How we handle your data

Under UK GDPR / the Data Protection Act 2018. For the final legal notice, have a UK data-protection professional review this wording.

Who we are (data controller)

SR ROAD WELL AI LTD, trading as RoadWell (company no. 17341277, England & Wales), is the data controller for the information you provide when using this service at roadwell.co.uk.

What we collect

Account details (name, email), your driver profile, glucose and other monitoring readings, reminders, monitoring records, and messages with your support contact.

Special-category health data & lawful basis

Glucose and related information is special-category (health) data under the UK GDPR. Where we rely on it, we process this on the basis of your explicit consent (Art. 9(2)(a)), captured at sign-up and manageable at any time under Consent & privacy.

Purpose limitation & data minimisation

We use your data to provide the monitoring service and, where you have consented, for defined research. We collect only what is needed for those purposes.

Your rights

• Access & portability — export everything we hold via Export my data.
• Erasure — delete your account and all data via Delete my account & data.
• Withdraw consent — at any time; this stops further processing.

Retention

We keep your data for as long as your account is active, and remove it when you delete your account, subject to any legal retention requirements.

Sub-processors & hosting

We use reputable cloud infrastructure and payment providers to run the service. Data is hosted in the EU.

International transfers

Where any transfer outside the UK/EU is necessary, it is made under appropriate safeguards.

Security

Data is encrypted in transit and at rest, access is role-based, and key actions are audit-logged. Messages are encrypted at rest.

Incident management

We have processes to detect, manage and, where required, report personal-data breaches.

Contact

For privacy questions or to exercise your rights, contact us via roadwell.co.uk.