Privacy & Cookies
We’re Wayve Technologies Ltd (UK division), Wayve Technologies Inc (US division), Wayve Technologies Canada Ltd (Canada division), Wayve Technologies (Expansion) Limited (Germany division) and Wayve Technologies Japan GK (Japan division) (collectively, “we”). Our registration details with the UK’s regulator, the ICO, can be found here. The information on this page constitutes Wayve’s Privacy Notice. This Privacy Notice describes how we collect, use, disclose, store, and otherwise process your personal data when you use our website located at www.wayve.ai or other successor URLs or related websites which point to this Privacy Notice, or when you interact with us through other means as set forth in this Privacy Notice. This Privacy Notice is governed by the Terms of Use.
PLEASE READ THIS PRIVACY NOTICE CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR PERSONAL DATA. IF YOU DO NOT AGREE TO THIS PRIVACY NOTICE, PLEASE DO NOT ACCESS THE WEBSITE, ENGAGE US FOR OUR SERVICES, OR OTHERWISE USE OUR SERVICES.
At Wayve, we are building artificial intelligence capable of driving in any environment, anywhere in the world. Our self-driving technology is data-driven at every layer and constantly learns and improves. Our AI software learns from observing human driving and reinforcement learning, allowing us to learn efficiently at scale. As part of this process, we record data from our vehicle sensors and want to be transparent about how and why we do this.
We want to be as clear as possible when it comes to your data and what we do with it. Personal data is yours, and you have a suite of rights you can exercise. Please refer to the section: “What your rights are” for more information.
How we use your data depends on how we’re interacting. Please refer to the relevant section below to get into the detail.
Miscellaneous terms
Third-Party Sites. Please note that our website may contain links to third-party websites/digital platforms that are provided for your convenience. We are only responsible for the privacy practices and security of our own websites and other products. We recommend that you check the privacy and security policies and procedures of any other website or service that you visit.
Children’s Data. The website and our services are intended for general audiences and not for children under the age of 18. If we become aware that we have inadvertently collected or received personal data from children under the age of 18 without valid parental consent, we will take reasonable steps to delete it as soon as possible. We do not knowingly process data of children under the age of 18 without parental consent.
Changes to this Privacy Notice. We reserve the right to amend this Privacy Notice at any time to reflect changes in the law, our data collection and use practices, our services, advances in technology, and for other purposes. We will make the revised Privacy Notice accessible through the website, so you should review the Privacy Notice periodically. The “Last Updated” date below will indicate when it was last updated. If we make a material change to the Privacy Notice, you will be provided with appropriate notice in accordance with legal requirements. By continuing to access the website and services, you are confirming you have read and understand the latest version of this Privacy Notice.
If you have questions about how we use your personal data, including any requests to exercise your legal rights, please contact us at [email protected].
Last updated: May 2025
I’m a visitor to Wayve’s website
When you contact us
- We collect: Identifiers such as your name, social media handle, contact details and query if you contact us either by phone, email, via our ‘contact us’ page or via social media, and commercial information such as records of products purchased or considered.
- Our purpose of use and lawful basis. Under data protection law, we need to tell you the lawful basis we use to process your personal data in this way. Our lawful basis is our legitimate interest in properly responding to your query.
When you receive news updates
- We collect: Identifiers such as your name and email address.
- Our purpose of use and lawful basis: When we send you marketing communications to promote Wayve, we only reach out to business professionals and rely on our legitimate interests to promote our business.
You can unsubscribe from our updates at any time by responding to any email you receive from us to tell us you wish to unsubscribe or by emailing [email protected].
When you consent to our use of cookies (where required)
- We collect: Technical or electronic network activity information about you and how you use our website. We use this information to provide, improve, and secure our website and understand how people use it. More detail on the information we collect and how we do this is available under “What cookies we use”.
- Our purpose of use and lawful basis: Where required by law, we rely on your consent to place non-essential cookies for the purposes above. See “What cookies we use” to find out more.
- LinkedIn Insight Tag: We use the LinkedIn Insight Tag on our website to better understand the actions of visitors who arrive via LinkedIn advertisements. The LinkedIn Insight Tag enables the collection of data regarding LinkedIn members’ visits to our website, including URL, referrer, IP address, device and browser characteristics, and timestamps. LinkedIn does not share personally identifiable information with us; instead, the data is used to generate reports on website audience and ad performance. You can learn more about how LinkedIn handles personal data by visiting their Privacy Policy here.
Information for Residents of California and Oregon
If you are a California or Oregon resident, we must also provide you with the following information:
- Some of the data we collect (and may have collected in the past 12 months) includes:
- Identifiers such as name, email address, and contact details
- Commercial information such as records of products purchased or considered
- Electronic network activity information about you and how you use our website
- Please see below for additional information for California and Oregon residents, including the categories of third parties to whom we disclose your personal data and the time period we retain your personal data.
