Privacy Policy
Last updated 24 September 2026
Who we are
TreadTrace is software from Lattice Cayman SEZC, registered in the Cayman Islands. Write to support@treadtrace.co.uk about anything on this page, including a request about your own data.
What we hold, and why
This is the data we hold for our own purposes, as its controller.
- Visitors to this site
- The page you opened, where you came from, your country, your browser and device type, and how fast the page loaded. We use it to see which pages are read and how fast they load, on our legitimate interest in knowing how the site is used. Cloudflare, Inc. and Google LLC count it and keep it for the periods they publish.
- Walkthrough bookings and support email
- Your name, email address, company and whatever you write to us. We use it to answer you and to set up an account, as a step towards a contract and on our legitimate interest in answering the people who write. We keep it until the enquiry is closed and for twelve months after.
- Account users
- Your name, email address, phone number, role and the organisation you belong to. We use it to sign you in and to run the service, under our contract with the business you work for. Signing in is by email and password through Clerk, Inc. We keep it for the life of the account, and delete it as our terms say.
- Billing contacts
- Your name, email address, business name, VAT number and billing address, and the amounts and dates we charged. We use it to bill you and to keep the records the law requires, under our contract and our legal obligations. Card numbers go to Dodo Payments, Inc. and never to us. We keep it for six years after the last charge.
Data your business puts into TreadTrace
When a tyre operator uses TreadTrace, the operator decides what goes in and we hold it on the operator's behalf. That is:
- its drivers' and office users' names, emails and phone numbers
- its customers, and their sites, contacts and rates
- vehicle registrations
- collections with counts, weights, photos and the names of people who signed
- tip records, and what was filed with Defra's digital waste tracking service
The operator is the controller of all of it, and we act on its instructions under the data processing section of our terms. To see, correct or delete something held about you, ask your employer or the operator. Ask us and we will pass it on and tell you we have.
TreadTrace does not track where drivers are. It records when each step of a collection was done, not the place the phone was standing.
Who receives it
We pass personal data to these, and to nobody else.
- Cloudflare, Inc., United States
- It hosts the site and the app, stores their data and files, sends the app's email and counts visits to this site. It receives the data in your account and the files your drivers take. It acts on our instructions. Its privacy policy.
- Clerk, Inc., United States
- It signs your people in and keeps their sessions. It receives a user's name, email address, password and session. It acts on our instructions. Its privacy policy.
- Postcodes.io, United Kingdom
- It turns a postcode into a point on the map. It receives a postcode, and nothing about a person. It acts on our instructions. Its privacy policy.
- Defra's digital waste tracking service, United Kingdom
- It records the tips you report, as the law requires. It receives the receiving site's name, permit and address, its contact's email and phone, the carrier's and vehicle's registrations, and the waste description and weight, for each filing. It is a public authority, and we send it this on the operator's behalf. Its privacy policy.
- Google LLC, United States
- It counts visits to this site. It receives what "Visitors to this site" lists, and a random number kept in a cookie. It acts on our instructions. Its privacy policy.
- Dodo Payments, Inc., United States
- It sells the subscription, charges the card, applies tax and issues the invoice. It receives your name and email address, your business name, VAT number and billing address, your payment method and its card identifiers, and the amounts and dates. It decides for itself what it does with this: it is a controller in its own right. Its privacy policy.
Where it is kept
The service runs on Cloudflare's network, which is not pinned to the UK, and we are in the Cayman Islands. Data that leaves the UK to reach us is covered by the UK International Data Transfer Addendum to the EU standard contractual clauses, which forms part of our terms. Each of the parties above covers its own part under its own UK-approved terms.
Analytics and cookies
Two scripts count what "Visitors to this site" lists. Cloudflare Web Analytics stores nothing on your device. Google Analytics sets one cookie, a random number kept for thirteen months, to tell a return visit from a new one. Neither identifies you. To object, block them with any content blocker; nothing here needs them.
The app keeps only your sign-in session.
Your rights
You can object to what we do with your data where we rely on our legitimate interest. Write to us and say so, and we will stop unless we have a reason to carry on that outweighs yours.
You can also ask for a copy of what we hold, have it corrected or deleted, have its use restricted, or have it sent elsewhere. Write to support@treadtrace.co.uk and we will answer within a month.
If we get it wrong, complain to the Information Commissioner's Office at ico.org.uk, or to the Ombudsman in the Cayman Islands.
Changes
The date at the top is the version you are reading. If we start using personal data for something new, we will say so before we start.