Privacy policy
Last updated 12 October 2026
This policy explains what personal data Sightlane collects, why, and what you can ask us to do with it. It covers this website and the Sightlane app.
Who we are
Sightlane is run by Asad Abdullah, trading as Sightlane, an individual who is not (yet) a registered company (“Sightlane”, “we”, “us”). For anything about your data, email hello@sightlane.co.uk.
Sightlane has two roles under data protection law, depending on whose data it is:
- For the people who sign up and use the app (the operator’s team), Sightlane is the controller. This policy covers that data.
- For the trips an operator puts into Sightlane, which includes passengers, lead contacts, agency contacts and drivers, the operator is the controller and Sightlane is their processor. We only use that data to run the service for the operator, under our Data Processing Agreement. If you are a passenger or driver, the operator who booked your trip is the one to contact first.
What we collect
- Account details: your name, email address, and a securely hashed password. We never see or store your password itself.
- Two-factor login: if you turn it on, a secret shared with your authenticator app.
- Company details your administrator enters: company name, logo, contact details, address.
- What you do in the app: the trips, days, crew and documents you add, and a history of who changed what, which your company can see.
- Emails we send for you, and whether they were delivered.
- Questions you ask the AI assistant and its answers.
- Technical data our providers record when you use the service, such as IP address, browser type and time of request, kept in their logs for security and troubleshooting.
The website itself does not use analytics or advertising trackers.
Why we use it, and the legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account, signing you in, running the service your company subscribes to | Contract |
| Sending account emails: confirmation, password reset, invitations | Contract |
| Keeping the service secure: rate limits, preventing abuse, investigating problems | Legitimate interests |
| Answering your questions and support requests | Legitimate interests |
| Keeping records the law requires, such as invoices once billing starts | Legal obligation |
We do not sell personal data, and we do not use it for advertising.
Who we share it with
We use a small number of providers to run Sightlane. Each only receives what it needs for its job. The current list, with what each does and where, is on our Subprocessors page.
We share data with authorities only when the law requires it.
Where it is stored
Sightlane’s database is hosted in the European Union, in Ireland. Some providers, such as our email and AI providers, are based in the United States; where personal data goes to them, it is protected by the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework, as their terms provide. Sightlane is administered by its founder, who may access the service from outside the UK and EU to support it; that access is limited to what support needs.
The AI features
When someone uses an AI feature, the relevant text, rows or document is sent to Google’s Gemini service to produce the result. Sightlane currently uses Google’s free tier, under which Google may use what is sent to improve its products. Before the free tier is replaced with a paid one, operators should avoid using the AI features on data they do not want shared on those terms, and administrators can switch AI off for any role. AI output is always shown for a person to check; it is never saved without someone confirming it.
How long we keep it
- Account data: while your account exists. If you delete your account, it is removed immediately.
- Company data: while the company’s account exists. An administrator can delete the company, which removes all its data immediately.
- Provider logs: according to each provider’s own retention, usually days to weeks.
- Invoices and billing records, once billing starts: as long as tax law requires.
How we protect it
Each company’s data is kept apart at the database level, and every permission in the app is enforced by the database itself, not only hidden on screen. Connections are encrypted, passwords are hashed, two-factor login is available and can be required by your company, and prices and costs are only visible to roles allowed to see them.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a machine-readable format. Administrators can download all of their company’s data and delete the company from Settings, and anyone can delete their own account there.
To use any of these rights, email hello@sightlane.co.uk. We reply within one month.
You can also complain to a data protection authority: in Ireland the Data Protection Commission (dataprotection.ie), in the UK the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to help first.
Cookies
Sightlane only stores what it needs to work, such as keeping you signed in. Details are on our Cookies page.
Children
Sightlane is a business tool and is not meant for anyone under 18.
Changes
If we change this policy in a way that matters, we will tell account holders by email or in the app before it takes effect.