Privacy Policy — FWM Vehicle Services

Last updated: 20 June 2026

This Privacy Policy explains how FWM Vehicle Services ("FWM", "we", "us", or "our") collects, uses, stores, and protects information in connection with the FWM Vehicle Services mobile and desktop application (the "App") and its supporting backend services.

The App is a business-management tool used by FWM staff to manage vehicle rentals, customers, rental agreements, and related records. It is not intended for use by the general public, and accounts are issued only to authorised FWM personnel.

If you have any questions about this policy, contact us at fwm@techlyfett.com.

1. Who this policy applies to

• Staff users — authorised employees and administrators who log in to operate the App.

• Customers — individuals whose rental and identity information is entered into the App by staff in the course of providing vehicle-rental services.

If you are a customer of FWM and wish to exercise your data rights, please contact us at fwm@techlyfett.com (see Section 8).

2. Information we collect

We collect only the information needed to operate a vehicle-rental business.

a) Information about staff users (account holders)

• Full name and email address

• Password (stored only as a salted cryptographic hash — never in plain text)

• Role/permission level

• Authentication and session data (login timestamps, security tokens)

b) Information about customers (entered by staff)

• Full name, date of birth, address, phone number, and email address

• Driver permit / licence number and expiry (stored encrypted)

• Uploaded identity and permit documents (e.g. permit, national ID, passport)

• Digital signatures captured on rental agreements

c) Vehicle and rental records

• Vehicle details, insurance and inspection information

• Rental dates, charges, payment status, and rental history

• Rental agreements and related PDFs

d) Technical information

• App version, device type, and basic diagnostic data needed to keep the service running and secure

We do not collect location data, advertising identifiers, contacts, photos beyond uploaded documents, or any data for advertising purposes.

3. How we use information

• Authenticate users and secure access to the App

• Create and manage customers, vehicles, rentals, and agreements

• Generate rental agreements, invoices, and related documents

• Send transactional emails (e.g. a copy of a signed rental agreement) to the relevant customer

• Maintain business records and prevent fraud or misuse (e.g. double-booking, expired-permit checks)

• Operate, maintain, and improve the App's reliability and security

We do not sell personal information, and we do not use it for advertising or marketing profiling.

4. Legal basis for processing

• Contract — to provide rental services to customers

• Legitimate interests — to operate and secure our business

• Legal obligation — to meet record-keeping, tax, or regulatory requirements

• Consent — where specifically requested (e.g. capturing a signature on an agreement)

5. How information is shared

• Hosting & infrastructure — hosted on Railway (cloud infrastructure provider).

• Email delivery — transactional emails are sent through Resend (and/or our SMTP mail provider).

• Legal or safety reasons — where required by law, regulation, legal process, or to protect rights and safety.

These providers process data on our behalf under their own security and data-protection obligations. We do not sell or rent personal information to third parties.

6. Data storage and security

• Data is stored in a secured PostgreSQL database hosted on Railway.

• Passwords are hashed with a strong algorithm (Argon2id) and never stored in plain text.

• Sensitive fields (such as driver-permit numbers) are encrypted at rest.

• Access requires authentication, and permissions are restricted by user role.

• Data is transmitted over encrypted HTTPS connections.

No method of transmission or storage is 100% secure, but we take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, or misuse.

7. Data retention

We retain personal information for as long as needed to provide the service and to meet our legal, accounting, and record-keeping obligations. When information is no longer required, it is deleted or anonymised. Customers may request deletion of their data as described below, subject to records we are legally required to keep.

8. Your rights

• Access the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your information ("right to be forgotten")

• Request a copy of your data in a portable format

• Object to or restrict certain processing

To exercise any of these rights, contact us at fwm@techlyfett.com. We will respond within the timeframe required by applicable law. The App includes data export and erasure capabilities to support these requests.

9. Children's privacy

The App is a business tool intended for authorised staff and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child's information has been provided to us, contact us and we will delete it.

10. International data transfers

Our infrastructure providers may process and store data on servers located outside your country. Where data is transferred internationally, we take steps to ensure it remains protected in accordance with applicable data-protection laws.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated through the App or by other appropriate means.

12. Contact us

FWM Vehicle Services
Email: fwm@techlyfett.com

If you have concerns about how your personal data is handled, you also have the right to lodge a complaint with your local data-protection authority.

© 2026 FWM Vehicle Services. All rights reserved.