Privacy Notice

We use your personal data for the purposes set out below. The categories of data used and the lawful basis relied upon will depend on how you interact with us. Not all data categories will be used in every case.

Providing parcel delivery and related services
We use personal data to:
- collect, deliver and track parcels;
- manage delivery instructions and preferences; and
- send service updates, including delivery notifications.

Managing customer accounts and relationships
We use personal data to:
- register customers and manage accounts;
- administer payments, refunds and claims; and
- maintain accurate business records.
This processing is necessary for contract performance and, in some cases, for our legitimate interests in managing our business effectively.

Customer support, complaints and claims
We use personal data to:
- respond to enquiries and requests;
- investigate complaints, disputes and claims; and
- train staff and improve customer service quality.
This processing is carried out under contract, our legitimate interests, and, where required, to comply with legal obligations.

Website and app operation
We use personal data to:
- operate, maintain and secure our websites and apps;
- manage user accounts and preferences; and
- respond to online enquiries
This processing is based on our legitimate interests in operating and improving our digital services, and in some cases to support contract performance.

Improving our services
We use personal data to:
- analyse usage and technical data;
- improve website and app functionality and user experience; and
- develop and test new services.
This processing is carried out in our legitimate interests to improve our services and customer experience.

Profiling and analytics
We may analyse personal data, including delivery information, account activity, website and app usage, customer interactions and feedback, to better understand how our services are used and to improve customer experience.
This may involve identifying trends, patterns and preferences to help us:
- improve our services and delivery operations;
- develop new products and services;
- measure customer satisfaction;
- personalise communications where appropriate; and
- detect and prevent fraud or misuse of our services.
This activity does not involve solely automated decision-making that produces legal effects or similarly significant effects on individuals.
We rely on our legitimate interests to carry out these activities and take steps to ensure that our use of personal data is proportionate and respects individuals' rights.

Marketing and communications
We use personal data to:
- send service-related communications
- send marketing messages where permitted; and
- invite you to provide feedback, reviews or take part in surveys.
Where required, we rely on your consent for marketing communications. In other cases, we rely on our legitimate interests. You can opt out at any time.

Fraud prevention and security
We use personal data to:
- protect our services, systems and users;
- prevent, detect and investigate fraud or misuse; and
- maintain network and information security.
This processing is based on our legitimate interests, and in some cases to meet legal obligations.

Legal and regulatory compliance
We use personal data:
- comply with legal and regulatory requirements; and
- handle legal claims or regulatory enquiries.
This processing is necessary to meet our legal obligations.

Recruitment
We use personal data to:
- assess job applications and candidate suitability;
- communications with candidates; and
- manage recruitment processes and comply with employment-related requirements.
This processing is carried out under our legitimate interests, to take steps prior to entering into a contract, and where applicable to meet legal obligations. Where special category data (such as equal opportunities information) is used, this is processed with your consent.

Additional recruitment information
- Recruitment data is typically retained for up to 12 months, after which it is securely deleted or anonymised.
- Equal opportunities data is used only for statistical monitoring and is not used in decision-making.
- Automated screening tools may be used to support initial application review. However, these do not involve special category data and are used to ensure consistent and efficient processing.
- If you are successfully recruited, your data will be transferred to our HR systems and processed in accordance with our employee privacy notice.

Aggregated and anonymised data
We may anonymise and aggregate personal data so that it no longer identifies you. We use this information for purposes such as system testing, research, data analysis, service improvement, training and developing new products and services.

Children
Our services are not intended for children. We do not knowingly collect personal data relating to children, except where unavoidable to deliver parcels (for example, where a child is named as the recipient).

How we use your personal data

We use your personal data for the purposes set out below. The data used and lawful basis will depend on your interaction with us. Not all categories of data will be used in every case.