I’ve seen a Wayve vehicle in public
Where our fleet of vehicles records data from our sensors
- We collect (and may have collected in the past 12 months): Images from cameras and other sensors which means we may collect information which may disclose classifications protected under the law of some jurisdictions (such as age, race, or gender).
- Our purpose of use and lawful basis: Under data protection law, we need to tell you our purpose of use and the lawful basis we use to process your personal data in this way. Our purpose of use and lawful basis is our legitimate interest to build and develop our AI to ensure it is capable of driving in any environment. If you are a resident of Canada, we rely on an opt-out consent basis. To opt-out please contact us at [email protected]. All of our vehicles are marked that on-board CCTV is installed and the vehicles contain other signage identifying us and providing instructions how to learn about us.
Information for Residents of California or Oregon
If you are a California or Oregon resident, we must also provide you with the following information:
- Some of the data we collect and may have collected in the past 12 months) includes:
- Audio, electronic, visual, thermal, or similar information
- Characteristics of protected classifications under state or federal law, such as age, race, and gender
- Please see below for additional information for California and Oregon residents, including the categories of third parties to whom we disclose your personal data and the time period we retain your personal data.
I’ve attended a Wayve event
When you attend one of our events
- We collect: Identifiers such as your name, address, email address and phone number. This includes when you join one of our events, a third-party event we also attend or a virtual event online.
- Our purpose of use and lawful basis: We collect this information because it is in our legitimate interest to know who’s attending our events in order to have a more targeted promotion of our business.
Information for Residents of California and Oregon
If you are a California or Oregon resident, we must also provide you with the following information:
- Some of the data we collect (and may have collected in the past 12 months) includes:
- Identifiers such as name, email address, and contact details
- Audio, electronic, visual, thermal, or similar information
- Characteristics of protected classifications under state or federal law, such as age, race, and gender
- Please see below for additional information for California and Oregon residents, including the categories of third parties to whom we disclose your personal data and the time period we retain your personal data.
Who we disclose your personal data to
We may disclose your personal data with the following categories of third parties:
Business partners and service providers
Business partners (including third-party fleet data capture partners), machine learning partners (including those who assist in labelling data), joint developers, service providers such as suppliers and sub-contractors for the performance of the contract we enter into with them or you. This will usually relate to the data we collect whilst testing our autonomous vehicles and is purely for the purpose of improving our self-driving technology.
Promotional events and marketing organisations
We do not sell data for marketing purposes but may disclose your data to an event organiser, including where we run workshops with co-presenters. We will always tell you before (usually on the event registration form), and you will be given a chance to opt out before we do this.
Regulators/Authorities/Enforcement Agencies
Regulators/Authorities/Enforcement Agencies if we are under a duty to disclose your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of our clients or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.
Prospective buyers of our business
Prospective buyers of our business under our legitimate interest to ensure our business can be continued by the buyer.
Where we store your personal data
We store your data at either data centres and cloud storage provider based in the United Kingdom, United States and the EU. This means that we may process, store, and transfer your personal information in and to a foreign country, with different privacy laws that may or may not be as comprehensive as in your resident jurisdiction. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of that country may be able to obtain access to your personal information through the laws of the foreign country.
Whenever we transfer your personal information outside the UK and the EU, we ensure it receives additional protection in the form of an adequacy decision as defined in Article 45 GDPR, on the basis of appropriate safeguards as defined in Article 46 GDPR, or to the extent permitted by other laws. Similarly, whenever we transfer your personal information outside of Canada, we ensure that such transfer and storage is done in accordance with applicable privacy laws.
International data transfers to third parties in the US are based on the EU Standard Contractual Clauses (SCCs) of the European Commission according to Article 46 GDPR (accessible via the website of the European Commission) or, where applicable, on a valid certification under the Data Privacy Framework.
How long we keep and how we protect your personal data
We will only retain your personal information for as long as we need it unless we are required to keep it longer to comply with our legal, accounting or regulatory requirements. Images captured from the road are processed and stored as long as required for the aforementioned purpose of training, developing and operating our artificial intelligence models in a safe and effective way, documenting our development process and complying with our regulatory requirements.
In some circumstances, we may carefully anonymise your personal data so that it can no longer be associated with you, and we may use this anonymised information indefinitely without notifying you. We use this anonymised information to analyse our programmes and support other similar programmes worldwide.
We take technical and organizational security measures to protect your personal data from loss, misuse, and unauthorised access, disclosure, alteration, or destruction. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our services, you are responsible for keeping this password confidential. Do not share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we use measures to protect your personal data, we cannot guarantee the security of your information transmitted to our website or other services. Any transmission of personal data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures.
Your rights under data protection law
You may have various rights under applicable data protection law, including the right to:
- access your personal data;
- correct incomplete or inaccurate personal data we hold about you;
- erase the personal data we hold about you;
- restrict our handling of your personal data;
- transfer your personal data to a third party;
- object to how we are using your personal data; and
- withdraw your consent to us handling your personal data.
