HaulHub

Privacy & Data Collection

Last updated: 2026-05-13

This notice explains what personal data HaulHub collects, why, on what legal basis, with whom we share it, how long we keep it, and how you can exercise your rights under the EU General Data Protection Regulation (GDPR) and equivalent national laws.

1. Data Controller

The controller of your personal data is SIA HEIDA LTD, registration number 40203741048, registered at Spāres iela 3A, Rīga, LV-1002, Latvia. Contact: support@haulhub.eu.

2. Who this notice applies to

Drivers who register a personal profile.
Authorised representatives and contact persons of registered companies.
Visitors to haulhub.eu who do not have an account.
Recipients of our newsletter.

3. What we collect

3.1 Driver accounts

Identity & contact: first name, surname (display can be hidden), date of birth, country, city, nationality, mobile phone, e-mail, password (stored as a salted hash).
Profile photo: uploaded image, automatically resized and renamed to a non-guessable identifier before storage in the profileimg directory.
Languages spoken.
Driving qualifications: licence categories (B, C, CE, D, DE), Code 95, dates of issue and expiry, ADR status and categories.
Work history: previous employers (company name and registration number), employment periods, trailer types operated, route regions, current-employer flag.
Job-search preferences: expected salary (amount, type, gross/net), preferred routes, preferred trailer types, willingness to accept non-smoker-required positions (e.g., certain ADR routes).

3.2 Company accounts

Legal name, registration number, registration date, VAT number, legal address, country.
Company types (one or more of: taxi, courier, trucking, agency, passenger transport), website, e-mail, phone, password (hashed).
Company logo (resized and renamed before storage).
Operated routes.
Cached verification level (Registered / Trusted / Verified) computed automatically from the other fields, the EU VIES VAT-check result, account age and reviews.

3.3 Activity on the Platform

Job postings, applications, hire-confirmation flow (offer, accept/decline, start date), work-history verification responses.
Chat messages between drivers and companies.
Reviews and ratings you give or receive.
Reports submitted to the administrator.
Paid-service orders — promotional placements, job-post credit packs, and offer credit packs — including billing data (buyer country, VAT number, VIES check outcome, invoice number, gross/net/VAT split) and the payment-provider reference.
VIES VAT-check results: the validity outcome returned by the EU Commission's VIES service, the timestamp of the check, and (where applicable) whether the name returned by VIES matched the registered legal name.

3.4 Technical data

IP address, browser type, device, operating system, language.
Server logs and security events.
Cookies and similar technologies (see the Cookies Policy).
Approximate location derived from IP address, used to suggest a default interface language.

4. Why we process your data — and on what legal basis

Purpose	Legal basis (GDPR Art. 6)
Creating and operating your account; matching drivers and companies; chat; applications	Performance of a contract — Art. 6(1)(b)
E-mail verification, password reset, account-security alerts	Performance of a contract — Art. 6(1)(b)
Optional fields (e.g., profile photo, hidden surname preference)	Consent — Art. 6(1)(a)
Newsletter, in-product marketing notifications	Consent — Art. 6(1)(a); withdrawable in settings
Non-essential cookies (analytics, marketing pixels)	Consent — Art. 6(1)(a) and Art. 5(3) ePrivacy
Fraud detection, abuse moderation, security, defending legal claims	Legitimate interests — Art. 6(1)(f)
Bookkeeping and invoicing for paid services (promotions, job-post credits, offer credits)	Legal obligation — Art. 6(1)(c)
VAT validation of business buyers via the EU VIES service	Legal obligation — Art. 6(1)(c) and legitimate interests — Art. 6(1)(f)

5. Who we share your data with

We share data only with the categories of recipients listed below, and only to the extent necessary:

Other users. Public profile fields, postings, and reviews are visible to other Platform users and to non-logged-in visitors of public pages (driver list, company list, job offers). Driver contact details are revealed to a company only after the driver applies to that company's offer.
Hosting and infrastructure — Zone.eu (EU region).
Database — Zone.eu MySQL (EU region).
Transactional e-mail — Zone.eu SMTP, sender no-reply@haulhub.eu.
Analytics — Google Analytics 4 (with consent).
Marketing pixels — Meta Pixel (with consent).
Bot protection — Cloudflare Turnstile.
Payment processor — Montonio, for promotional placements and credit-pack payments (Swedbank, SEB, Luminor, Citadele bank links and card payments).
EU Commission — VIES service — when a business buyer provides a VAT number at checkout, the VAT number is sent to the EU's VIES service to verify validity and (where the buyer's tax authority returns it) the registered company name. Operated by the European Commission.
Authorities — courts, law-enforcement, supervisory authorities, where we are legally required.

We do not sell personal data.

6. International transfers

Some processors (in particular Google and Meta) are based outside the European Economic Area. Where data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses and, where appropriate, supplementary safeguards. A copy of the safeguards is available on request at support@haulhub.eu.

7. How long we keep your data

Category	Retention
Active account data	For as long as your account exists.
Account after deletion request	Hard-deleted within 30 days; encrypted backups expire within 90 days.
Chat messages	2 years from the last message in the conversation, unless required for an open report or dispute.
Reviews	Kept while the receiving account exists; the author's name is replaced with "deleted user" if the author closes their account.
Reports and moderation records	2 years from resolution.
Bookkeeping records (paid promotions)	5–10 years per local accounting law.
Server and security logs	Up to 12 months.
Cookies	See the Cookies Policy.

8. Your rights

Under the GDPR you have the right to:

request access to the personal data we hold about you;
request correction of inaccurate or incomplete data;
request erasure ("right to be forgotten");
request restriction of processing;
object to processing based on legitimate interests;
receive your data in a portable format (data portability);
withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
lodge a complaint with a supervisory authority.

To exercise these rights, write to support@haulhub.eu. We respond within one month.

Supervisory authorities in our markets

Latvia: Datu valsts inspekcija — dvi.gov.lv
Estonia: Andmekaitse Inspektsioon — aki.ee
Lithuania: Valstybinė duomenų apsaugos inspekcija — vdai.lrv.lt
Poland: Urząd Ochrony Danych Osobowych — uodo.gov.pl

9. Automated decision-making

HaulHub computes a "match" score between drivers and job offers based on category, experience, distance from base, salary, ADR, and trailer type. The score is informational only and does not produce legal effects or significantly affect you within the meaning of GDPR Article 22. Hiring decisions are made by companies, not by HaulHub.

10. Security

We take appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), salted password hashing, role-based access control, security logging, randomised image filenames, automated abuse detection, and regular backups. Despite these measures, no system is completely secure; please use a strong, unique password.

11. Changes

We may update this notice. The "Last updated" date at the top reflects the most recent version. Material changes are announced by e-mail or in-app notice.

12. Contact

Privacy questions: support@haulhub.eu.