Privacy Policy

M50 Toll Solutions Ltd. ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our M50 eflow payment system and related services.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

Personal Information You Provide

When you register for an account or use our services, we collect personal information that you voluntarily provide to us, including but not limited to:

• Full name and contact details (email address, phone number, postal address)
• Vehicle registration numbers and vehicle details
• Payment information (credit/debit card details, bank account information)
• Account credentials (username, password)
• Billing and transaction history
• Communication preferences and correspondence with our customer support team

Automatically Collected Information

When you access our website or use our services, we automatically collect certain information about your device and usage patterns:

• Device information (IP address, browser type, operating system, device identifiers)
• Usage data (pages visited, time spent on pages, click patterns, access times)
• Location data (general geographic location based on IP address)
• Cookies and similar tracking technologies (see our Cookie Policy section below)
• Toll transaction data (date, time, location of M50 toll usage)

Information from Third Parties

We may receive information about you from third-party sources, including payment processors, vehicle registration databases, and fraud prevention services. This information helps us verify your identity, process payments securely, and maintain the integrity of our services.

How We Use Your Information

We use the information we collect for various purposes related to providing and improving our M50 toll payment services:

Service Provision and Account Management

• Creating and managing your eflow account
• Processing toll payments and maintaining transaction records
• Sending account statements, payment confirmations, and receipts
• Managing automatic top-up services and payment methods
• Verifying vehicle registration information
• Providing customer support and responding to your inquiries

Communications and Notifications

• Sending important service updates and account notifications
• Alerting you about low account balances or payment issues
• Providing information about toll charges and payment deadlines
• Sending administrative messages about changes to our services or policies
• Responding to your requests and communications

Security and Fraud Prevention

• Detecting and preventing fraudulent transactions and unauthorized access
• Monitoring for security threats and suspicious activities
• Verifying user identity and preventing account misuse
• Protecting the integrity of our payment systems
• Complying with legal obligations and regulatory requirements

Service Improvement and Analytics

• Analyzing usage patterns to improve our website and services
• Conducting research and development for new features
• Optimizing user experience and interface design
• Generating statistical reports and analytics (using anonymized data)
• Testing new technologies and service enhancements

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following circumstances:

Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processing and financial services providers
• Cloud hosting and data storage services
• Customer support and communication platforms
• Analytics and performance monitoring services
• Security and fraud prevention services

These service providers are contractually obligated to protect your information and use it only for the specific purposes we authorize.

Legal Requirements and Protection

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or regulatory requirements
• Enforce our Terms of Service and other agreements
• Protect our rights, property, or safety, or that of our users or the public
• Investigate and prevent fraud, security breaches, or illegal activities
• Respond to lawful requests from public authorities

Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you of any such change and provide you with choices regarding your information.

Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we continuously work to maintain and improve our security measures. If you become aware of any security vulnerability or breach, please contact us immediately atsupport@toll-m50-flow.com.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are based on:

• Active Accounts:Information is retained for the duration of your account relationship with us
• Transaction Records:Payment and toll transaction data is retained for seven years to comply with financial and tax regulations
• Closed Accounts:After account closure, we retain certain information for up to seven years for legal, regulatory, and audit purposes
• Marketing Communications:Contact information for marketing purposes is retained until you opt out or request deletion
• Legal Holds:Information subject to legal proceedings or investigations is retained until the matter is resolved

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention and disposal policies. Anonymized data may be retained indefinitely for statistical analysis and service improvement purposes.

Your Rights and Choices

Under applicable data protection laws, including the General Data Protection Regulation (GDPR), you have certain rights regarding your personal information:

Access and Portability

You have the right to request access to the personal information we hold about you and receive a copy in a structured, commonly used, and machine-readable format. You can also request that we transfer your data directly to another service provider where technically feasible.

Correction and Update

You can update your account information at any time by logging into your eflow account. If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to your request within 30 days.

Deletion and Erasure

You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, or if you withdraw consent. Please note that we may need to retain certain information to comply with legal obligations or for legitimate business purposes.

Restriction and Objection

You have the right to request restriction of processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests. You can also object to processing of your information for direct marketing purposes at any time.

Withdraw Consent

Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling cookies may affect the functionality of our website and limit your ability to use certain features.

Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

When you use third-party services integrated with our platform (such as payment processors or social media platforms), those third parties may collect information about you in accordance with their own privacy policies. We recommend reviewing their policies before providing any personal information.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information from our servers.

International Data Transfers

Your personal information may be transferred to and processed in countries other than Ireland, including countries that may not have the same data protection laws as your jurisdiction. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for transfers within our corporate group
• Certification schemes and codes of conduct

By using our services, you consent to the transfer of your information to countries outside of your residence, including Ireland and other European Economic Area countries, in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will notify you by:

• Posting a prominent notice on our website
• Sending you an email notification to your registered email address
• Displaying a notification when you log into your account
• Updating the "Last Updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes to this policy constitutes your acceptance of the updated terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:

We are committed to resolving any privacy concerns you may have and will respond to your inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission in Ireland or your local supervisory authority.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection strategy and ensure compliance with applicable data protection laws. You can contact our DPO directly regarding any data protection matters: