DATA PROTECTION
Privacy notice
Effective 18 October 2026. This notice applies to visitors, people submitting bookings on behalf of others and recovery operators.
Data controller and contact
CtrlOn Group Ltd, company number 17389121, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is the controller for OTTERS marketplace account, booking and administrative information. Contact support@roadotters.com for privacy questions or rights requests.
Information collected
Contact name, mobile number, email where given, vehicle details, roadside pickup and destination, location accuracy and optional GPS coordinates, booking or safety answers, messages, identity and operator compliance documents where applicable, recovery photographs sent privately through OTTERS WhatsApp, transactions, device and security logs.
When a third party books for another driver, personal information may come from the booker. We ask the booker to tell the person on scene about this notice.
Why information is used and lawful basis
- To receive and respond to requests, form and perform a booking where offered: steps prior to contract or contract.
- To protect accounts, prevent fraud and maintain reliable operations: legitimate interests and, where applicable, legal obligations.
- To comply with tax, accounting and other legal duties: legal obligation.
- To send marketing where permitted: consent or another valid legal basis, with an unsubscribe option.
- To process roadside safety concerns: a lawful Article 6 basis and, where health-related special category data is involved, a separately assessed Article 9 condition. Please do not send detailed medical histories.
Sharing and service providers
Relevant information is shared with authorised OTTERS staff, selected recovery operators after the appropriate booking stage, and technology providers supporting hosting, authentication, SMS, mapping and payments. Current technical services include Hostinger, Supabase, Twilio, Google Maps Platform and Stripe, where the relevant function is in use. The operator receives only the detail needed for the agreed service. Authorities receive information where legally required or necessary for a lawful emergency disclosure.
International transfers
Some technology providers process information outside the UK. OTTERS assesses applicable transfer safeguards, including UK adequacy arrangements or approved contractual protections as required. Contact us for details of relevant protections.
Retention and security
Uncompleted requests are reviewed for deletion after operational need ends. Completed transaction, tax, accounting, complaint, fraud and safety records are kept for the period justified by the relevant legal or operational requirement. Specific retention schedules are being finalised before live paid dispatch. Access is limited by role. No online service offers absolute security.
Your rights
Subject to legal conditions, you have rights of access, correction, deletion, restriction, objection and data portability, and rights relating to consent and automated decisions. You may complain to the Information Commissioner’s Office. Requests: support@roadotters.com.
Cookies and local browser storage
See the cookies and storage notice for the use of authentication sessions and booking progress in your browser. Non-essential analytics or advertising technology must not load before the necessary consent controls are implemented.