Welcome to Evri's Privacy Notice. We are committed to protecting your personal information, and this notice explains how we handle your data.
This notice applies when you ask us to send an item, we are delivering something to you, or when we engage your services to deliver parcels to customers. It also outlines your privacy rights and how the law protects you. We will make it clear in this notice whether the information applies to customers, couriers, or both.
Our website and services are not meant for children, and we do not intentionally collect data related to children.
At Evri, we take your privacy seriously. We are fully dedicated to safeguarding your personal information.
The company responsible for your data is Evri Limited, registered with the ICO under number Z4921268. If you have any questions about how we protect your privacy, you can find our contact details at the end of this notice.
We have a dedicated Data Protection Officer (DPO), Richa Bhuttar, who oversees all matters related to privacy and this notice.
It’s important to us that your information is accurate and up to date. Please let us know if your personal details change while you're using our services.
Our website may contain links to other websites, apps, or plugins. If you click on these, third parties may collect data about you. We don't control these sites and aren't responsible for their privacy practices. We recommend reading the privacy notice of any other sites you visit.
We may collect and use various types of personal data, which we group as follows:
We do not collect any Special Categories of Personal Data (such as information about your race, religion, health, or political views) on our customers.
We use your information in different ways depending on the type of data and our relationship with you. Below, you'll find details on how we use your data, why we use it, and the legal grounds for doing so.
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Register you as a new customer and create an account | Why We Do It We need your name, email address, and address to add you to our system | Lawful Basis for Processing Processing is necessary for the performance of a contract |
| What We Do Deliver your parcel or receive instruction to deliver a parcel | Why We Do It We need your name and address to collect and/or deliver your parcel | Lawful Basis for Processing Processing is necessary for the performance of a contract |
| What We Do Send you service messages by text and/or email | Why We Do It We use your phone number/email to send updates such as delivery notifications | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Parcel recipient satisfaction surveys | Why We Do It To improve our service quality | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Send you information about our products and services | Why We Do It To keep you updated with the latest offerings | Lawful Basis for Processing You have given explicit consent, or processing is necessary for Evri’s legitimate interests |
| What We Do Present content from the retailer who asked us to deliver an item to you | Why We Do It To display content such as product recommendations based on purchases you’ve made with them | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Fraud prevention and detection | Why We Do It To prevent fraud against you or Evri | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Capture your date of birth to perform age verification checks | Why We Do It To ensure compliant deliveries of age-restricted items | Lawful Basis for Processing Processing is necessary to meet our legal obligations |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Provide customer service and support | Why We Do It To ensure you receive the appropriate support for your enquiries | Lawful Basis for Processing You have given consent, or Processing is necessary for the performance of a contract |
| What We Do Train our staff | Why We Do It To ensure you get the best service when contacting us | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interest |
| What We Do Ask you to leave a review or take a survey | Why We Do It To learn how customers use our products/services | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Take payment, give refunds, and settle claims | Why We Do It We need your financial details to process payments and facilitate refunds/claims | Lawful Basis for Processing You have given consent, or processing is necessary for the performance of a contract |
| What We Do Fraud prevention and detection | Why We Do It To prevent fraud against you or Evri | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Collect and recover money owed to us | Why We Do It To complete the contract between us | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Improve our website and mobile app | Why We Do It To provide the best user experience and identify issues | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Use data analytics to improve our website, products/services, marketing, customer relationships, and experiences | Why We Do It To understand customer preferences, keep our site updated, and inform our marketing strategy | Lawful Basis for Processing Processing is necessary for Evri's legitimate interests |
| What We Do Administer and protect our business and website | Why We Do It To manage IT services, network security, and prevent fraud | Lawful Basis for Processing Processing is necessary for Evri's legitimate interests |
We also anonymise and aggregate your personal information (so it no longer identifies you) and use it for purposes such as testing our IT systems, conducting research, analysing data, improving our website and app, ensuring quality and training, and developing new products and services.
We want to make it clear that we do not, and will not, sell your personal data (including your name, address, email, or phone number) to any third party. Earning and maintaining your trust is very important to us, and we believe this is key to doing so.
However, we may share your data with certain companies to provide our services to you, as described below:
If you're sending a parcel from the UK to an international destination, you can use the Evri International website. This site is operated by our third-party partner, Parcel2go.com Limited, under the Evri brand.
By using the Evri International website, you're entering a contract with Parcel2go.com Limited, not Evri. Parcel2go.com Limited is a company registered in England, and you can contact them via https://international.evri.com/help-centre.
We share your personal data with Parcel2go.com Limited, but only for the following purposes:
We require all third-party partners to respect the security of your personal data and handle it according to the law. We do not allow them to use your data for their own purposes and only permit them to process it for the specific purposes we have outlined.
An IP address is a unique string of numbers that identifies a device (like your computer or smartphone) when it connects to the internet, allowing devices to communicate with each other.
