Privacy Notice

1. Who is responsible for your data

ROS Consultancy Ltd is the data controller for the personal data we process. We are responsible for deciding how and why your data is used.

2. What personal data we collect

We may collect the following categories of personal data:

• Identity and contact data — such as your name, email address, and any account credentials you create.
• Account and usage data — including your reliability history, commitments, preparation checklists, journey inputs, and preferences.
• Device and technical data — such as IP address, browser type, device identifiers, timezone, and operating system.
• Communication data — messages, feedback, or support requests you send to us.

3. How we use your data

We use your personal data for the following purposes:

• to create and manage your account;
• to provide the Punctuality Planner™ and Reliability System™ features;
• to send smart departure alerts and reminders;
• to maintain security, prevent fraud, and investigate misuse;
• to improve the service and understand how users interact with it;
• to respond to support requests and communicate with you;
• to send marketing messages, where you have consented to receive them.

4. Legal basis for processing

We rely on the following legal bases for processing personal data:

• Performance of a contract — to provide the service and fulfil your subscription.
• Legitimate interests — to improve the service, keep it secure, and prevent fraud.
• Consent — for optional marketing communications or non-essential cookies.
• Legal obligation — to comply with applicable laws, such as tax or regulatory requirements.

5. Who we share data with

We do not sell your personal data. We may share it with the following categories of recipients:

• Service providers and subprocessors — for hosting, analytics, database services, and customer support tooling.
• Paddle — our Merchant of Record, which processes payments, subscriptions, invoicing, tax compliance, and billing-related enquiries on our behalf.
• Professional advisers — such as legal and accounting professionals, where necessary.
• Authorities — where required by law, regulation, or court order.

6. International transfers

Some of our service providers operate outside the United Kingdom and the European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or an adequacy decision, to protect your data in line with UK and EU data protection laws.

7. Data retention

We keep your personal data only for as long as necessary. Account data is retained while your account is active. If you delete your account or close your subscription, we will delete or anonymise your data within a reasonable period, unless we are required to keep it for legal, tax, or regulatory reasons.

8. Your rights

Under UK and EU data protection laws, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data in certain circumstances;
• restrict or object to processing in certain circumstances;
• request portability of your data;
• withdraw consent at any time, where processing is based on consent;
• complain to the supervisory authority in your country.

We will respond to requests within one month. To exercise your rights, please contact us using the details below.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and secure hosting. No system is completely secure, but we take reasonable steps to reduce risk.

10. Cookies and similar technologies

We use essential cookies to keep the service running and to remember your preferences, such as your chosen timezone on the planner. We may use analytics cookies to understand how the service is used. Where required by law, we will obtain your consent before placing non-essential cookies. You can manage your cookie preferences through your browser settings.

11. Children

AlwaysOnTime™ is not directed at children under 13. If we learn that we have collected personal data from a child under 13 without parental consent, we will delete that information as soon as possible.

12. Changes to this notice

We may update this Privacy Notice from time to time. Any changes will be posted on this page with a revised date. Please review it periodically.

13. Contact us

If you have any questions about this Privacy Notice or how we handle your data, please contact ROS Consultancy Ltd through the support channels on the website.