RouteNest Driver App & Platform Privacy Policy

Last Updated: 26 July 2026

1. Who We Are

RouteNest is a delivery management platform for UK independent pharmacies, operated by Idera Health. This policy covers the RouteNest Driver mobile application and the RouteNest dashboard platform (routenest.co.uk).

Contact: privacy@routenest.co.uk

2. What Data We Collect

RouteNest Driver App:

  • Email address and login credentials
  • Precise GPS location (continuously while on an active delivery route)
  • Proof of delivery photographs
  • Recipient signatures captured at point of delivery
  • Device information

RouteNest Dashboard (pharmacy staff use):

  • Patient name, address, phone number, email address, date of birth
  • Prescription delivery information
  • Payment and subscription details

3. Why We Collect It (Lawful Basis under UK GDPR)

  • GPS location: Legitimate interests — route optimisation and live delivery tracking for pharmacy oversight
  • Patient data: Contract performance — necessary to fulfil pharmacy delivery services
  • Proof of delivery and signatures: Legitimate interests — delivery confirmation and dispute resolution
  • Login data: Contract performance — necessary to provide access to the platform

4. Who We Share Data With

We use the following third-party services to operate RouteNest:

  • Supabase — database hosting and file storage (EU/US)
  • Google Maps — route optimisation and navigation
  • Twilio — SMS delivery notifications to patients
  • Stripe — payment processing
  • Vercel — platform hosting
  • Expo/EAS — mobile app distribution

We do not sell your data to third parties.

5. Data Retention

We retain data for the minimum period necessary:

  • Delivery records: 2 years
  • Proof of delivery photos and signatures: 1 year
  • GPS location data: 30 days
  • Driver session logs: 90 days
  • Payment records: 6 years (HMRC legal requirement)
  • Patient personal data: 1 year after last delivery, or upon deletion request

6. Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, contact: privacy@routenest.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Location Data

The RouteNest Driver app collects your precise GPS location continuously while you have an active delivery route. This data is used solely for route optimisation and to provide live tracking to the pharmacy. You can disable location access in your device settings, though this will prevent the app from functioning correctly. Location data is deleted after 30 days.

8. Cookies

The RouteNest dashboard uses session cookies only, necessary for authentication. No tracking or advertising cookies are used.

9. Data Security

All data is transmitted over encrypted HTTPS connections. Database access is restricted by role-level security policies. We use industry-standard security measures to protect your personal data.

10. Changes to This Policy

We may update this policy from time to time. We will update the Last Updated date at the top of this page when we do. Continued use of RouteNest after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:

Email: privacy@routenest.co.uk

Idera Health

12. Supervisory Authority

RouteNest is subject to UK data protection law. Our supervisory authority is the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113