Privacy Policy & GDPR Compliance
Last updated: 23 July 2026
MullaDrive ("we", "us", "our") is committed to protecting the privacy and personal data of all applicants, candidates, and visitors to our platform. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
When you apply through our recruitment portal, we collect the following personal data:
1.1 Identity Information
- Full name (first name, middle name, last name)
- Date of birth
- National Insurance Number (NIN)
- Passport-style photograph
- Driver's licence details (type, points)
1.2 Contact Information
- Email address
- Phone number
- Current residential address
- Duration at current address
1.3 Employment Information
- CV / Resume (if provided)
- Driving licence points and type
1.4 Identity Verification Data
- Identity verification results processed through our third-party verification provider (Onfido)
- Verification status and completion records
1.5 Technical Data
- IP address
- Browser type and version
- Device information
- Cookies and session data
2. Lawful Basis for Processing
We process your personal data under the following lawful bases as defined by Article 6 of the UK GDPR:
| Purpose | Lawful Basis |
|---|---|
| Processing your job application | Legitimate Interest — necessary to assess your suitability for employment |
| Identity verification | Legal Obligation — we are required to verify right to work in the UK |
| Contacting you about your application | Contractual Necessity — steps prior to entering a contract |
| Storing your NIN and identity documents | Legal Obligation — employment and tax compliance |
| Sending verification emails | Legitimate Interest — necessary to complete the onboarding process |
3. How We Use Your Information
Your personal data is used for the following purposes:
- To assess your suitability for Amazon delivery driver roles
- To verify your identity and right to work in the United Kingdom
- To communicate with you regarding your application status
- To comply with legal and regulatory requirements
- To match you with available positions
- To maintain records for audit and compliance purposes
4. Third-Party Data Sharing
We may share your personal data with the following categories of recipients:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Onfido Ltd | Identity document verification | UK GDPR compliant, ISO 27001 certified |
| Amazon / Delivery Service Partners | Placement into driver roles | Data Processing Agreement in place |
| HMRC | Tax and employment compliance | Legal obligation |
| Email service providers | Sending application communications | Data Processing Agreement in place |
We will never sell your personal data to third parties for marketing purposes.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| Successful applications | Duration of employment + 6 years |
| Unsuccessful applications | 6 months from decision date |
| Identity verification records | Duration of employment + 2 years |
| Passport photographs | Deleted within 30 days of verification completion |
| CVs / Resumes | 12 months or until you request deletion |
| Contact enquiries | 12 months |
After the retention period expires, your data will be securely deleted or anonymised.
6. Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
Your Data Rights
- Right of Access (Article 15) — You can request a copy of all personal data we hold about you.
- Right to Rectification (Article 16) — You can request correction of inaccurate or incomplete data.
- Right to Erasure (Article 17) — You can request deletion of your personal data ("right to be forgotten"), subject to legal obligations.
- Right to Restrict Processing (Article 18) — You can request that we limit how we use your data.
- Right to Data Portability (Article 20) — You can request your data in a structured, commonly used format.
- Right to Object (Article 21) — You can object to processing based on legitimate interests.
- Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at contact@mulladrive.co.uk. We will respond to your request within 30 days as required by law.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission (HTTPS/TLS)
- Secure server infrastructure with access controls
- Regular security assessments
- Staff training on data protection
- Access limited to authorised personnel only
- Secure file storage with restricted permissions
8. Identity Verification Process
As part of our onboarding process, we require identity verification to confirm your right to work in the UK and to validate your driver's licence. This process is conducted through a secure third-party provider (Onfido) which is:
- Certified to ISO 27001 (Information Security Management)
- Fully compliant with UK GDPR
- Registered with the Information Commissioner's Office (ICO)
During verification, you will be asked to present your driver's licence to a camera. The verification data is processed by Onfido under their own privacy policy and is subject to their data retention policies. We receive only the verification result (pass/fail) and reference identifiers.
9. Cookies
Our platform uses essential cookies to maintain your session during the application process. We do not use tracking cookies, advertising cookies, or analytics cookies that process personal data.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Maintains your application session | Session (deleted on browser close) |
| Admin session | Authenticates admin access | 7 days |
10. International Data Transfers
Your personal data is primarily stored and processed within the United Kingdom. Where data is transferred outside the UK (for example, to cloud infrastructure providers), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the ICO
- Adequacy decisions by the UK Secretary of State
- Binding Corporate Rules where applicable
11. Children's Data
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age. All applicants must be at least 18 years old to apply for driver positions.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated via email or a prominent notice on our website. We encourage you to review this policy periodically.
13. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
14. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:
- Email: contact@mulladrive.co.uk
- Website: www.mulladrive.co.uk