What we do	Data used	Why we do it	Lawful basis
Register you as a customer and create your account	Identify data, Contact data, Account and profile data	To set you up on our systems and manage your account	Performance of a contract
Deliver parcels and manage delivery instructions	Identity data, Contact data, Transaction data	To collect, transport and deliver parcels, and provide tracking updates	Performance of a contract
Send service communications (e.g. delivery updates)	Contact data, Account and profile data	To keep you informed about your parcel and our services	Legitimate interests
Provide customer service and support	Identity data, Contact data, Account and profile data, Communications data	To respond to enquiries, resolve issues and manage requests	Contract / Legitimate interests
Handle complaints, claims and disputes	Identity data, Contact data, Transaction data, Communications data	To investigate issues and resolve disputes effectively	Legitimate interests / Legal obligation
Process payments, refunds and claims	Financial data, Transaction data, identity data	To take payment and manage financial transactions	Performance of a contract
Prevent fraud and protect our services	Identity data, Contact data, Transaction data, Technical data	To detect and prevent fraud, misuse and security risks	Legitimate interests
Carry out age verification checks (where required)	Identity data (e.g. date of birth), Contact data	To ensure compliance with legal requirements	Legal obligation
Improve our website, app and services	Usage data, Technical data	To analyse usage and improve performance and user experience	Legitimate interests
Administer and protect our systems	Technical data, Usage data	To manage IT infrastructure and ensure security	Legitimate interests
Send marketing communications	Identity data, Contact data, Marketing and communications data	To keep you updated on services and offers (where permitted)	Consent / Legitimate interests
Conduct surveys and request feedback or reviews	Contact data, Usage data, Marketing and communications data	To improve our services and understand customer experience	Legitimate interests
Train staff and improve service quality	Communications data, Account and profile data (including call recordings)	To ensure consistent, high-quality service	Legitimate interests
Analyse customer behaviour and preferences	Usage data, Technical data, Account and profile data	To improve services, marketing and customer experience	Legitimate interests
Recover debts and monies owed	Identity data, Contact data, Financial data, Transaction data	To enforce our contractual rights	Legitimate interests

How we use your personal data - Recruitment activities

What we do	Data used	Why we do it	Lawful basis
Assess job applications and candidate suitability	Identity data, Contact data, Recruitment data (CVs, application responses), Communications data	To assess your suitability for employment and manage recruitment processes	Legitimate interests / Consent
Monitor equality and diversity in recruitment	Special category data (equal opportunities information)	To carry out statistical monitoring and ensure fair recruitment practices	Consent
Communicate with applicants	Identity data, Contact data, Communications data	To provide updates and manage your application	Legitimate interests / Consent
Maintain recruitment records	Recruitment data, Identity data, Contact data	To manage applications, maintain records and meet legal obligations	Legitimate interests / Legal obligation
Screen applications using automated tools	Recruitment data (application responses only - excluding special category data)	To efficiently manage high volumes of applications and ensure consistent screening	Legitimate interests
Contact candidates about future opportunities	Identity data, Contact data, Recruitment data	To notify you about similar roles where appropriate	Consent / Legitimate interests

We only use personal data where we have a valid lawful basis under data protection law. The lawful basis we rely on depends on the purpose for which we use your personal data, as outlined above.

We may rely on more than one lawful basis depending on the specific processing activity. Where this is the case, the applicable lawful basis will depend on the context and purpose for which your personal data is used.

If you would like further information about the lawful basis we rely on for a particular activity, you can contact us using the details set out at the end of this Privacy Notice.

Performance of a contract
We process personal data where this is necessary to perform a contract with you, or to take steps at your request before entering into a contract. This includes processing required to:
- collect, deliver and track parcels;
- manage delivery instructions and preferences;
- register and administer customer accounts;
- process payments, refunds and claims; and
- provide customer support related to contracted services.
If you do not provide personal data required for these purposes, we may not be able to provide our services.

Legitimate interests
We process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests include:
- operating, maintaining and improving our parcel delivery services;
- communicating with customers, recipients and members of the public about deliveries and services;
- improving our website, apps and customer experience;
- conducting data analysis, service monitoring and quality assurance;
- training staff and improving customer support;
- preventing fraud, misuse of services and security incidents; and
- managing complaints, disputes and claims.
Where we rely on legitimate interests, we carry out appropriate assessments to ensure that our use of personal data is proportionate and respects your privacy rights. You have the right to object to processing based on legitimate interests (see Your rights section).

Legal obligation
We process personal data where necessary to comply with our legal and regulatory obligations. This includes processing required for:
- compliance with transport, consumer and regulatory requirements;
- responding to lawful requests from courts, regulators or public authorities;
- record-keeping obligations; and
- age-verification checks for deliveries of age-restricted items.

Consent
We rely on your consent where required by law, including in relation to certain marketing communications or specific optional features.
Where we rely on consent:
- you are free to withdraw it at any time; and
- withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.
You can manage your preferences or withdraw consent using the options provided in our communications or by contacting us.

Recruitment-specific lawful bases
When processing personal data relating to job applicants, we rely on one or more of the following lawful bases:
- Legitimate interests - to assess candidates, manage recruitment processes and make informed hiring decisions;
- Contract - where processing is necessary to take steps at your request prior to entering into an employment contract; and
- Legal obligation - where required to comply with employment, equality or regulatory requirements.

