Privacy Policy
Last updated: May 2026
1. Who We Are
FillitUp.uk is operated by Glow New Media Ltd, a company registered in England and Wales. We are the data controller for the personal data described in this policy.
Registered address: S08 The Innovation Centre, Sci-Tech Daresbury, Keckwick Lane, Daresbury, WA4 4FS
Company number: 5995928
Contact us at info@glow-internet.com.
2. What This Policy Covers
This policy applies to the FillitUp.uk website and mobile app (iOS and Android). It explains what personal data we collect when you use the service, why we collect it, how long we keep it, who we share it with, and your rights under UK GDPR.
3. Personal Data We Collect
We do not require registration or login. We do not use advertising cookies or third-party tracking scripts. We do not build user profiles. We do not use personal data for automated decision-making or profiling. The personal data we collect is limited to what is necessary to operate the service:
- IP address: recorded automatically with each search request and included in standard server access logs.
- Search metadata: the type of search (nearby, route, LPG, or HVO), the postcode or GPS coordinates used, the fuel type selected, and the number of results returned. Recorded alongside your IP address in our search log.
-
GPS coordinates: if you choose to use the “Use my location” feature, your browser or device sends your current coordinates to our server solely to perform a one-time nearest-station lookup requested by you.
We do not continuously track your location, monitor your movements in the background, or collect location data when the app or website is not actively being used by you.
Using the “Use my location” feature is entirely optional. You may instead search manually using a postcode, town, or address.
Location access is controlled by your browser or mobile operating system permissions and can be denied or revoked by you at any time. - Route data: if you perform a route search, the origin and destination you provide are used solely to obtain a route polyline via the Google Directions API for that requested journey. We do not monitor or track your live journey or movement. The resulting polyline may be cached temporarily in our database to avoid repeated identical API calls.
- Vehicle registration number (mobile app only): if you use the “My Car” feature, your vehicle registration number may be stored locally on your device for your convenience. When you request a vehicle lookup, the registration number is transmitted to our server solely to forward it to the DVLA Vehicle Enquiry Service API for the requested lookup. It is processed transiently for the duration of the request and is not stored, logged, or retained on our servers.
4. How and Why We Use Your Data
The table below sets out each processing activity, the data involved, the purpose, and the lawful basis under UK GDPR Article 6.
| Activity | Data used | Purpose | Lawful basis |
|---|---|---|---|
| Search logging (application level) | IP address, search type, coordinates or postcode, fuel type, result count | Rate limiting and abuse prevention; caching repeat searches to reduce third-party API costs; daily usage statistics are shown as aggregated statistics that do not identify individuals | Legitimate interests (Article 6(1)(f)) |
| Route caching | Origin and destination coordinates, route polyline | Avoiding repeated calls to the Google Directions API for identical routes on a rolling 48-hour basis | Legitimate interests (Article 6(1)(f)) |
| Server access logs (infrastructure level) | IP address, timestamp, URL path, browser user-agent | Security monitoring and fault diagnosis | Legitimate interests (Article 6(1)(f)) |
| Location-based lookup | GPS coordinates | Returning nearby fuel stations or charge points in response to a location search explicitly initiated by you. No continuous or background location tracking takes place. | Legitimate interests (Article 6(1)(f)) |
| Vehicle MOT/tax lookup (mobile app) | Vehicle registration number | Forwarding to the DVLA API to retrieve MOT and road tax dates; registration is not stored by us | Legitimate interests (Article 6(1)(f)) |
We have considered the legitimate interests balancing test for the activities above and are satisfied that our interests are not overridden by your rights and freedoms, given the minimal nature of the data involved, the absence of any marketing or profiling, and the necessity of each activity to keep the service operational and free of charge.
5. How Long We Keep Your Data
Vehicle registration number: transmitted to our server and forwarded to the DVLA API for the duration of the request. It is not stored, logged, or retained by us.
The following data is retained for a maximum of 7 days, then automatically deleted:
- Search log
- Server access logs
- GPS coordinates and addresses submitted as part of individual user-initiated searches
Route cache is retained for a maximum of 48 hours.
6. Security of Your Data
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Access is restricted to authorised personnel only and is limited to what is necessary to operate and maintain the service.
7. Third-Party Processors and Data Sharing
We do not sell personal data. We do not share it with advertisers or data brokers. The following third-party services receive data as part of normal service operation:
- Google Geocoding API: your postcode or place name is sent to Google to obtain GPS coordinates. Google’s Privacy Policy applies.
- Google Directions API: for new route searches not already cached, your origin and destination coordinates are sent to Google to obtain the route polyline. Google’s Privacy Policy applies.
- DVLA Vehicle Enquiry Service: vehicle registration numbers entered in the mobile app’s My Car feature are forwarded to the DVLA API. We do not retain them. The DVLA’s Privacy Notice applies to their processing.
- OpenFreeMap / OpenStreetMap: map tiles are served by OpenFreeMap using OpenStreetMap data. Your browser connects to OpenFreeMap’s tile servers; no personal data beyond a standard browser connection (IP address, user-agent) is involved.
- OpenChargeMap: EV charging point data is sourced from OpenChargeMap and cached in our database. Data is licensed under CC BY 4.0.
- IONOS: website and application hosting
8. International Data Transfers
Google LLC is headquartered in the United States. When your search query is geocoded or your route coordinates are sent to the Google Directions API, that data is transferred to and processed in the United States. Google relies on appropriate safeguards including Standard Contractual Clauses to legitimise these transfers under UK GDPR. Google’s Privacy Policy provides further detail.
All other processing (search logs, server logs, route cache, and DVLA lookups) takes place on servers located in the United Kingdom.
9. Cookies and Tracking
We do not use cookies for advertising or cross-site tracking. We do not use Google Analytics, Meta Pixel, or any other third-party analytics or advertising scripts. Navigation (“Go”) links open Google Maps in a new tab; Google’s own cookies and tracking apply from that point onwards. OpenFreeMap’s tile servers may log standard access information (IP address, user-agent) when your browser loads map imagery, as is standard for any web server.
We do not use background location services, continuous GPS monitoring, or location tracking technologies. Your location is only used at the time you request a nearby search or route lookup.
10. Your Rights
Under UK GDPR you have the right to request access to personal data we hold about you, to ask us to delete it, and to object to how we use it. Because the service does not use user accounts or collect directly identifying information, we may not always be able to identify which technical records relate to a particular individual.
To exercise any of these rights, contact us at info@glow-internet.com.
11. How to Complain
If you are unhappy with how we have handled your personal data, please contact us first at info@glow-internet.com and we will do our best to resolve the matter promptly.
You also have the right to lodge a complaint with the UK’s supervisory authority:
Information Commissioner’s Office (ICO)
ico.org.uk
Helpline: 0303 123 1113
12. Changes to This Policy
We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. We encourage you to review this policy periodically.