To help us continually improve the quality of our services, we may invite you to participate in a survey conducted by a company called Verint. The survey is voluntary, and you can choose to complete it anonymously. If you provide any personal data, it will only be used if you choose to share it. The data collected by Verint is hosted in the United States, and transfers are protected by the European Commission's Standard Contractual Clauses.
Only a small percentage of visitors will be asked to take the survey. If you don’t want to participate, simply close the pop-up invitation, and you can continue browsing without any issue.
If you choose to participate in the survey:
All survey data is submitted directly to Verint, and they will provide us with the survey results. Verint will not sell or disclose any personal data collected through the surveys to third parties. For more details on how Verint handles and processes survey data, please see their privacy policy.
Additionally, we may invite you to leave a review on TrustPilot. If you choose to participate, your email address will be shared with them solely for the purpose of sending the review invitation. You can opt not to respond to this invitation if you prefer. TrustPilot will retain your email address only for this purpose.
We will retain your personal information for as long as it is necessary for the purposes outlined in this privacy policy. We also keep records (which may include personal information) to meet legal, regulatory, tax, or accounting requirements. For instance, we are required to retain accurate records of our interactions with you to respond to any potential complaints or disputes.
If we believe there is a possibility of litigation, we may also retain certain records. The specific retention period for your personal information will depend on your relationship with us and why we hold your data.
To manage how long we keep your data, we follow a data retention policy that includes clear guidelines for retention and deletion.
In some cases, we may anonymise your personal data (making it untraceable back to you) for research or statistical purposes. If this happens, we may use this anonymised data indefinitely without further notice to you.
We will keep your personal information for as long as you have an account with us, or as long as necessary to provide the services you’ve requested. If you contact our Customer Care team, we may retain your information to help with support-related reporting and trend analysis.
If it's necessary or required by law or regulation, to resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may retain some of your information even after you close your account, or it is no longer needed to provide services.
We collect and process different types of personal data about you, categorised as follows:
We process your personal data only when necessary. The grounds for processing are as follows:
Certain categories of personal data are considered sensitive and are subject to additional protections. Special category data includes data about your health, genetic or biometric data, sex life, sexual orientation, racial or ethnic origin, political opinions, religious beliefs, and trade union membership. For processing these categories, we rely on the following grounds:
Evri may collect and process the following types of special category data:
In some cases, we may ask for your consent to process certain types of data. If consent is required, we will request it from you directly (either through a fair processing notice or otherwise) or from a third party acting on our behalf. We will clearly explain what we are asking your consent for.
Please note that agreeing to any such request is not a condition or requirement of your relationship with us. You are free to decline any request for consent without it affecting your relationship with Evri.
We use your information in various ways, depending on the type of data we collect. Below, you'll find details on how we use your data, why we use it, and the legal grounds for doing so.
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Register you in our courier systems | Why We Do It To add you to our job systems and allow you to receive job alerts | Lawful Basis for Processing You have provided your consent, or processing is necessary for Evri’s legitimate interests |
| What We Do Contact you about opportunities or your application | Why We Do It To keep you updated with available roles and/or your application status | Lawful Basis for Processing You have provided your consent, or processing is necessary for Evri’s legitimate interests |
| What We Do Register you as a courier | Why We Do It To add you to our systems | Lawful Basis for Processing Processing is necessary for the performance of a contract |
| What We Do Contact you via post, email, or text message to send service messages or correspondence | Why We Do It To manage and maintain our relationship with you | Lawful Basis for Processing Processing is necessary for the performance of a contract |
| What We Do To arrange and/or confirm appropriate insurance | Why We Do It To ensure adequate insurance coverage for courier duties | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Ask you to leave a review or take a survey | Why We Do It To better understand your experience with Evri, to continually improve services | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Assess pension contributions and automate enrolment | Why We Do It To enable the ongoing assessment for automation into the pension scheme as well as calculating our contribution payable to the pension provider | Lawful Basis for Processing Processing is necessary for Evri to comply with its legal obligations |
| What We Do Processing is necessary for Evri to comply with its legal obligations | Why We Do It To enable better customer services by informing customers who will be delivering their parcel | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do We provide necessary information to clients and law enforcement so they can take appropriate action if a crime, like parcel theft, is suspected | Why We Do It This helps ensure that any potential crime is investigated, and the right steps are taken to resolve the situation | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Issue payments | Why We Do It To pay you for your work | Lawful Basis for Processing Processing is necessary for the performance of a contract |
| What We Do Fraud prevention and detection | Why We Do It Processing is necessary for the performance of a contract | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Provide you with courier benefits | Why We Do It To enable you to access courier benefits and make the on-demand pay platform available | Lawful Basis for Processing You have provided your consent, or processing is necessary for the performance of a contract |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Provide support to our couriers | Why We Do It To ensure you receive appropriate assistance with any service enquiries you make | Lawful Basis for Processing You have provided your consent, or processing is necessary for the performance of a contract |
| What We Do Train our staff | Why We Do It To ensure we can provide you with the best possible service when you contact us | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do We use information about your performance as a courier | Why We Do It To continually improve our service to clients and customers | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Use data analytics to improve our website, products/services, marketing, customer relationships, and experiences | Why We Do It To define customer types for our products and services, to keep our website updated and relevant, and to inform our marketing strategy | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting data) | Why We Do It For running our business, providing administration and IT services, network security, and preventing fraud | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Collect information related to the type of mobile device being used when installing the courier application | Why We Do It To manage the ongoing provision of the courier application | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Request criminal conviction data in the event of an incident involving theft or fraud against our business or to protect our customers | Why We Do It To support any investigation relating to incidents or tips from the public to protect you, our customers or Evri | Lawful Basis for Processing Processing is necessary for the performance of a contract |
| What We Do | Why We Do It | Lawful Basis for Processing |
|---|---|---|
| What We Do Use telematics information collected from you to monitor driving statistics | Why We Do It To inform strategic decisions on our sustainability agenda | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
| What We Do Share anonymised data with the provider of our courier insurance product | Why We Do It To allow the insurance provider to monitor their risk associated with the provision of their policy | Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests |
We may anonymise and aggregate personal data so that it no longer identifies you. This aggregated data is used for various purposes, including testing IT systems, conducting research, performing data analysis, improving our website and app, and developing new products and services.
