Privacy Policy
Effective 26 October 2026
Contents
This policy explains what personal data RouteZero Ltd ("we", "us") collects, why we use it, who we share it with, and the rights you have over it.
1. Who we are
RouteZero Ltd is registered in England and Wales, with company number 14190222 and its registered office at 71-75 Shelton Street, London, England, WC2H 9JQ. We are the controller of the personal data described in this policy under UK data protection law. This means we decide how and why it is used.
You can contact us about this policy, or about your personal data, at hello@routezero.com.
2. What this policy covers
This policy applies to:
- People who visit routezero.com.
- People who ask us for a free travel data analysis, or contact us in another way.
- Contacts at our customers.
It doesn't cover the travel data that customers send us to analyse. We process that data for the customer, under our agreement with them, and the customer's own privacy notice applies to it.
3. What we collect, and where it comes from
When you visit the site: the pages you view, the site that referred you, your browser and device type, and your IP address. Your browser provides this information. Pages with a "book a call" button also load Cal.com's booking tool from its EU servers, which receive your IP address.
When you ask for a free analysis: your name, work email, organisation, and how your organisation books travel. You provide these through the form.
When you book a call: your name, email, and the time you choose. You provide these through the booking form.
When you work with us: your name, job title, organisation, contact details, what we discuss, and the details you provide when you sign a contract. We receive these from you, or from colleagues at your organisation when they arrange our work together.
4. Why we use it, and the lawful basis
We rely on the following lawful bases, meaning the reasons the law recognises for using personal data:
| What we do | Lawful basis |
|---|---|
| Reply to you, and run the analysis you asked for | Legitimate interests, because you asked us to |
| Deliver our services, and manage the agreement with your organisation | Legitimate interests, because you are your organisation's contact with us |
| Keep tax and accounting records | Legal obligation |
| See how the site is used, with Fathom | Legitimate interests |
| Measure visits with Google Analytics, which uses cookies to recognise return visits | Your consent |
You are not required to provide your details. Without them, we cannot reply to you or run an analysis.
We do not make decisions about you based solely on automated processing.
5. Cookies
Google Analytics loads only after you select Accept on our cookie banner. Until then, the site sends nothing to Google Analytics. Once you accept, it uses cookies to recognise return visits.
Fathom, our other analytics tool, does not use tracking cookies.
Your choice is stored in your browser. To change it, clear this site's data in your browser settings and choose again.
6. Who we share it with
The following providers process personal data for us:
| Provider | What it does for us | Where |
|---|---|---|
| Google (Firebase Hosting) | Serves the website | Google's data centres worldwide |
| Google (Analytics) | Visitor statistics, only if you accept cookies | Google's data centres worldwide, including the United States |
| Fathom | Visitor statistics without tracking cookies | European Union. Your IP address is anonymised there, and only anonymous statistics are stored in the United States |
| Formspree | Receives the free analysis form | United States |
| Cal.com (cal.eu) | Booking calls | European Union |
| Microsoft (Outlook) | United Kingdom | |
| SignWell | Signing contracts | United States |
We share personal data only with the providers listed above, or where the law requires us to.
We do not sell personal data.
7. Transfers outside the UK
Some of the providers above are located outside the UK. The protection that applies to each transfer is set out below.
- Cal.com (cal.eu): UK law recognises every country in the European Economic Area as providing adequate protection.
- Fathom: your IP address is processed in the EU, which UK law recognises as providing adequate protection. It is anonymised before any data reaches the United States.
- Google: Google is certified under the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as providing adequate protection for transfers to the United States. For Firebase Hosting, Google's terms also include standard contractual clauses (contract terms that protect international transfers), together with the UK International Data Transfer Addendum.
- Formspree: Formspree states that it relies on standard contractual clauses.
- SignWell: SignWell states that it transfers data to the United States because this is necessary to perform its contract.
8. How long we keep it
We keep the following personal data for these periods:
- Enquiries, analysis requests, and call bookings: 2 years after our last contact, unless work follows.
- Customer contacts: the length of the agreement, plus 6 years for our records.
- Google Analytics data: 14 months.
9. How we protect it
We limit access to personal data to the people who need it, and we use our providers' security controls to protect it.
10. Your rights
You may ask us to:
- Show you the personal data we hold about you.
- Correct it.
- Delete it.
- Restrict how we use it.
- Stop using it, where you object to our use of it.
- Give you a copy to take to another organisation.
Where we rely on your consent, you may withdraw it at any time.
To exercise any of these rights, email hello@routezero.com. We reply within one month.
11. Complaints
If you are unhappy with how we handle your personal data, please contact us first so that we can put it right.
You may also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint.
12. Changes to this policy
We update this policy when our use of personal data changes. The effective date at the top shows when it last changed.