Data protection policy
How Dashcam Helper collects, uses, and protects your personal data.
Who we are
Dashcam Helper helps cyclists and drivers prepare and submit dashcam evidence to UK police portal workflows. For the purposes of UK GDPR and the Data Protection Act 2018, the operator of dashcamhelper.com is the data controller. You can contact us via the contact form.
What data we collect
- Account details — email address, username, password hash, and admin role flag.
- Profile details — your name, contact details, and witness/statement preferences that you choose to save.
- Case data — dashcam clips you upload, derived metadata (registration plates, vehicle details, GPS time/location), incident notes, generated submission previews, and submission outcomes.
- Strava integration data — if you connect Strava, we store the OAuth tokens needed to fetch the GPX streams for the rides you choose to import.
- Operational data — server logs, processing job diagnostics, and anonymous Cloudflare Web Analytics (no cookies, no cross-site tracking).
Why we use it and our lawful basis
- Contract — to provide the dashcam case workflow you signed up for: storing your cases, generating submission previews, and emailing you account confirmations and password resets.
- Legitimate interests — keeping the service secure, diagnosing processing failures, and improving reliability via aggregated analytics.
- Consent — when you connect Strava or submit a case to a police portal, you are explicitly authorising us to retrieve or transmit data on your behalf.
Who we share data with
- Microsoft Azure — hosting (UK South), SQL database, and blob storage for your uploads and generated artifacts.
- Resend — transactional email delivery (account confirmation, password reset, contact form messages).
- Cloudflare — CDN/proxy and privacy-friendly Web Analytics.
- Strava — only when you authorise the integration and only the activities you select.
- DVLA / DVSA / MOT History API — to look up vehicle details from registration plates you have entered.
- Police force submission portals (Nextbase) — only when you explicitly submit a case.
We do not sell your data and we do not share it with advertisers.
How long we keep it
- Account and profile data are kept for as long as your account is active.
- Case data and uploaded media are kept until you delete the case or your account.
- Server logs and processing diagnostics are retained for up to 90 days for troubleshooting.
- Contact form messages are retained in our inbox for as long as needed to respond.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your account and associated case data.
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent for the Strava integration at any time.
- Lodge a complaint with the Information Commissioner's Office (ICO).
To exercise any of these rights, email aidan@dashcamhelper.com or use the contact form.
Security
Data is stored in encrypted form at rest in Microsoft Azure and transmitted over HTTPS. Passwords are stored as salted hashes. Access to production systems is restricted to the operator.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page will reflect the latest revision. Significant changes will be communicated via email to registered users where appropriate.