Privacy Policy.

Greenarc Limited trading as Greenarc Fuel Cards provides fuel-related services to commercial and public-sector customers in the UK. Our registered office is 101 First House, Shuttleworth Mead Group, 12a Meadway, Padiham, Burnley, England BB12 7NG.

We may collect contact and address details, business and account information, transaction records, payment and direct-debit details, communications, technical website data and information needed for identity, fraud and credit checks.

We use information to respond to enquiries, assess applications, set up and service accounts, process transactions, meet legal and regulatory duties, prevent fraud, improve our services and send marketing where permitted.

Depending on the purpose, we process information to perform a contract, meet a legal obligation, pursue a legitimate business interest or act on consent. You can withdraw marketing consent at any time.

When you apply for a role, we use the contact details, CV and application information you provide to assess your suitability, communicate with you and manage the recruitment process. Access is limited to people involved in recruitment and approved service providers that securely deliver the application. Please do not provide special-category or other sensitive information unless it is necessary; requests for reasonable adjustments are handled privately. Unsuccessful application information is deleted or anonymised when it is no longer reasonably needed, unless we ask for and receive permission to keep it for a future role.

To assess applications and prevent fraud, we may obtain identity, credit commitment, payment-history and public-record information through Creditsafe and its data partner TransUnion. A Greenarc team member reviews application decisions; we do not rely solely on automated decisions that have a legal or similarly significant effect.

This section describes the Greenarc account-management app, not the separate Greenarc Site Locator described below. The Greenarc mobile app lets existing customers sign in to view fuel cards, invoices and account details, find fuel stations, and contact support.

We use this information only to provide the app and service your account. We do not use in-app advertising or analytics SDKs.

When you use the app, we process:

• Login credentials and a session token stored securely on your device.
• Account, contact, address, fuel-card and invoice information from your Greenarc account.
• Postcodes you enter to find fuel stations (we do not use device GPS).
• Appearance settings stored on your device.
• Messages you send through in-app support chat.

We use:

• ByteStrype to host the self-service account platform.
• Mapbox to display the station map.
• Tawk.to to provide in-app support chat.

You can delete your app account from Profile > Delete Account, or contact hello@greenarcfuelcards.co.uk. Signed-in data on the device is removed when you sign out or delete the account.

Greenarc Site Locator is separate from our account-management app. It helps authorised company users find UK fuel sites accepting their assigned cards. It does not display invoices or provide in-app support chat, and it does not create individual customer accounts in the app.

We process your company username, account identifier, assigned card networks, sign-in and session records to authenticate access and provide the service. Session credentials are held securely on your device. We retain hashed session credentials on our systems and use protected account and network-address identifiers to limit abusive sign-in attempts.

When you search, we process the postcode, town or address you enter and the selected site filters. If you choose Use my location and grant permission, we process your device's location to find nearby sites. This may be precise or approximate according to your device permissions. Location permission is optional: you can search by postcode or town instead. The app does not request background location tracking.

Appearance, selected cards and your preferred navigation app are stored on your device. The app does not keep an on-device search or location history. This does not mean that requests are absent from server or provider logs: request metadata can include searches, coordinates, IP addresses, app information, timestamps and diagnostic information.

We use Vercel for hosting and request processing, Supabase for company account and session storage, Mapbox for address and postcode lookup, and OpenStreetMap services for map tiles. Providers process request and technical information to deliver, secure, maintain and improve their services, including aggregate service statistics, under their applicable privacy policies and arrangements. Mapbox address lookups are sent through our server; the app requests OpenStreetMap tiles directly. Opening Directions hands the selected destination to your chosen external maps service, whose own privacy practices apply.

Site Locator does not include advertising or an in-app behavioural analytics SDK. We do not use its data for cross-app targeted advertising or sell it to data brokers.

Company sessions normally expire after 30 days and can be revoked sooner. Signing out removes the session credential from the device and requests server-side revocation. Expired server sessions are cleaned up during subsequent session creation; expiry is not an immediate deletion guarantee. Account, security and provider records are retained for the purposes described in this policy and the applicable provider policies. Contact us for information about retention or to request access to, correction or deletion of personal information. We may need to verify your request and distinguish personal data from a shared company account.

To manage location permission, use your device settings. To manage company access or assigned cards, contact your company administrator. For privacy requests, contact hello@greenarcfuelcards.co.uk. The rights, security, international transfer and complaints sections of this policy also apply to Site Locator.

We share information only where needed with trusted providers supporting payment, credit checking, card networks, account systems, communications, IT, professional advice and legal or regulatory duties. We do not sell our database for third-party marketing.

Financial and transaction records are generally retained for seven years where required for tax and accounting purposes. Other information is reviewed and deleted or anonymised when it is no longer needed for the purpose collected.

Where a provider processes information outside the UK, we use an approved transfer mechanism or another lawful safeguard. We use access controls, secure systems, staff training, updates and monitoring to protect personal information.

The website uses essential storage to remember your cookie choice and support requested features such as web chat. With your permission, Google Analytics 4 uses optional cookies to help us understand page visits and important journeys such as fuel-card applications, card-finder results and contact enquiries. We do not send names, email addresses, telephone numbers, form contents or CVs to Google Analytics. Google Tag Manager delivers the approved measurement tags, but optional analytics does not load until you consent. You can accept, reject or change this choice at any time using Cookie settings in the website footer.

You may have rights to access, correct, erase, restrict or object to the use of your information, and to receive a portable copy in some circumstances. Legal retention duties can limit some requests.

To ask a privacy question or exercise a data right, email hello@greenarcfuelcards.co.uk or call 0345 646 5451. You can also complain to the Information Commissioner's Office if you are unhappy with how your information has been handled.