The Cognito IQ Mobile/CiQ Mobile App operates in a secure, sandboxed area on your device, ensuring it can only access specific functionalities that are essential for its operation, as controlled by the permissions granted by you. These permissions include:
Additionally, the mobile application does not access any files it has not created.
We do not sell any of your personal data to third parties, including your name, address, email, or phone number. We are committed to earning and maintaining your trust, which is essential for our operations.
However, we may share your data with the following categories of companies, strictly as necessary to provide our services:
We require all third parties to respect the security of your personal data and process it in compliance with applicable laws. We do not permit third-party service providers to use your personal data for their own purposes, and they may only process your data according to our instructions.
We will retain your personal data for as long as you are actively providing services as a courier for us, or for as long as it is necessary to provide the services to you.
If you cease providing services to us, we will retain your data for the duration necessary to meet our legal obligations, including for tax and accounting purposes. By law, we must keep basic information about our couriers (including Contact, Identity, Financial, and Transaction Data) for six years after you stop providing services, for tax and reporting requirements.
In certain situations, we may retain some of your information beyond this period, such as to resolve disputes, prevent fraud, or enforce our terms and conditions. Additionally, we may retain your data if it is necessary to comply with other legal or regulatory requirements.
If reasonably necessary, we may also retain your information to support legal claims or to ensure we can continue to provide assistance, such as for issues relating to deliveries or insurance.
Once your data is no longer required for these purposes, it will be securely deleted or anonymised.
For information on how we use cookies at Evri, please see our Cookie Policy at https://www.evri.com/cookie-policy
Where permitted by law, we may transfer your personal data to countries within the European Economic Area (EEA). The safeguards in place for data transfers within the UK are deemed sufficient by the European Commission, so we don’t need additional controls.
In certain cases, we may also transfer your personal data to countries outside the EEA, which may not offer the same level of data protection as the UK. These transfers will be necessary to perform our contract with you or for the other purposes outlined in this notice.
To ensure your data is protected when transferred outside the EEA, Evri has implemented safeguards such as standard contractual clauses or supplementary measures to secure the transfer of your data to those countries.
Artificial intelligence (AI) and Your Personal Data
We are committed to protecting your privacy and ensuring the responsible use of AI technologies. Please note the following regarding our use of AI:
We take the security of your personal data seriously and have implemented appropriate measures to prevent it from being accidentally lost, accessed without authorization, or misused. We limit access to your personal data to only those employees, agents, contractors, and third parties who need it for business purposes. They will only process your data based on our instructions and are obligated to keep it confidential.
In the event of a suspected data breach, we have procedures in place to address it. If required by law, we will notify you and the relevant authorities of any breach.
You have several rights regarding your personal data. These include:Request Access: You have the right to access the personal information we hold about you, enabling you to receive a copy and check that we are processing it lawfully.
You will not typically have to pay a fee to access your personal data or to exercise any of the rights listed above. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to comply with your request.
To process your request, we may need to verify your identity to ensure that personal data is not disclosed to anyone who shouldn’t have access to it. We may also contact you for additional information to help speed up our response.
If you have questions about this privacy notice, wish to exercise your legal rights, or make a complaint about how we are processing your personal data, you can contact us by:
Data Protection Team
Evri
Capitol House
1 Capitol Close
Morley
Leeds
LS27 0WH
We aim to respond to all legitimate requests within one month. If your request is complex or if you've made multiple requests, it might take us longer, but we will notify you and keep you updated.
If you're unhappy with how we collect or use your personal data, you can file a complaint with us by emailing data.protection@evri.com or sending it by regular mail to the address above.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection authority. You can find more information on their website at www.ico.org.uk. Our ICO registration number is Z4921268.
This notice was last updated in June 2025.