Please keep in mind that data protection law is complicated, and these rights won’t always be available to you all of the time.
You also may have the right to lodge a complaint with us or the ICO, the supervisory authority for data protection issues in the UK. If you are based in the EU, you can find your relevant supervisory authority here.
You may have additional rights if you are a resident of California or Oregon. Please refer to the below section “California and Oregon Privacy Notice”.
If you want to exercise any of these rights or have any questions, please contact us at [email protected]. Please note, to the extent that your request relates to personal data which may have been collected in the recorded footage of one of our vehicles, we may need to verify your identity in order to process your request. You may therefore be asked to provide us with the date, time and location that you believe you may have been recorded by one of our vehicles. This is the minimum information required to enable us to identify any potentially relevant footage.
California and Oregon Privacy Notice
In addition to the information provided elsewhere in this Privacy Notice, California and Oregon law provide for additional rights for California and Oregon-based consumers, employees, and job applicants. This section provides information about those rights.
Know/Access: You may have the right to request confirmation of whether we have processed your personal data, the categories of sources of your personal data, as well as a description of the categories and specific pieces of personal data about you that we have collected or processed, the categories of personal data about you that we may disclose for a business purpose to third parties, along with, depending on your state of residence, a description of the categories or a specific list of third parties that receive or have received your personal data or any personal data. Some of these details may be found in other portions of this Privacy Notice. You have the right to obtain a copy of your personal data that we have processed or are processing in a portable format.
Non-Discrimination/Non-Retaliation: Wayve does not discriminate against individuals for exercising their California or Oregon privacy rights.
Opt out of “Sale” or “Sharing” of Data: Wayve does not “sell” or “share” (as those terms are specifically defined in applicable California laws) your personal data, nor does Wayve process for (i) sale, (ii) targeted advertising or (iii) profiling you in furtherance of decisions that produce legal effects or effects of similar significance.
If you would like to contact us about exercising the rights described in this California and Oregon notice, you may email your request to us at [email protected].
Only you, or someone legally authorised to act on your behalf, may make a verifiable consumer request related to your personal data. You may also make a verifiable consumer request on behalf of your minor child. Under some laws, you may only make a verifiable consumer request for access twice within a 12-month period. The verifiable consumer request must (i) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an authorised representative, and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We will respond to a verifiable consumer request within the time periods permitted under applicable laws. If we require more time, we will inform you of the reason and extension period in writing, in accordance with applicable law.
We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal data provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. We may not be able to provide all of the information requested depending on our legal obligations and rights.
If you wish to use an authorised agent to submit a request, we may need to verify the authorised agent by confirming that the original requestor has given the agent written permission. We may deny a request from an agent that does not provide adequate proof that they have authority granted by the consumer to act on the consumer’s behalf.
We may decline to fulfil a request regarding your personal data in whole or in part in accordance with our rights and obligations under applicable law. For example, we may deny your correction or deletion request if retaining the personal data in its current state is necessary for us or our service providers under any permitted exceptions under applicable law, to complete a transaction, provide goods or services you requested, perform our contract(s) with you, or as otherwise permitted under applicable law. If we decline to fulfil a request regarding your personal data in whole or in part, we will explain why within the timeline provided for by law.
Additionally, you may have the right to appeal our response to your request. Information about your appeal rights and instructions will be included in our response to your request.
The data controller is: Wayve.
What cookies we use
A cookie is a small file of letters and numbers that we store on your browser or in your device’s storage.
Essential cookies
We use essential cookies to distinguish you from other users of our website. This helps us provide you with a good experience when you use our website. We are permitted to place these cookies without your prior consent, but you can block all cookies, including essential cookies, by changing your browser settings. Please note if you block all cookies, you might not be able to see or access all parts of our website.
Non-essential cookies
The other types of cookies we use are non-essential cookies. We use these to help us make improvements to our products and services.
We have listed below all non-essential cookies we might use and that we might allow our partners to use. We only use (and store) non-essential cookies if you provide your consent.
We currently use the following non-essential cookies:
- _UTMA – This randomly generated number is used to determine unique visitors to our site. Expires after 2 years.
- _UTMB – This randomly generated number works with _utmc to calculate the average length of time users spend on our site. Expires after ss30 minutes.
- _UTMC – This randomly generated number works with _utmb to calculate when you close your browser. Expires when you close your browser.
- _UTMZ – This is a randomly generated number and information about how the site was reached (e.g. direct or via a link, organic search or paid search). Expires after 6 months.
You can read the full details of Google’s privacy policy on their website.
Some web browsers may allow you to enable a do-not-track feature that alerts the websites you visit that you do not want your online activities to be tracked. Our websites and other services may not recognise or react in response to do-not-track signals. At present, no generally accepted standards exist on how companies must respond to do-not-track signals. In the event a final standard is established, we will assess and provide an appropriate response to these signals.
