Privacy Policy

1. Introduction

Robelium Ltd ("Robelium", "we", "our", "the platform") operates a real-time roadside assistance and vehicle recovery coordination platform.

Robelium does not provide towing or repair services directly. We coordinate, govern and optimise delivery of real-world services through verified partners using structured systems and live operational monitoring.

This Privacy Policy explains:

• ●What personal data we collect
• ●Why we collect it
• ●How it is used
• ●How it is protected
• ●Your rights under applicable data protection law

Robelium Ltd is incorporated in England & Wales (Company No. 17036419).

2. Data Controller

For privacy enquiries: [email protected]

Robelium acts as data controller for user and partner data processed through the platform.

3. Categories of Information We Collect

4. Legal Basis for Processing (UK GDPR)

We process personal data under one or more of the following legal bases:

• ●Contractual necessity — to fulfil service requests
• ●Legitimate interests — platform reliability, safety, fraud prevention
• ●Legal obligation — regulatory, financial, and dispute handling requirements
• ●Consent — where required (e.g., cookies or optional analytics)

5. How We Use Your Information

We use your data to:

• ●Coordinate roadside assistance requests
• ●Match users with appropriate partners
• ●Provide real-time tracking
• ●Process payments via external providers
• ●Maintain service standards and partner reliability
• ●Detect fraud and off-platform payment attempts
• ●Enforce compliance policies
• ●Resolve disputes using system logs
• ●Improve platform performance and system reliability

Robelium does not use personal data for unrelated marketing profiling.

6. Payments

Robelium facilitates payments for real-world services only.

Payments are processed by external payment service providers. Robelium does not store full card details.

7. Third-Party Infrastructure

We rely on trusted infrastructure providers to operate the platform:

• ●Payment processing provider — secure handling of payment transactions
• ●Cloud database provider — encrypted data storage
• ●Cloud hosting provider — application delivery and infrastructure
• ●Security and bot protection provider — preventing automated abuse
• ●Transactional email provider — password resets and system notifications
• ●Mapping and routing provider — location-based service coordination

These providers process data on our behalf under contractual safeguards.

8. Application Distribution Platforms

Our applications may be distributed via:

• ●Apple Inc. (App Store)
• ●Google LLC (Google Play)

These platforms operate as independent data controllers and may collect data according to their own privacy policies.

9. Information Sharing

We share data only where necessary:

We do not sell personal data.

10. Data Retention

We retain personal data only as long as necessary:

• ●Active accounts — for the duration of use
• ●Inactive accounts — up to 24 months before anonymisation or deletion
• ●Service and operational data — up to 5 years
• ●Financial data — up to 6 years (legal obligation under UK law)
• ●Compliance, audit, and security logs — up to 5 years
• ●Website analytics data — automatically purged after 6 months
• ●Cookie consent records — up to 24 months (as proof of consent under UK GDPR)

Data is deleted or anonymised when no longer required.

11. Operational Monitoring

Robelium operates internal monitoring systems for:

• ●Live job monitoring
• ●Risk scoring
• ●Operational alerts
• ●Controlled human intervention

All actions are logged and auditable. Access to operational monitoring systems is internal and restricted to authorised personnel only.

12. Data Security

We implement appropriate technical and organisational measures including:

• ●Encrypted transmission (HTTPS/TLS)
• ●Role-based access control (RBAC)
• ●Audit logging
• ●Secure authentication
• ●Ongoing system monitoring

13. International Data Transfers

Where data is processed outside the UK, we ensure:

• ●Adequate safeguards are in place
• ●Standard Contractual Clauses (SCCs) are used where required
• ●Compliance with UK GDPR

14. Your Rights

You have the right to:

• ●Access your data
• ●Correct inaccurate data
• ●Request deletion (subject to legal obligations)
• ●Restrict or object to processing
• ●Request data portability
• ●Lodge a complaint with the ICO

To exercise any of these rights, submit a Subject Access Request (SAR) by emailing [email protected] with the subject line "Subject Access Request". We will respond within 30 days.

15. Cookies

We use:

• ●Essential cookies (authentication, security)
• ●Optional analytics cookies (subject to consent)

Users can manage preferences via browser settings or consent banner.

16. Children's Data

Robelium is not intended for individuals under 18. We do not knowingly collect data from minors.

17. Changes to This Policy

We may update this policy periodically. Continued use of the platform constitutes acceptance.

18. Contact