We do not, and will not, sell your personal data to any third party. This includes your name, address, email address and telephone number. Protecting your privacy and maintaining your trust is very important to us.
However, in order to operate our parcel delivery services, support our business functions and comply with legal obligations, we may share personal data with trusted third parties, as described below.

Service providers and processors
However, in order to operate our parcel delivery services, support our business functions and comply with legal obligations, we may share personal data with trusted third parties, as described below.
This may include:
Companies involved in providing delivery services such as:
- payment service providers;
- warehouses and fulfilment partners;
- couriers and delivery partners, including in-country delivery companies for parcels delivered outside the UK.
Technology and IT service providers, including:
- website and app hosting providers;
- cloud and infrastructure providers;
- customer support platforms; and
- data analytics and security services.
These providers are not permitted to use personal data for their own purposes.

Professional advisers and specialist partners
We may share personal data with professional advisers and specialist partners where necessary to support our business operations. This may include:
- legal advisers, auditors and insurers;
- customs and compliance partners
- marketing and communications agencies; and
- consultants providing technical or operational support.

Regulators, law enforcement and public authorities
We may share personal data with professional advisers and specialist partners where necessary to support our business operations. This may include:
- we are legally required to do so;
- it is necessary to comply with a legal obligation;
- it is required to protect our legal rights; or
- it is needed to prevent or investigate fraud or other unlawful activity.

Group companies
Evri is part of the Evri Group. Where necessary, we may share personal data within the Group to support delivery operations, customer services, complaints handling and other legitimate business activities.
Group companies act as independent data controllers, joint controllers or data processors depending on the context, and personal data is shared only where there is a lawful basis to do so.

International data transfers
Some of the third parties we work with may be located outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place to protect your data, in line with data protection law. Further details are provided in the International Transfers section of this notice.

Safeguards and controls
Whenever we share personal data with third parties, we ensure that:
- appropriate contractual protections are in place, such as data processing agreements or data sharing agreements
- third parties are required to keep personal data secure and confidential;
- personal data is only used for the specific purposes we have agreed; and
- adequate technical and organisational security measures are applied.
We routinely review our third-party relationships to ensure ongoing compliance with data protection requirements.

If you would like more information
If you would like further information about the third parties we share personal data with, or the safeguards we use, you can contact us using the details provided at the end of this Privacy Notice.

We are based in the United Kingdom, but in order to operate our parcel delivery services and support our business operations, it may sometimes be necessary to transfer personal data outside the UK.

Transfers within the UK and European Economic Area (EEA)
Personal data may be transferred within the UK and, where permitted by law, to countries within the European Economic Area (EEA). The UK Government has recognised that EEA countries offer an adequate level of data protection, meaning that personal data can be transferred to these countries without the need for additional safeguards.

Transfers outside the UK and EEA
In certain circumstances, personal data may be transferred to countries outside the UK and the EEA. This may occur, for example, where:
- parcels are delivered internationally
- international delivery or logistics partners and involved;
- IT, technology or support services are provided from overseas; or
- it is otherwise necessary to perform our contract with you or for the purposes set out in this Privacy Notice.
Some of these countries may not provide the same level of data protection as the UK.

Safeguards for international transfers
Where personal data is transferred outside the UK or EEA and the destination country is not subject to an adequacy decision, we ensure appropriate safeguards are in place to protect your personal data. These safeguards may include:
- the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses;
- supplementary technical or organisational measures where required; and
- contractual obligations requiring recipients to protect personal data in line with UK data protection standards.
We only transfer personal data internationally where we are satisfied that it will be adequately protected and processed in accordance with applicable data protection laws.

More information
If you would like further information about international transfers of personal data or the safeguards we use, you can contact us using the details provided at the end of this Privacy Notice.

We keep your personal data only for as long as it is necessary for the purposes set out in this Privacy Notice and in line with applicable legal, regulatory and business requirements.
The length of time we retain personal data depends on factors such as:
- the nature of our relationships with you;
- the purpose for which we collected the data;
- whether we are subject to a legal or regulatory obligation to retain it; and
- whether the data may be required to establish, exercise or defend legal claims.

Standard retention periods

Customer and delivery-related data
In most cases, we retain personal data for up to 13 months after our last interaction with you. This allows us to:
- respond to queries, complaints or claims;
- investigate disputes or delivery issues; and
- meet our operational and customer service requirements.

