1. About this policy
This policy explains how Motonology Ltd, trading as Track My Asset (“we”, “us”), which provides Fleet Tracker — the website https://www.trackmyasset.co.uk and the application https://app.trackmyasset.co.uk — collects and uses personal data, and the rights you have.
Fleet Tracker is a web application that shows businesses the location and status of their own vehicles, using data from the vehicle manufacturers’ built-in connected services. It is currently a restricted pilot: access is by invitation only, and applications for new accounts are closed.
2. Who we are and our role
Motonology Ltd, trading as Track My Asset, is a company registered in England and Wales under company number 12600399. Our business address is Unit 11, Neath Vale Supplier Park, Resolven, Neath, SA11 4SR. For privacy questions or requests, e-mail andy@motonology.co.uk.
- Accounts, sign-in, security records, business applications and this website: we decide how this data is used, so we are its controller.
- Vehicle data of our business customers’ vehicles: the customer (for example a vehicle dealer or rental business) decides which vehicles are tracked and why, records the lawful basis and confirms that drivers have been informed, in Fleet Tracker, before any data is requested. We process that data on the customer’s behalf, as its processor, under our agreement with the customer. If you drive a customer’s vehicle, please contact that business first; we will help it answer your request.
- During the pilot, the vehicles connected are our own, and we are the controller of their data.
3. The personal data we collect
Account data: your name, e-mail address, your role (Super Admin, Dealer Admin or Dealer User), the business you belong to and your account status. Sign-in is provided by Amazon Cognito (part of Amazon Web Services), which holds your e-mail address, your password (we never see it) and your authenticator-app registration for multi-factor sign-in.
Security and audit records: sign-ins and their outcome, and actions taken in Fleet Tracker (for example adding a vehicle, changing a setting or exporting location history), with the time, the user and a shortened network address — the first three parts of an IPv4 address (for example 203.0.113.0/24) or the first 48 bits of an IPv6 address. Session records keep you signed in.
Business application data, only if you apply for an account (applications are currently closed): the business’s trading and legal names, type of business, Companies House number, VAT number, website and address, and a contact name, e-mail address and telephone number, with a shortened network address.
Vehicle data, for each vehicle a customer adds: its vehicle identification number (VIN), registration number and make, and the customer’s record of the driver notice and lawful basis. Once access to the vehicle’s data has been approved (section 4), the data its manufacturer makes available, which may include:
- location (coordinates, heading, altitude and accuracy) and the time the vehicle recorded each value;
- mileage (odometer), ignition and engine status, speed and whether the vehicle is moving;
- door-lock status, fuel level or battery charge and charging status;
- warning lights, diagnostic messages, maintenance information and summaries of the last trip;
- driving-behaviour events, only where a manufacturer offers them.
What is available differs between manufacturers and models. Vehicle data is personal data when it can be linked to a person, such as the driver.
E-mail records: messages Fleet Tracker prepares (recipient, subject and delivery status). E-mail sending is currently switched off except for internal tests.
Technical logs: errors and operational events of the service, used for security and troubleshooting. Vehicle identifiers in logs are shortened.
4. How vehicle data reaches Fleet Tracker, and the authorisation needed
Fleet Tracker does not fit any device to a vehicle. It uses data from the vehicle manufacturer’s built-in connected services, delivered through High Mobility (High-Mobility GmbH, Berlin, Germany), an independent provider of connected-car data. Fleet Tracker is not affiliated with, endorsed by or a partner of High Mobility or any vehicle manufacturer.
- A vehicle is only connected after an administrator of the business that operates it has added it, confirmed that its drivers have been given a notice about the tracking, and recorded the lawful basis.
- Only then does Fleet Tracker ask High Mobility for access to that vehicle’s data, by its VIN and make. High Mobility and the manufacturer then decide whether to activate access. Some manufacturers require the vehicle’s owner or fleet operator to give consent in the manufacturer’s own app or portal.
- Fleet Tracker receives no data for a vehicle before access is approved, and only for vehicles approved for its account. Data received for any other vehicle is rejected and never shown to customers.
