PotholePatrol.co.uk · A service by Connectdos Ltd
Effective date: 1 October 2026 · Updated October 2026 · Governed by UK GDPR and the Data Protection Act 2018
Pothole Patrol is operated by Connectdos Ltd ("we", "us", "our"), a company registered in England and Wales (Company No. 15696351), whose registered office is at 124 City Road, London EC1V 2NX. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. Please read it alongside our Terms & Conditions.
We collect only what is necessary to deliver the service.
Account data
Lawful basis: Performance of a contract (creating and maintaining your account).
Report data
Lawful basis: Performance of a contract (delivering the reporting and tracking service you signed up for).
Usage and session data
Lawful basis: Legitimate interests (keeping your session secure).
Solicitor referral data (only if you choose to use this feature)
If you choose to contact a solicitor firm through Pothole Patrol, we collect the following only at that moment, on your explicit consent:
Lawful basis: Your explicit consent (UK GDPR Art. 6(1)(a)). You choose the firm by name, tick a named consent checkbox, and submit. This data is never collected automatically. You may not submit the same report to a second firm (to prevent duplicate contact), but this does not limit your rights for other reports.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Create and manage your account | Name, email, password | Contract |
| Create your report and generate the evidence file | GPS, photos, timestamp | Contract |
| Populate the national heatmap | GPS coordinates only (no name, no email) | Legitimate interests |
| Send account and report notifications | Name, email | Contract |
| Generate the accountability toolkit on day 28 | Report data, email | Contract |
| Pass your contact details to a chosen solicitor firm | Name, email, phone (only when you consent) | Your explicit consent — Art. 6(1)(a) |
| Platform security and fraud prevention | Account data, session token | Legitimate interests |
| Aggregate statistics (e.g. "500 reports in Warwickshire") | Anonymised location data | Legitimate interests |
What we never do
Solicitor firm referral — sharing on your consent
If you choose to use the "Get it to a Solicitor" feature, we will share your name, email address, phone number and the relevant report reference with the specific firm you select. This only happens when you:
The firm may only use your details to respond to your specific enquiry — they may not add you to a marketing list, profile you, or pass your details to anyone else. This obligation is set out in our Data Sharing Agreement (DSA v2), Clause 3A. Pothole Patrol does not charge the firm per referral; their access is subscription-based.
We share data only with the sub-processors needed to run the platform:
| Provider | Purpose | Data transferred |
|---|---|---|
| MongoDB Atlas (EU region) | Database hosting | All account and report data |
| Resend / email provider | Transactional emails | Name and email address |
| MapIt / mySociety | Geocoding — council lookup | GPS coordinates only |
| Cloud object storage | Photo storage | Uploaded photographs |
Each sub-processor is bound by a data processing agreement and processes data only on our instructions. All storage is within the UK or the European Economic Area.
Public heatmap
GPS coordinates appear on the public heatmap. No name, email, account details or photographs are ever shown publicly. Reports are displayed as anonymous map points only.
You have the following rights over your personal data. To exercise any of them, email support@potholepatrol.co.uk with the subject line "Data request". We will respond within one calendar month.
Right of access
Request a copy of all personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data (subject to our retention obligations).
Right to restriction
Ask us to pause processing while a dispute is resolved.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests.
Right to complain
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
We use one category of cookie only:
| Cookie | Purpose | Duration |
|---|---|---|
| pp_auth_token | Keeps you logged in (HttpOnly, Secure flag set) | 24 hours / session |
We do not use advertising cookies, analytics cookies, or any third-party tracking scripts. No consent banner is required for a single strictly-necessary session cookie.
If you believe your account has been compromised, contact support@potholepatrol.co.uk immediately.
Pothole Patrol is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you become aware that a child has provided us with personal data without parental consent, please contact us and we will delete it promptly.
We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision. For material changes we will notify registered users by email at least 14 days before the change takes effect. Continued use of the platform after that date constitutes acceptance.
For data requests, questions about this policy, or concerns about how we handle your data:
Data Controller: Connectdos Ltd (trading as Pothole Patrol)
Company No: 15696351 · Registered in England and Wales
Registered office: 124 City Road, London EC1V 2NX
See also: Terms & Conditions