests; legal obligation

Customer support

Respond to enquiries, complaints and disputes

Contract; legitimate interests

In-app communication

Enable calls and messages between Users and Providers

Contract

Improve and develop the Services

Analytics, research, testing, personalisation

Legitimate interests

Marketing

Offers, promotions and news by email, SMS or push notification

Consent (you can withdraw at any time)

Service notices

Changes to our terms or this policy, account and job updates

Contract; legal obligation

Legal and regulatory

Meet legal duties, respond to authorities, establish or defend legal claims, handle insurance claims

Legal obligation; legitimate interests

We do not sell your personal data.

5. Who We Share Your Data With

We share personal data only where necessary and only as described below:

  • Between Users and Providers: to complete a job, a Provider sees your name, contact number, vehicle details and location, and you see the Provider's name, photo, vehicle and live location.
  • Service providers acting for us: payment processors, cloud hosting, mapping and navigation, SMS and email delivery, analytics, identity verification and customer support tools.
  • Insurers, financing and partner companies: where needed for claims, invoices or to fulfil a job through a partner network.
  • Authorities and advisers: the police, regulators, courts, lawyers and auditors where required by law or to protect rights, safety and property.
  • Business transfers: if we merge with, or are acquired by, another business, your data may be transferred to the new owner, who must honour this policy.
  • With your consent: in any other case, only if you agree.

6. International Transfers

Some of our service providers may process data outside the UK. Where this happens we use safeguards approved under UK law, such as the UK International Data Transfer Agreement or Addendum, or transfers to countries with an adequacy decision.

7. How Long We Keep Your Data

We keep personal data only as long as needed for the purposes in this policy:

  • Account data: while your account is active, and for a reasonable period after closure.
  • Job, payment and invoice records: up to 6 years for tax, accounting and legal reasons.
  • Provider verification documents: for the duration of the relationship and as long as legally required afterwards.
  • Location and usage data: kept for a limited period, then deleted or anonymised.
  • Marketing preferences: until you withdraw consent.

8. Cookies and Similar Technologies

We and our partners use cookies, pixels and SDKs to log you in, remember your settings, measure how the Services are used, understand site traffic, and measure the effectiveness of our marketing. You can control cookies through your browser settings and, where offered, our cookie banner. Blocking some cookies may affect how the Services work.

9. Your Choices and Controls

  • Location: enable or disable through the app's privacy settings or your device settings.
  • Notifications: account and job-status notifications are essential and cannot be turned off, but you can choose how you receive them. You can switch promotional notifications off at any time.
  • Marketing: unsubscribe using the link in any email, reply STOP to SMS, or change settings in the app.
  • Device permissions: iOS asks for your permission the first time the app needs access to something such as location, camera or contacts. On Android, you are told which permissions the app needs before you first use it, and you can manage them in your device settings.

10. Your Rights

Under UK data protection law you have the right to:

  • be informed about how we use your data;
  • access a copy of your personal data;
  • correct inaccurate or incomplete data;
  • request deletion of your data ("right to be forgotten");
  • restrict or object to certain processing, including direct marketing;
  • data portability;
  • withdraw consent at any time, where we rely on consent; and
  • not be subject to decisions based solely on automated processing that significantly affect you.

To exercise any right, contact us at [privacy email address]. We will respond within one month. We may need to verify your identity first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Account and Data Deletion

You can ask us to delete your account and personal data at any time by emailing [privacy email address] or using the delete-account option in the app, where available. We will delete or anonymise your data unless we are legally required to retain some of it (for example, payment records).

12. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, secure hosting and staff confidentiality obligations. No system is completely secure. If a data breach is likely to put you at risk, we will notify you and the ICO as required by law.

13. Children

Our Services are not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, please contact us and we will delete it.

14. Third-Party Links and Services

Our Services may link to or integrate with third-party websites, maps and services. We are not responsible for their privacy practices, so please read their policies.

15. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you through the app, by email or on our website. The "Last updated" date at the top shows when it was last revised. Continued use of the Services after a change means you accept the updated policy. Earlier versions are available on request.

16. Contact Us

If you have any questions about this policy or how we handle your data, contact us at:

RSA Recovery Email: [privacy email address] Contact form: https://rsarecovery.co.uk/contact_us Address: [Registered address]