Privacy Notice

Welcome to Evri's Privacy Notice. We are committed to protecting your personal information, and this notice explains how we handle your data.

This notice applies when you ask us to send an item, we are delivering something to you, or when we engage your services to deliver parcels to customers. It also outlines your privacy rights and how the law protects you. We will make it clear in this notice whether the information applies to customers, couriers, or both.

Our website and services are not meant for children, and we do not intentionally collect data related to children.

Protecting Your Privacy

At Evri, we take your privacy seriously. We are fully dedicated to safeguarding your personal information.

The company responsible for your data is Evri Limited, registered with the ICO under number Z4921268. If you have any questions about how we protect your privacy, you can find our contact details at the end of this notice.

We have a dedicated Data Protection Officer (DPO), Richa Bhuttar, who oversees all matters related to privacy and this notice.

It’s important to us that your information is accurate and up to date. Please let us know if your personal details change while you're using our services.

Third-Party Links

Our website may contain links to other websites, apps, or plugins. If you click on these, third parties may collect data about you. We don't control these sites and aren't responsible for their privacy practices. We recommend reading the privacy notice of any other sites you visit.

Customers

What Data We Collect on You

We may collect and use various types of personal data, which we group as follows:

  • Identity Data: Includes your name, username (email address and user ID), and title.
  • Contact Data: Includes your billing and delivery address (including safe place locations), email, phone numbers, and What3Words locators.
  • Financial Data: Includes your bank account and payment card details.
  • Transaction Data: Details of payments and purchases made with us.
  • Technical Data: Includes information about your devices, like IP address, browser type, operating system, and location.
  • Profile Data: Includes your username, password, purchase history, preferences, and responses to surveys.
  • Usage Data: Includes how you use our website, app, and services.
  • Marketing and Communications Data: Includes your preferences for receiving marketing and other communications from us.

We do not collect any Special Categories of Personal Data (such as information about your race, religion, health, or political views) on our customers.

How We Use Your Information

We use your information in different ways depending on the type of data and our relationship with you. Below, you'll find details on how we use your data, why we use it, and the legal grounds for doing so.

How we use your name and contact details

What We Do Why We Do It Lawful Basis for Processing
What We Do Register you as a new customer and create an account Why We Do It We need your name, email address, and address to add you to our system Lawful Basis for Processing Processing is necessary for the performance of a contract
What We Do Deliver your parcel or receive instruction to deliver a parcel Why We Do It We need your name and address to collect and/or deliver your parcel Lawful Basis for Processing Processing is necessary for the performance of a contract
What We Do Send you service messages by text and/or email Why We Do It We use your phone number/email to send updates such as delivery notifications Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Parcel recipient satisfaction surveys Why We Do It To improve our service quality Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Send you information about our products and services Why We Do It To keep you updated with the latest offerings Lawful Basis for Processing You have given explicit consent, or processing is necessary for Evri’s legitimate interests
What We Do Present content from the retailer who asked us to deliver an item to you Why We Do It To display content such as product recommendations based on purchases you’ve made with them Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Fraud prevention and detection Why We Do It To prevent fraud against you or Evri Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Capture your date of birth to perform age verification checks Why We Do It To ensure compliant deliveries of age-restricted items Lawful Basis for Processing Processing is necessary to meet our legal obligations

How We Use Your Name and Contact Details (For Customer Service)

What We Do Why We Do It Lawful Basis for Processing
What We Do Provide customer service and support Why We Do It To ensure you receive the appropriate support for your enquiries Lawful Basis for Processing You have given consent, or Processing is necessary for the performance of a contract
What We Do Train our staff Why We Do It To ensure you get the best service when contacting us Lawful Basis for Processing Processing is necessary for Evri’s legitimate interest
What We Do Ask you to leave a review or take a survey Why We Do It To learn how customers use our products/services Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests

How We Use Your Financial Data

What We Do Why We Do It Lawful Basis for Processing
What We Do Take payment, give refunds, and settle claims Why We Do It We need your financial details to process payments and facilitate refunds/claims Lawful Basis for Processing You have given consent, or processing is necessary for the performance of a contract
What We Do Fraud prevention and detection Why We Do It To prevent fraud against you or Evri Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Collect and recover money owed to us Why We Do It To complete the contract between us Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests

How We Use Your Usage Data

What We Do Why We Do It Lawful Basis for Processing
What We Do Improve our website and mobile app Why We Do It To provide the best user experience and identify issues Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests

How We Use Technical Data

What We Do Why We Do It Lawful Basis for Processing
What We Do Use data analytics to improve our website, products/services, marketing, customer relationships, and experiences Why We Do It To understand customer preferences, keep our site updated, and inform our marketing strategy Lawful Basis for Processing Processing is necessary for Evri's legitimate interests
What We Do Administer and protect our business and website Why We Do It To manage IT services, network security, and prevent fraud Lawful Basis for Processing Processing is necessary for Evri's legitimate interests

We also anonymise and aggregate your personal information (so it no longer identifies you) and use it for purposes such as testing our IT systems, conducting research, analysing data, improving our website and app, ensuring quality and training, and developing new products and services.

Sharing Your Information

We want to make it clear that we do not, and will not, sell your personal data (including your name, address, email, or phone number) to any third party. Earning and maintaining your trust is very important to us, and we believe this is key to doing so.

However, we may share your data with certain companies to provide our services to you, as described below:

  • Companies involved in getting your purchases to you: This includes payment service providers, warehouses, and couriers.
  • Professional service providers: This includes digital marketing agencies and website hosts that help us manage our online business.
  • HM Revenue & Customs, regulators, and other authorities: We may need to share data with UK authorities when required by law.

