1. Introduction
This Privacy Policy explains how personal data is collected, used, stored, disclosed and otherwise processed in connection with Effitrux, including the Effitrux website, mobile applications, web application, associated services, communications and related functionality collectively referred to as the “Service”.
Effitrux is committed to processing personal data lawfully, fairly, transparently and securely in accordance with applicable data protection legislation, including, where applicable, Regulation (EU) 2016/679 (the “GDPR”).
This Privacy Policy should be read together with the Effitrux Terms of Service and, where applicable, the Effitrux Data Processing Agreement.
By using the Service, you acknowledge that your personal data will be processed as described in this Privacy Policy. Where processing is based on consent, consent will be requested separately where required by applicable law.
2. Data Controller
The controller responsible for personal data processed for Effitrux's own purposes is:
Trading/product name: Effitrux
Privacy contact: info@effitrux.com
Where an Effitrux business customer uploads, stores or otherwise processes personal data relating to its own customers, employees, drivers, suppliers, contacts or other individuals through the Service, that customer may act as the data controller and Effitrux may act as its data processor. Such processing is additionally governed by the Effitrux Data Processing Agreement where applicable.
3. Scope
This Privacy Policy applies to personal data processed through:
the Effitrux Android application;
the Effitrux web application;
effitrux.com and related Effitrux websites;
account registration and authentication;
subscriptions and account entitlements;
customer support;
security and fraud-prevention systems;
administrative and diagnostic systems;
product communications;
marketing communications where consent or another lawful basis exists;
and other services expressly linked to this Privacy Policy.
Third-party websites, applications and services are governed by their own privacy policies.
4. Personal Data We May Process
Depending on how you use Effitrux, we may process the following categories of information.
4.1 Account and identity information
This may include:
name;
email address;
account identifier;
authentication information;
account status;
preferred language;
country or region;
company affiliation where supplied;
telephone number where voluntarily supplied or required for a particular feature;
verification and security information.
Passwords are not intended to be stored by Effitrux in readable form.
4.2 Company and professional information
Where supplied by you, this may include:
company name;
registered or business address;
tax/VAT information;
company registration information;
business contact details;
logo;
company preferences and settings;
vehicle, route, customer and operational information.
4.3 User Content and operational data
Effitrux may process information that you choose to enter, upload, create, calculate or store through the Service, including:
cost parameters;
fixed and variable costs;
fuel-related data;
toll-related data;
vehicle data;
route data;
customer data;
quotations;
invoices;
contracts and contract information;
payroll and workforce inputs;
LTL and FTL shipment information;
margins, prices and profitability calculations;
notes;
generated documents;
templates;
and other business or operational information.
You determine what information you enter into Effitrux.
4.4 Personal data concerning third parties
Information entered by users may contain personal data concerning customers, employees, drivers, representatives, suppliers or other individuals.
The user who provides such information is responsible for ensuring that it has an appropriate lawful basis and all necessary authority to collect, use and provide that personal data to Effitrux.
Where Effitrux processes such data solely on behalf of a business customer, Effitrux acts as processor and processes that data in accordance with the customer's documented instructions, the applicable Data Processing Agreement and applicable law.
4.5 Subscription and transaction information
We may process:
subscription type;
trial status;
entitlement status;
purchase date;
renewal status;
subscription expiration;
transaction identifiers;
applicable discounts, referrals or promotional entitlements.
Payment-card details may be processed directly by payment providers, application stores or other authorised payment processors. Effitrux does not necessarily receive or store full payment-card details.
4.6 Device and technical information
We may process information such as:
device type;
operating system;
application version;
browser information;
device or installation identifiers;
IP address;
approximate location derived from IP where necessary;
timestamps;
language;
authentication events;
trusted-device information;
session information.
4.7 Usage, diagnostic and security information
We may process:
feature usage;
application events;
errors and crash information;
security events;
suspicious activity;
failed authentication attempts;
diagnostic logs;
performance information;
administrative actions.
Such data may be used to operate, secure, troubleshoot and improve the Service.
