Privacy Policy
HAF Logistics Ltd · Last updated: 16 July 2026 · Effective: 16 July 2026
Who we are: HAF Logistics Ltd, trading as The HAF Group and useHAF, is the data controller for the information described in this policy. Our registered office is at Burton Road, Sheffield. We operate the HAF KNECT courier platform, PLNA driver network, CleverPay compliance onboarding, and the useHAF.co.uk shop.
1. What information we collect
We collect information you give us directly and information generated as you use our services.
Information you provide
- Identity: Full name, date of birth, vehicle registration number
- Contact: Email address, mobile number, delivery and billing address
- Account credentials: HAF username, PIN (stored as a one-way hash — never in plain text)
- Compliance documents: Driving licence, proof of insurance, goods-in-transit certificate, operator licence (collected via CleverPay on our behalf for driver onboarding)
- Business details: Company name, Companies House number, VAT number (for freight and fleet accounts)
- Payment information: Payment method details processed via Stripe (for KNECT membership billing); bank/settlement details processed via CleverPay
- Communications: Any messages you send us via WhatsApp, email, or the in-platform feedback form
Information generated automatically
- Job and delivery records (collection/delivery address, load details, distance, price)
- Location data (approximate, via postcode) used for job matching and route pricing
- Platform activity (login times, pages visited, actions taken in the KNECT dashboard)
- Device and browser information (IP address, browser type, operating system)
- Cookies and similar technologies (see Section 8 below)
2. How we use your information
| Purpose | Legal basis |
|---|
| Creating and managing your HAF account | Contract performance |
| Matching drivers to jobs via the KNECT Exchange and PLNA network | Contract performance |
| Processing deliveries and customer bookings | Contract performance |
| Compliance verification via the Clever Checked process (CleverPay) | Legal obligation / legitimate interests |
| Calculating and paying driver earnings through CleverPay weekly settlement | Contract performance |
| Billing KNECT membership subscriptions via Stripe | Contract performance |
| Sending service updates (booking confirmations, driver assignment, delivery status) | Contract performance |
| Sending marketing emails about HAF products and network updates (opt-in only) | Consent |
| Fraud prevention, network integrity and platform safety | Legitimate interests |
| Complying with our legal and regulatory obligations | Legal obligation |
| Improving our services and platform | Legitimate interests |
3. Who we share your information with
We do not sell your personal data. We share it only with the following parties, and only to the extent necessary:
- CleverPay — our compliance partner for driver identity verification, document checking, and weekly payment settlement. CleverPay acts as a data processor on our behalf and is subject to a Data Processing Agreement.
- Stripe — payment processing for KNECT membership subscriptions. Card details go directly to Stripe and are never stored on our systems.
- Shopify — order processing and fulfilment for purchases made at useHAF.co.uk. Shopify's privacy policy applies to their processing of your shop data.
- Mailchimp (Intuit) — email marketing communications, for members who have opted in. You can unsubscribe at any time.
- Cloudflare — website hosting, content delivery, and DDoS protection. Traffic may pass through Cloudflare's network.
- Supabase — platform database infrastructure, storing account and job data in encrypted form within the UK/EEA.
- Law enforcement or regulators — only where we are legally required to do so.
4. International transfers
Some of our service providers (Stripe, Mailchimp, Cloudflare) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place — either through the provider's Standard Contractual Clauses or their UK adequacy framework certification.
5. How long we keep your data
| Data type | Retention period |
|---|
| Account information (inactive accounts) | 3 years from last activity |
| Driver compliance documents | 7 years from date of last job (HMRC / tax record requirement) |
| Payment and invoice records | 7 years (Companies Act / HMRC requirement) |
| Job and delivery records | 3 years from job completion |
| Marketing opt-in records | Until you unsubscribe, then 2 years |
| Customer enquiries and support messages | 2 years from resolution |
6. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate information
- Erasure — ask us to delete your data where there is no legal obligation to retain it
- Restriction — ask us to limit how we use your data while a dispute is resolved
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on our legitimate interests
- Withdraw consent — for marketing emails, unsubscribe at any time via the link in any email
To exercise any of these rights, contact us at hello@usehaf.co.uk. We will respond within 30 days.
7. Complaints
If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Cookies
Our website and platform use the following cookies:
- Essential cookies: Required for login sessions, security, and core platform functionality. Cannot be disabled.
- Analytics: We may use Cloudflare Web Analytics, which does not use cookies and does not track individual users across sites.
- Preferences: We store theme (light/dark) and PIN preferences in your browser's local storage.
We do not use advertising or third-party tracking cookies.
9. Security
We take reasonable technical and organisational measures to protect your data including encrypted storage, hashed passwords and PINs, HTTPS across all services, and access controls limiting who within HAF can view personal data. No internet transmission is completely secure — if you believe your account has been compromised, contact us immediately at hello@usehaf.co.uk.
10. Changes to this policy
We may update this Privacy Policy as our services evolve. We will publish the updated version at this URL and update the "Last updated" date above. For significant changes that affect your rights, we will notify you by email.
11. Contact us
HAF Logistics Ltd
Burton Road, Sheffield
Email: hello@usehaf.co.uk
Web: www.usehaf.co.uk