Recruitment data (job applicants)
Where you apply for a role with us, we typically retain your application data for up to 12 months after your application has been received. This allows us to:
- manage the recruitment process;
- respond to queries or challenges relating to recruitment decisions; and
- consider you for future opportunities, where appropriate.
After this period, your data will be securely deleted or anonymised.
If you are successful in your application, your data will be transferred to our HR systems and processed in accordance with our employee privacy notice.

Legal and regulatory retention
Some personal data must be retained for longer periods where required by law, regulation, tax or accounting rules. For example, we may need to retain records relating to:
- financial transactions and payments;
- tax and accounting obligations; or
- regulatory and compliance requirements.
Where a legal obligation applies, we retain personal data for the minimum period required and no longer.

Business and litigation requirements
In certain circumstances, we may retain personal data for longer where it is necessary for legitimate business purposes, such as:
- managing ongoing complaints or investigations;
- responding to regulatory enquiries; or
- preparing for, or defending, actual or potential legal claims.
Where there is a reasonable likelihood of litigation, relevant data may be retained until the matter has been resolved.

Data minimisation and retention controls
We follow a data retention policy which sets out clear rules for how long different types of personal data are kept and when they are securely deleted.
We regularly review the personal data we hold and delete or anonymise it when it is no longer required. We take a data minimisation approach and aim to retain personal data for the shortest period necessary.

Anonymised data
In some cases, we may anonymise personal data so that it can no longer be linked to you. Once anonymised, this data may be used for research, statistical analysis, service improvement and reporting purposes, and may be retained indefinitely.
If you would like more information about our retention periods, you can contact us using the details set out at the end of this Privacy Notice.

We use artificial intelligence (AI) in limited ways to help improve our services, support recruitment processes and carry out certain operational activities. Our use of AI is designed to be responsible, secure and compliant with applicable data protection laws.
Where AI is used:
- people remain responsible for important decisions;
- appropriate human oversight is applied;
- personal data is protected through security and access controls
- personal data is not used to train AI models without appropriate safeguards.
AI helps us improve efficiency, consistency and customer experience, but we do not use AI to make decisions that have legal or similarly significant effects on individuals without appropriate human involvement, unless we tell you otherwise.
If you would like more information about how we use AI, please contact us using the details provided in this Privacy Notice.

AI use in recruitment
We use AI‑supported tools to assist with parts of our recruitment process. This helps us manage applications efficiently and fairly.

- Purpose of AI in recruitment
AI tools may be used to review basic information submitted in application forms to support initial screening, such as checking whether minimum role requirements are met. This enables applications to be processed promptly and consistently.

- Human oversight
AI tools do not make final hiring decisions. All applications are ultimately reviewed by a member of the recruitment team or a hiring manager before any decision is taken.

- Data protection
Personal data processed during recruitment is handled in accordance with data protection law and our internal policies. AI tools operate within secure environments, and applicant data is not used to train AI models.

- Your rights
Where AI-supported tools are used, you may have rights in relation to automated processing and to object to certain processing based on legitimate interests. If you have concerns about AI-assisted recruitment processing, please contact us.

Use of AI in service operations
We may also use AI technologies to support operational and compliance‑related activities, such as confirming that images submitted through our services meet required standards.
For example, AI may be used to check safe place photos to ensure they comply with our requirements.
- Safe place photos should not include personal data, such as identifiable individuals or sensitive information.
- Our AI systems are designed to detect images that may contain personal data and remove them from further processing.
- This use of AI is limited to checking compliance and protecting privacy. Images are not used for any other purpose.

Use of personal data in AI systems
We do not authorise the use of Special Category (sensitive) personal data within generative AI systems. This includes data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, or data concerning a person’s sex life or sexual orientation.
Personal data may be processed within AI systems where this is necessary for a defined purpose and permitted by law. Where this occurs:
- processing is limited to what is strictly necessary;
- data is handled within a protected and secure AI environment; and
- personal data is not used to train AI models.
Where possible, we avoid using personal data in AI systems altogether.

Our commitment to responsible AI use
We are committed to ensuring that AI technologies are used responsibly and transparently. This includes:
- limiting AI use to appropriate, clearly defined purposes;
- applying human oversight where decisions affect individuals;
- regularly reviewing AI systems for fairness, accuracy and compliance; and
- respecting and protecting your rights under data protection law.
If you have questions about our use of AI or automated processing, please contact us using the details provided at the end of this Privacy Notice.