4.8 Communications
When you contact Effitrux, we may process your correspondence, support requests, feedback and information reasonably necessary to respond.
5. Purposes and Legal Bases
Where the GDPR applies, Effitrux processes personal data only where a valid legal basis exists.
Performance of a contract
Processing may be necessary to:
create and operate your account;
authenticate you;
provide requested functionality;
synchronise data;
generate requested documents;
administer subscriptions;
provide customer support;
maintain account settings.
Legitimate interests
Subject to applicable balancing requirements, Effitrux may process data for legitimate interests including:
securing the Service;
preventing fraud and abuse;
diagnosing technical problems;
improving reliability and usability;
enforcing contractual rights;
protecting Effitrux, users and third parties;
establishing, exercising or defending legal claims;
understanding aggregate product usage.
Legal obligations
Information may be processed where necessary to comply with applicable:
tax;
accounting;
consumer;
regulatory;
judicial;
law-enforcement;
data-protection;
or other legal obligations.
Consent
Where required, consent may be relied upon for purposes including:
direct electronic marketing;
optional communications;
certain cookies or tracking technologies;
optional features requiring consent.
Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Marketing Communications
Marketing communications are separate from communications necessary to operate the Service.
Where legally required, Effitrux will send marketing communications only where the recipient has provided valid consent or another lawful basis exists.
Users may withdraw marketing consent or unsubscribe at any time using the unsubscribe mechanism provided or by contacting Effitrux.
Withdrawal from marketing does not prevent Effitrux from sending essential transactional or service communications such as:
authentication or verification codes;
password resets;
security alerts;
subscription notices;
invoices or receipts;
material Terms or Privacy Policy notices;
service-critical notifications.
7. Accuracy and User Responsibility
Users are responsible for ensuring that personal and other information they provide to Effitrux is accurate, lawful and reasonably up to date.
Effitrux does not independently verify all information entered by users and does not assume responsibility for the accuracy of user-supplied data.
8. Service Providers and Subprocessors
Effitrux may use third-party providers to support areas such as:
hosting;
databases;
authentication;
cloud infrastructure;
subscriptions;
payments;
analytics;
error monitoring;
email delivery;
security;
customer support;
web hosting.
Such providers may process personal data only to the extent reasonably necessary for their respective functions and subject to applicable contractual and legal safeguards.
Where Effitrux acts as a processor and appoints subprocessors, the requirements of the applicable Data Processing Agreement apply.
A current list of material subprocessors may be maintained separately and updated as the technical infrastructure changes.
9. Third-Party Data Sources and Integrations
Certain Effitrux features may use information supplied by third parties, public authorities, public datasets, APIs, mapping providers, fuel-price sources, toll providers, payment providers or other external services.
Those providers may process data according to their own privacy practices.
Effitrux does not control third-party privacy practices and encourages users to review applicable third-party notices where relevant.
10. International Transfers
Personal data may, where necessary, be processed outside the country in which the user is located.
Where GDPR-protected personal data is transferred outside the European Economic Area, Effitrux will use a legally recognised transfer mechanism where required, such as:
an adequacy decision;
European Commission Standard Contractual Clauses;
or another legally permitted safeguard.
Users may contact Effitrux for further information regarding applicable safeguards.
11. Data Retention
Personal data will be retained only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.
Retention periods may vary depending on:
whether an account remains active;
contractual requirements;
legal obligations;
tax and accounting requirements;
dispute and limitation periods;
fraud prevention;
security requirements;
backup cycles.
Following account deletion or termination, certain information may remain temporarily in backups or be retained where required by law or reasonably necessary for legal claims, fraud prevention or security.
Data that has been irreversibly anonymised may be retained without identifying an individual.
12. Account Deletion
Users may request deletion of their account and associated personal data through available account controls or by contacting Effitrux.
Deletion is subject to data that Effitrux is legally required or otherwise lawfully entitled to retain.
Deletion of an account may permanently remove access to data, documents, history and other content associated with that account.
Users should export information they are legally required or otherwise wish to retain before deleting their account.
