Privacy Policy

Who we are

Safe Freight Program (SFP) operates a verification platform for the Australian heavy freight industry, and two email newsletters. This policy covers both: Part A is the platform; Part B is the newsletters. We handle personal information in line with the Australian Privacy Principles. Contact: privacy@safefreightprogram.com.

PART A — THE PLATFORM

What we hold and where it comes from

A driver record contains: your name, your licence state, and your association history with carriers (which carrier, from when, its status). Your carrier creates the record and supplies these details — we require carriers to warrant they have the authority to do so and to give you notice. If your carrier provides your mobile number, we use it for exactly two things: sending you an invitation to claim your record, and verifying you hold that number when you claim. We never use a phone number to look anyone up, and we never confirm or deny to anyone whether a number is known to us. Once you claim your record, information you add comes from you.

Records we create

When you claim your record we keep a consent register: which version of each document you saw and agreed to, when, and the IP address and browser details of the action — this is the evidence of your choices. All significant actions on the platform are also written to an audit log.

Photos

We do not currently collect photographs. If photo support is added, photos will be collected with your specific consent at that time and used only for a human being to visually compare you to your credential — never for automated face-matching. Automated matching would be a new purpose requiring your fresh, express consent.

Who sees what

Three tiers, strictly separated. Anyone (no login) can check a driver code and see only: that the code exists, its participation, and its standing — never your name. Authorised receivers (logged in) can additionally see your name, so they can verify the person at their gate. Your carrier sees the drivers in its own fleet. Every displayed verification states what was verified, when, and by what method.

Your controls

The record is yours to claim — a carrier can never confirm on your behalf, and confirmed status only ever comes from your own action. You can decline to claim (the record is then removed under the retention schedule below). After claiming, you can withdraw your visibility consent at any time: your record then shows to receivers exactly as if it did not exist. You can end a carrier association yourself.

How long we keep it

We keep personal information only as long as it is needed. Records of ended driver–carrier associations, and the audit entries that describe them, are kept for 7 years from the association's end and are then de-identified. A driver record that is never claimed is removed from all platform surfaces as soon as its last association ends and is de-identified within 30 days — and in every case within 24 months of its creation. Photographs are deleted, not de-identified, when a driver leaves the platform. We keep the minimum record needed to honour "don't contact me" requests for as long as we send messages, stored in a form that does not identify you. Backups age out within 35 days, and anything removed from the platform is removed again from any restored copy before it is ever used. Nothing is kept in identifiable form permanently.

Where it's stored

Our infrastructure providers (hosting, database, authentication, email delivery) are reputable international companies headquartered in the United States; data may be stored or replicated outside Australia. We choose providers with strong security practices and protect data in transit and at rest.

Access, correction, complaints

Ask us at privacy@safefreightprogram.com for access to or correction of your information. Complaints: contact us first; if unresolved, the Office of the Australian Information Commissioner — www.oaic.gov.au.

PART B — THE NEWSLETTERS (CoR Intel Weekly and Safe Freight Mate)

What we collect: your email address (to send the newsletter), and optionally your name, company, and role. We also collect standard usage data (opens, clicks) to understand what's useful. Who handles it: our email delivery provider (Resend) and website analytics services; we disclose information to government agencies only where the law requires. Your controls: every email carries unsubscribe and pause links that work immediately. Unsubscribing removes you from sends; your record is retained for audit, not for contact.