Customer surveys
To help us improve the quality of our services, we may invite you to take part in customer experience surveys. Surveys are voluntary, and only a small proportion of users will be invited to participate.
We use a third‑party provider, Verint, to conduct these surveys on our behalf. You can choose to complete a survey anonymously. If you decide to provide personal data, it will only be used in line with this Privacy Notice and Verint’s own privacy practices.
If you do not wish to take part, you can simply close the survey invitation and continue using our website or services without any impact.

How survey data is collected
If you choose to participate in a survey:
- a session cookie will be placed on your device to allow Verint to interact with you during the survey session. This cookie is deleted when you close your browser; and
- a persistent cookie may be placed on your device to ensure you are not invited to complete the same survey again within a reasonable period. This cookie is deleted after a set expiry date.
All survey responses are submitted directly to Verint. Verint provides Evri with aggregated survey results and will not sell or disclose any personal data collected through surveys to third parties.
Further information about how Verint processes personal data can be found in Verint’s own privacy policy.

International data transfers
Survey data collected by Verint may be hosted in the United States. Where personal data is transferred outside the UK, appropriate safeguards are in place, such as standard contractual clauses, to ensure your data is protected in accordance with data protection law. Further information is available in the International data transfers section of this notice.

Reviews and feedback platforms
We may also invite you to leave a review about our services on third‑party review platforms, such as Trustpilot.
If you choose to participate:
- we may share your email address with the review platform solely for the purpose of sending the review invitation; and
- you can choose whether or not to respond to the invitation.
Review platforms will process your personal data in accordance with their own privacy notices. They will retain your email address only for the purpose of managing the review invitation and related communications.

Rate my Courier emails
After a parcel has been delivered, you may receive a limited number of “Rate My Courier” survey emails inviting you to provide feedback on your delivery experience.
- these emails are sent to the email address provided for delivery updates;
- they are used solely to collect feedback and improve our services;
- they do not contain marketing content; and
- participation is entirely voluntary.
Feedback provided through these surveys is anonymous and is used to help us understand and improve service quality. We may also use this feedback to provide performance insights and feedback to our couriers.
If you choose to leave comments in free‑text fields, we recommend that you do not include any information that could identify you or another individual. This helps us ensure that feedback remains anonymous and protects your privacy.
These communications are sent on the basis of our legitimate interests in improving service quality and customer experience. If you do not wish to take part, you can simply ignore or delete the email.
You also have the right to object to receiving these survey emails. If you exercise this right, we will stop sending them to you. Please note that, depending on your preferences, this may also affect your ability to receive certain service‑related email communications. Further details can be obtained by contacting us.

Your legal rights
You have a number of rights in relation to your personal data under data protection law. These rights are explained below.
You have the right to:

Access your personal data
You can request a copy of the personal data we hold about you and check that we are processing it lawfully.

Correct inaccurate data
You can ask us to correct any inaccurate or incomplete personal data we hold about you. In some cases, you may also be able to update your details through your account.

Request deletion of your data
You can ask us to delete your personal data where there is no valid reason for us to continue processing it. Please note that we may not always be able to fulfil your request where we are required to retain data for legal or regulatory reasons.

Object to processing
You can object to our use of your personal data where we rely on legitimate interests, if you believe this impacts your rights and freedoms. We will consider your request and balance it against our legitimate grounds for processing.

Restrict processing
You can ask us to limit how we use your personal data in certain situations, for example:
- while we verify its accuracy;
- where you believe the use is unlawful but do not want us to delete it;
- where you need the data for legal claims; or
- where you have objected and we are considering your request.

Data portability
You can request that we transfer your personal data to you or a third party in a structured, commonly used and machine‑readable format, where processing is based on consent or contract and carried out by automated means.

Withdraw consent
Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent. In some cases, this may mean we are unable to continue providing certain services.

Opt out of marketing
You can opt out of marketing communications at any time by using the “unsubscribe” link in our emails or updating your preferences.

Complaints about how we use your personal data
If you have any concerns about how we use your personal data, we encourage you to contact us in the first instance so we can investigate and try to resolve the issue. You can file a complaint with us through our contact form:

Submit a data protection complaint

Under applicable data protection laws, including the UK GDPR and the Data Protection Act 2018 (and, where relevant, obligations set out under the Data Use and Access Act), you have the right to raise a complaint about how your personal data has been processed or handled.
We will review your complaint in line with our internal procedures and aim to respond as quickly as possible.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.
You can contact the ICO at:
- Website: https://www.ico.org.uk
- Telephone: 0303 123 1113
- Our ICO Registration Number is Z4921268
We would, however, appreciate the opportunity to address your concerns before you approach the ICO.

