Record of Processing Activities
Controller: Aurel Paraschiv (Sole Trader), trading as Fleet Comply · Version 1.0 · 14 June 2026
| Purpose | Data subjects | Data categories | Lawful basis | Processor / recipient | Retention |
|---|---|---|---|---|---|
| Account and access management | Users and applicants | Identity, contact, role, login and consent data | Contract; legitimate interests; legal obligation | Lovable Cloud | Account life; identifiers anonymised within 30 days after approved erasure |
| Fleet compliance management | Operators, drivers and authorised staff | Company, vehicle, driver, document and compliance records | Contract; legal obligation; legitimate interests | Lovable Cloud | 6 years |
| Security and audit | Users, administrators and security-event subjects | Actor, target, event, IP, user agent and outcome | Legitimate interests; legal obligation | Lovable Cloud; Cloudflare | 7 years; failed logins 12 months |
| Transactional communications | Users and operational recipients | Name, email, subject, delivery state | Contract; legitimate interests; consent where applicable | Lovable Email | 12 months for routine operational email logs |
| Support | Users and correspondents | Contact details, ticket content and attachments | Contract; legitimate interests | Lovable Cloud | 3 years after closure |
| Disaster recovery | All affected data subjects | Encrypted production database and private files | Legitimate interests; legal obligation | Cloudflare R2 | 52 weeks |
International transfers and safeguards
Processing is configured for UK/EEA locations where available. Any restricted transfer requires UK adequacy regulations or the UK International Data Transfer Agreement/Addendum, supplier due diligence, encryption in transit and at rest, least-privilege access and contractual confidentiality.
Controller contact
80 Pennwood Court, Leasowes Drive, Wolverhampton, WV4 4PY, United Kingdom · notify@fleetcomply.co.uk