GDPR Compliance

    HashLog is committed to protecting your privacy and ensuring the security of your personal data in accordance with the General Data Protection Regulation (GDPR).

    Our Commitment to Data Protection

    At HashLog, we take data protection seriously. We have implemented comprehensive measures to ensure that all personal data is processed lawfully, fairly, and transparently. Our commitment extends to:

    • Processing personal data only for specified, explicit, and legitimate purposes
    • Collecting only the minimum data necessary for the intended purpose
    • Keeping personal data accurate and up to date
    • Retaining data only for as long as necessary
    • Ensuring appropriate security measures are in place

    Your Data Subject Rights

    Under GDPR, you have the following rights regarding your personal data:

    Right of Access

    You can request a copy of all personal data we hold about you.

    Right to Rectification

    You can request correction of any inaccurate or incomplete data.

    Right to Erasure

    You can request deletion of your personal data under certain circumstances.

    Right to Restrict Processing

    You can request that we limit how we use your data.

    Right to Data Portability

    You can receive your data in a structured, machine-readable format.

    Right to Object

    You can object to processing of your data for certain purposes.

    To exercise any of these rights, submit a Data Subject Access Request:

    Submit Data Request

    Data We Collect

    We collect and process the following categories of personal data:

    Identity Data

    Name, job title, company name

    Contact Data

    Email address, phone number, business address

    Technical Data

    IP address, browser type, device information, cookies

    Usage Data

    Information about how you use our website and services

    Business Data (For Customers)

    Fleet data, logistics information, GPS tracking data processed on your behalf

    Security Measures

    We implement appropriate technical and organizational measures to protect your data:

    • Encryption: All data is encrypted in transit (TLS/SSL) and at rest
    • Secure Infrastructure: Cloud hosting with enterprise-grade security
    • Access Controls: Role-based access with authentication requirements
    • Monitoring: Continuous security monitoring and incident response

    Legal Basis for Processing

    We process personal data under the following legal bases:

    PurposeLegal Basis
    Providing our servicesContract performance
    Responding to enquiriesLegitimate interest
    Marketing communicationsConsent
    Analytics and improvementLegitimate interest / Consent
    Legal complianceLegal obligation

    Data Retention

    We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

    • Active customer data: Duration of the business relationship plus 7 years
    • Marketing contacts: Until consent is withdrawn
    • Website analytics: 26 months
    • Support enquiries: 3 years after resolution

    International Data Transfers

    When we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries with an adequacy decision.

    Contact Our Data Protection Team

    If you have any questions about our GDPR compliance or wish to exercise your rights, please contact us:

    We will respond to all legitimate requests within 30 days. If your request is complex, we may require an additional 60 days but will notify you within the initial 30-day period.

    Related Policies

    Last Updated: December 2025

    We value your privacy

    We use cookies to enhance your browsing experience, analyze site traffic, and personalize content. You can customize your cookie preferences or accept/decline all cookies. Read our Privacy Policy for more information.