Privacy Policy
Last Updated: 7 March 2026
1. Introduction
Headrest Ads ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
Headrest Ads is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:
- Email: privacy@headrestads.com
- Website: Contact Form
3. Information We Collect
3.1 For Advertisers
When you register as an advertiser, we collect:
- Company name
- Business address
- Contact phone number
- Email address
- Industry sector
- Website URL
3.2 For Driver Partners
When you register as a driver partner, we collect:
- Full name
- Phone number
- Email address
- Home address
- Vehicle registration number
- Vehicle make and model
3.3 For Website Visitors
When you use our website, we may collect:
- IP address (anonymized where possible)
- Browser type and version
- Device information
- Pages visited and time spent
- Referral source
3.4 Contact Form Submissions
When you contact us, we collect:
- Name
- Email address
- Message content
4. Legal Basis for Processing
We process your personal data under the following legal bases (GDPR Article 6):
| Purpose | Legal Basis |
|---|---|
| Providing our advertising services | Contract performance (Art. 6(1)(b)) |
| Processing driver partner registrations | Contract performance (Art. 6(1)(b)) |
| Responding to enquiries | Legitimate interests (Art. 6(1)(f)) |
| Marketing communications (with consent) | Consent (Art. 6(1)(a)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
| Website analytics | Legitimate interests (Art. 6(1)(f)) |
5. Data Retention
We retain your personal data only for as long as necessary:
- Advertiser data: Duration of business relationship + 6 years (legal/tax requirements)
- Driver partner data: Duration of partnership + 6 years
- Contact form submissions: 2 years
- Website analytics: 26 months (anonymized)
- Cookie consent records: 2 years
6. Data Security
We implement robust security measures to protect your data:
- Encryption: All personal data is encrypted at rest using AES-256 encryption
- Hashing: Passwords are hashed using bcrypt with salt
- HTTPS: All data transmitted via TLS/SSL encryption
- Access Controls: Strict role-based access to personal data
- Regular Audits: Security assessments and vulnerability testing
7. Your Rights (GDPR Articles 15-22)
Under UK GDPR, you have the following rights:
| Right | Description |
|---|---|
| Right of Access (Art. 15) | Request a copy of your personal data we hold |
| Right to Rectification (Art. 16) | Request correction of inaccurate data |
| Right to Erasure (Art. 17) | Request deletion of your data ("right to be forgotten") |
| Right to Restrict Processing (Art. 18) | Request limitation of how we use your data |
| Right to Data Portability (Art. 20) | Receive your data in a portable format |
| Right to Object (Art. 21) | Object to processing based on legitimate interests |
| Rights Related to Automated Decisions (Art. 22) | Not be subject to solely automated decision-making |
To exercise any of these rights, please contact us at privacy@headrestads.com. We will respond within 30 days.
8. Third-Party Sharing
We may share your data with:
- Service Providers: Hosting, email, and analytics providers (under data processing agreements)
- Legal Requirements: When required by law or legal process
- Business Transfers: In the event of a merger or acquisition
We do not sell your personal data to third parties.
9. International Transfers
Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).
10. Cookies
We use cookies to improve your experience. For detailed information, please see our cookie consent banner and the categories below:
- Necessary Cookies: Essential for website functionality
- Analytics Cookies: Help us understand website usage (with consent)
- Marketing Cookies: Used for advertising purposes (with consent)
You can manage your cookie preferences at any time using the Cookie Settings link in our footer.
11. Children's Privacy
Our services are not directed at individuals under 18. We do not knowingly collect data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last Updated" date.
13. Complaints
If you have concerns about how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
14. Contact Us
For any privacy-related questions or to exercise your data subject rights:
- Email: privacy@headrestads.com
- Contact Form: /contact