Exercising your rights
You can exercise your rights by contacting us using the details provided at the end of this Privacy Notice.
You will not normally have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to act on a request if it is clearly unfounded, repetitive or excessive.
To protect your privacy, we may need to verify your identity before processing your request. We may also ask for additional information to help us respond more quickly.

Responding to your request
We aim to respond to all legitimate requests within one month of receipt. In some cases, for example where a request is complex or you have made multiple requests, it may take us longer to respond. Where this applies, we will inform you and keep you updated on progress.
To help us process requests efficiently and securely, we may use appropriate tools and technologies, such as systems designed to assist with locating, organising, deduplicating and redacting personal data. These tools are used to support our obligations under data protection law while ensuring your information is handled accurately and securely.

If you have any questions about this privacy notice, wish to exercise your legal rights, or make a complaint about how we're processing your personal data, you can contact us by:

- Enquiry form: Choose the enquiry form below that best matches your request
- Mail: You can also write to us at:

Data Protection Team
Evri
Capitol House
1 Capitol Close
Morley
Leeds
LS27 0WH

Contact our Data Protection Team

Request Access
You have the right to access the personal information we hold about you, enabling you to receive a copy and check that we are processing it lawfully.
Request access to my personal data

Request Correction
You can request that we correct any inaccurate personal data we hold about you. You can also update most of this information through your account.
Request a correction to my personal data

Request Deletion
You have the right to request that we delete or stop processing your data in certain circumstances, especially if we no longer have a valid reason to process it. We may not always be able to fulfil your request for deletion if we need to retain the data for legal reasons, but we will inform you if this applies.
Request deletion of my personal data

Request Transfer
You can request that we transfer your data to you or another service provider in a structured, commonly used, and machine-readable format. This applies to data we process based on your consent or when fulfilling a contract with you.
Request a data transfer

Object to Processing
If we are processing your data based on legitimate interests (or those of a third party), you can object if you feel it impacts your rights and freedoms. In some cases, we may demonstrate that our legitimate interests outweigh your rights.
Object to the use of my data

Request Restriction of Processing
You can ask us to suspend the processing of your personal data in certain situations, such as:
- If you want us to verify the accuracy of the data.
- If you believe the data is being processed unlawfully but don't want it deleted.
- If you need the data for legal claims even if we no longer need it.
- If you've objected to our use of the data and we need to verify whether we have overriding grounds to continue using it.
Restrict the use of my data

Withdraw Consent
If we are processing your personal data based on your consent, you can withdraw it at any time. This will not affect the lawfulness of any processing before you withdrew your consent. Please note that if you withdraw your consent, we may not be able to provide certain products or services to you, and we will inform you if that’s the case.
Request to withdraw consent

Report a Suspected Personal Data Breach
If you believe personal data has been lost, accessed without permission, or shared in error, please let us know as soon as possible.
Our team will review the information you provide and investigate the issue in line with our data protection procedures.
Report a personal data breach

Personal Data Disclosure Request (Authorities Only)
If you are a law enforcement agency, regulatory authority, or government body requesting disclosure of personal data, please submit your request using the form below.
Submit an official data disclosure request
Please note: All requests must send a signed Data Protection Act (DPA) form to our team.

Have a question about your personal data?
For any data protection enquiries that are not covered by the specific request forms above, please use the general enquiry form below.
This includes questions about our privacy notice, personal data processing, or recent privacy-related updates.
Submit an enquiry

Call recording
We record inbound and outbound telephone calls for a number of legitimate purposes. This includes calls to and from our customer services, operational teams and other business functions.
Calls may be recorded for the following reasons:
- Quality assurance and training - to help improve our services and ensure staff are appropriately trained;
- Customer support - to help us accurately understand and resolve enquiries, complaints or claims;
- Operational management - to ensure effective handling of deliveries and related services;
- Legal and regulatory purposes - to establish, exercise or defend legal claims and to meet regulatory requirements; and
- Fraud prevention and security - to help prevent misuse of our services.
Where calls are recorded, callers will be informed at the start of the call, either through a recorded message or by an agent.
Call recordings are accessed only by authorised personnel and are handled securely in accordance with our internal policies. Recordings are retained for a limited period and deleted in line with our data retention policy, unless they are required for longer to resolve a complaint, dispute or legal matter.
If you have questions about call recording or would like further information, you can contact us using the details set out at the end of this Privacy Notice.