5. Why we use personal data, and our lawful bases
- To provide accounts and sign-in, and to keep Fleet Tracker secure (account data, security and audit records): performance of our contract with the customer business, and our legitimate interest in protecting the service and its users.
- To show customers the location and status of their vehicles, alerts, history and exports (vehicle data): on the customer’s behalf and instructions; the customer’s own lawful basis applies, recorded for each vehicle. For our own pilot vehicles: our legitimate interest in testing the service.
- To assess applications for an account: steps taken at the applicant’s request before entering into a contract, and our legitimate interest in checking who we work with.
- To meet legal obligations, for example keeping records or answering lawful requests from authorities: legal obligation.
We do not use personal data for advertising, we do not sell it, and we do not make decisions about people based solely on automated processing.
6. Who receives personal data
- Amazon Web Services (AWS), our hosting provider: the service, its database, backups and logs, sign-in (Amazon Cognito) and e-mail (Amazon SES) run in AWS’s London (eu-west-2) region.
- High Mobility: receives a vehicle’s VIN and make to check eligibility, request and end data access, and delivers the vehicle data.
- Vehicle manufacturers: receive the VIN through High Mobility to activate access, and generate the vehicle data under their own terms with the vehicle’s owner.
- The customer business and its authorised users, for that business’s own vehicles only. Each business can see only its own vehicles; this is enforced by the database.
- Our support staff, only to provide support: viewing a business’s fleet requires a time-limited support session (at most 60 minutes) that is recorded and shown to that business’s administrators.
- Professional advisers, and authorities where the law requires it.
7. Where data is stored, and international transfers
Fleet Tracker’s data is stored in the United Kingdom, in AWS’s London region. High Mobility is based in Germany; the UK recognises the European Economic Area as providing adequate protection for personal data. Vehicle manufacturers may be located outside the UK and the European Economic Area; their own privacy terms govern the data they generate. If we transfer personal data outside the UK ourselves, we will use a safeguard the UK GDPR recognises and update this policy.
8. How long we keep data
- Sessions end after 1 hour without activity, and at the latest after 12 hours.
- Technical logs are kept for 3 months.
- Database backups are kept for up to 35 days; the database can also be restored to any point in the last 14 days.
- Account data, vehicle data and audit records are currently kept until they are deleted: fixed retention periods have not been set yet and will be published here before Fleet Tracker opens to customers. Fleet Tracker shows up to 90 days of location history.
- You can ask us to delete data at any time (section 10); deleted data disappears from backups as they expire.
9. How we protect data
- Every connection uses HTTPS; the database and its backups are encrypted.
- Signing in needs a password and an authenticator app (multi-factor authentication). Sessions expire automatically.
- Each business can see only its own vehicles, enforced by the database itself; users have the least access their role needs.
- Important actions are recorded in an audit log, and backups are kept in a vault that prevents early deletion.
10. Your rights
Under UK data protection law you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to its use, to data portability, and — where we rely on consent — to withdraw your consent at any time.
To use these rights, e-mail andy@motonology.co.uk. We will reply within one month. If your request concerns a vehicle operated by one of our customers, we will pass it to that business and help it reply.
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, or telephone 0303 123 1113.
11. Disconnecting a vehicle and withdrawing access
- An administrator of the business that operates the vehicle can use “Stop tracking”. Fleet Tracker stops accepting the vehicle’s data at once and asks High Mobility to end access; the vehicle’s page shows when High Mobility confirms it has ended.
- Where a manufacturer asked for consent, it can also be withdrawn in the manufacturer’s app or portal; the vehicle’s data then stops arriving.
- Data already received is not deleted automatically when a vehicle is disconnected; it is kept as described in section 8 and can be deleted on request.
13. Children
Fleet Tracker is a service for businesses and is not intended for children.
14. Changes to this policy
We will update this policy when the service or the law changes, and show the date of the latest version below. We will tell our customers about significant changes before they take effect.
Effective from: 22 October 2026. Last updated: 22 October 2026.