13. Security
Effitrux uses reasonable and appropriate technical and organisational safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include, where appropriate:
encrypted communications;
authentication controls;
access restrictions;
trusted-device or verification mechanisms;
database access controls;
logging;
security monitoring;
backups;
software and infrastructure security controls.
No Internet-connected system can be guaranteed to be completely secure. Accordingly, Effitrux cannot guarantee absolute security.
Users are responsible for protecting their credentials, devices and accounts and must promptly notify Effitrux of suspected unauthorised access.
GDPR itself requires appropriate technical and organisational measures rather than an impossible guarantee of absolute security.
14. Personal Data Breaches
Where a personal data breach occurs, Effitrux will assess and address the incident and comply with applicable notification obligations to supervisory authorities and affected individuals where legally required.
15. Your GDPR Rights
Subject to the requirements and exceptions of applicable law, individuals may have rights including:
access to their personal data;
rectification;
erasure;
restriction of processing;
objection to processing;
data portability;
withdrawal of consent;
rights concerning certain automated decision-making;
lodging a complaint with a competent supervisory authority.
Effitrux may need to verify identity before fulfilling a request.
Requests may be submitted to the privacy contact listed in this Policy.
16. Automated Decision-Making
Unless expressly disclosed for a specific feature, Effitrux does not intend to make decisions based solely on automated processing that produce legal effects concerning individuals or similarly significantly affect them within the meaning of Article 22 GDPR.
Calculations, profitability indicators, alerts, recommendations, classifications and other automated outputs supplied by Effitrux are informational tools and do not constitute legally binding decisions made on behalf of the user.
17. Cookies and Similar Technologies
At the date of this Privacy Policy, the public Effitrux website does not use non-essential analytics or marketing cookies. Necessary authentication and session technologies may be used when account features are accessed.
The Effitrux website and web application may use cookies, local storage or similar technologies where necessary to:
authenticate users;
maintain sessions;
preserve preferences;
secure the Service;
provide functionality.
Non-essential cookies or similar technologies requiring consent under applicable law will be used only where the necessary consent or other legal basis has been obtained.
A separate Cookie Policy or consent-management interface may be provided where appropriate.
18. Children
Effitrux is not directed to children.
Persons who are not legally capable of entering into a binding agreement may use the Service only where permitted by applicable law and with any legally required authorisation.
Effitrux does not knowingly seek to collect personal data from children for purposes unrelated to providing the Service.
19. Disclosure Required by Law
Effitrux may disclose information where reasonably necessary to:
comply with applicable law or a legally binding request;
respond to competent authorities;
enforce agreements;
investigate fraud or security incidents;
protect the rights, property or safety of Effitrux, users or third parties;
establish, exercise or defend legal claims.
Effitrux will not voluntarily provide data to public authorities merely because it is requested where a legally valid basis is required.
20. Corporate Transactions
If the Effitrux business or relevant assets are reorganised, merged, financed, acquired, transferred or sold, relevant information may be transferred as part of that transaction, subject to applicable data-protection law and appropriate safeguards.
21. Anonymised and Aggregated Information
Effitrux may create statistics and analytics using data that has been aggregated or irreversibly anonymised so that individuals cannot reasonably be identified.
Such non-personal information may be used to understand and improve the Service, develop features, produce aggregated benchmarks and perform business analysis, subject always to applicable law.
Effitrux will not present another user's confidential business information to you merely because that information has been uploaded to the Service.
22. Changes to This Privacy Policy
Effitrux may update this Privacy Policy to reflect legal, technical or operational developments.
Material changes will be communicated where required by law.
The effective date shown at the top identifies the current version.
Continued use of the Service does not constitute consent where applicable law requires separate consent for a particular processing activity.
23. Supervisory Authority
Individuals located in the EEA have the right to lodge a complaint with the competent data protection supervisory authority, including the authority in the Member State of their habitual residence, place of work or place of the alleged infringement, as applicable.
24. Contact
Privacy questions and requests may be directed to:
Email: info@effitrux.com