Privacy Policy

El Jefe Logistics is the controller of personal information handled through this website and its connected community services. We operate as a UK-based virtual trucking community.

Privacy questions and rights requests can be raised through the public privacy request form, the private member Privacy Centre, or the CEO and authorised management team in the official Discord server.

• Account and application data: name, email address, password hash, application status and account role.
• Gaming identities and preferences: Steam ID, Trucky username, starting location, requested truck, truck model and trailer.
• Discord verification: Discord user ID, username, display name, server membership, join date and role state when you choose to link your account.
• Driver and operational records: deliveries, routes, distance, cargo, assignments, attendance, convoy entries, performance, reputation, awards, progression, fleet allocations and career records.
• Safety and evidence: incident reports, vehicle and cargo damage, notes, uploaded screenshots and tracker-submitted incident information.
• Member content: profile photograph, documents and other material you choose or are authorised to upload.
• Virtual economy records: fictional salary, transactions, lifestyle assets, expenses and marketplace activity.
• Security and audit data: sign-in and activity timestamps, administrative changes, system events, browser/device information and network logs that may include an IP address.

• Contract: to review applications, provide membership features, authenticate accounts and deliver requested VTC services.
• Legitimate interests: to organise dispatch, operate the fleet, maintain fair records, recognise achievements, moderate the community, secure the service, prevent misuse and investigate incidents.
• Consent: where you choose to link Discord, provide an optional profile photograph or authorise a use that requires consent. You may withdraw consent, although prior lawful use remains valid.
• Legal obligation: where information must be processed or disclosed to comply with applicable law.

We do not sell personal information and do not use it for third-party behavioural advertising.

Access within El Jefe Logistics is limited by role and operational need. For example, authorised management may review applications and incidents, while ordinary drivers cannot access another driver's private profile records.

Information may also be processed by hosting, database, backup and technical service providers acting for us. Discord receives and returns the limited account and server-membership information needed when you link Discord or use bot features. We may disclose information where required by law or necessary to protect users, the community or the service.

Some third-party services, particularly Discord, may process information outside the United Kingdom. Where UK data-protection law applies, we rely on the provider's recognised transfer mechanism, adequacy arrangements or contractual safeguards as appropriate.

The website currently uses only essential first-party cookies:

• jefecore_session: a secure, HTTP-only authentication cookie refreshed during activity and expired after five minutes of inactivity.
• jefecore_discord_oauth_state: a secure, HTTP-only anti-forgery cookie used during Discord linking and expired after ten minutes.

These cookies are necessary to provide account security and requested sign-in/linking functions. We do not currently set analytics or advertising cookies. If that changes, this notice and any required consent controls will be updated first.

We keep information only for as long as reasonably necessary for membership, operations, security, dispute handling and legal obligations. Retention depends on the record type, whether your account remains active, whether an incident or dispute is open, and whether preserving an audit trail is necessary.

Account closure or departure will normally remove active access. Some limited audit, incident, backup or integrity records may remain until their operational or legal purpose expires. Backups are protected and expire through the normal backup cycle.

We use password hashing, signed secure cookies, role-based access, protected uploads, audit records, backups, release checks and encrypted HTTPS connections. No online service can guarantee absolute security, so members should use a unique password and report suspected compromise promptly.

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict personal information, object to certain processing, receive portable data and withdraw consent. Some rights are not absolute.

Raise a request through the CEO or authorised management team. We may need to verify your identity before acting. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

The platform may calculate recommendations, progress, rankings or alerts from operational records, but membership and disciplinary decisions require authorised human management. We do not make solely automated decisions with legal or similarly significant effects.

We may update this policy as services or legal requirements change. The effective date will be updated, and material changes will be communicated where reasonably practical.