If you're sending a parcel from the UK to an international destination, you can use the Evri International website. This site is operated by our third-party partner, Parcel2go.com Limited, under the Evri brand.

By using the Evri International website, you're entering a contract with Parcel2go.com Limited, not Evri. Parcel2go.com Limited is a company registered in England, and you can contact them via https://international.evri.com/help-centre.

We share your personal data with Parcel2go.com Limited, but only for the following purposes:

  • To allow seamless movement between the Evri and Evri International websites without needing two separate accounts.
  • To ensure that Evri and Parcel2go.com Limited meet our contractual commitments to you.

We require all third-party partners to respect the security of your personal data and handle it according to the law. We do not allow them to use your data for their own purposes and only permit them to process it for the specific purposes we have outlined.

IP Addresses

What Are IP Addresses?

An IP address is a unique string of numbers that identifies a device (like your computer or smartphone) when it connects to the internet, allowing devices to communicate with each other.

How We Use IP Addresses

  • We record the IP address of visitors to our website and we collect related information such as the products viewed or searched for, the length of visits to certain pages and page interaction.
  • We use an independent company to collate the information described above. This company then provides us with data relating to website visitors that have accessed our website from businesses.
  • We may then use this information to provide potential business customers with details of services that we offer.

Issuing Customer Surveys

To help us continually improve the quality of our services, we may invite you to participate in a survey conducted by a company called Verint. The survey is voluntary, and you can choose to complete it anonymously. If you provide any personal data, it will only be used if you choose to share it. The data collected by Verint is hosted in the United States, and transfers are protected by the European Commission's Standard Contractual Clauses.

Only a small percentage of visitors will be asked to take the survey. If you don’t want to participate, simply close the pop-up invitation, and you can continue browsing without any issue.

If you choose to participate in the survey:

  • A session cookie will be placed on your device so that Verint can interact with you during the survey. This cookie will be deleted once you close your browser.
  • A persistent cookie will also be placed on your device to ensure you are not asked to take the survey again within a reasonable time. This cookie will be deleted at a set expiration date.

All survey data is submitted directly to Verint, and they will provide us with the survey results. Verint will not sell or disclose any personal data collected through the surveys to third parties. For more details on how Verint handles and processes survey data, please see their privacy policy.

Additionally, we may invite you to leave a review on TrustPilot. If you choose to participate, your email address will be shared with them solely for the purpose of sending the review invitation. You can opt not to respond to this invitation if you prefer. TrustPilot will retain your email address only for this purpose.

Data Retention

We will retain your personal information for as long as it is necessary for the purposes outlined in this privacy policy. We also keep records (which may include personal information) to meet legal, regulatory, tax, or accounting requirements. For instance, we are required to retain accurate records of our interactions with you to respond to any potential complaints or disputes.

If we believe there is a possibility of litigation, we may also retain certain records. The specific retention period for your personal information will depend on your relationship with us and why we hold your data.

To manage how long we keep your data, we follow a data retention policy that includes clear guidelines for retention and deletion.

In some cases, we may anonymise your personal data (making it untraceable back to you) for research or statistical purposes. If this happens, we may use this anonymised data indefinitely without further notice to you.

Keeping Your Information

We will keep your personal information for as long as you have an account with us, or as long as necessary to provide the services you’ve requested. If you contact our Customer Care team, we may retain your information to help with support-related reporting and trend analysis.

If it's necessary or required by law or regulation, to resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may retain some of your information even after you close your account, or it is no longer needed to provide services.

Couriers

The Data We Collect on You

We collect and process different types of personal data about you, categorised as follows:

  • Identity Data: Includes your first name, last name, courier ID (or similar identifier), photo, and title.
  • Contact Data: Includes correspondence address, business address, email address, and telephone numbers.
  • Financial Data: Includes bank account details for payment purposes.
  • Technical Data: Includes internet protocol (IP) address, login data, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access Evri sites or courier applications.
  • Usage Data: Includes information about how you use our website, courier application, products, and services.
  • Criminal Conviction Data: Includes a record of criminal convictions, as provided by the Disclosure & Barring Service (DBS) or Disclosure Scotland Certificate.
  • Driving Event (Telematics) Data: Includes data about your driving behaviour, such as speed and braking patterns.

Collection of Personal Data

We process your personal data only when necessary. The grounds for processing are as follows:

  1. Contractual Necessity: We process your personal data where necessary for the performance of a contract with you, or to take steps at your request before entering into a contract. For example, we need your information to pay you, manage your courier role, and provide you with benefits.
  2. Legal Obligation: We process your data when required to comply with legal obligations, such as tax or employment laws.
  3. Legitimate Interests: We process your data based on legitimate business interests, provided these are not overridden by your rights or interests in your personal data. Examples include monitoring and improving our services and preventing fraud.

Special Category Data

Certain categories of personal data are considered sensitive and are subject to additional protections. Special category data includes data about your health, genetic or biometric data, sex life, sexual orientation, racial or ethnic origin, political opinions, religious beliefs, and trade union membership. For processing these categories, we rely on the following grounds:

  • Employment Law Obligations: We process this data to fulfil our obligations under employment law, such as ensuring workplace safety.
  • Substantial Public Interest: Processing may be necessary for reasons of substantial public interest, such as preventing and detecting unlawful acts or ensuring equal opportunities.
  • Protection of Life: Processing may be necessary to protect your life or that of another person in emergencies.
  • Legal Claims: Processing is necessary for the establishment, exercise, or defence of legal claims.

Evri may collect and process the following types of special category data:

  • Data related to absence for the purpose of managing attendance and absence procedures.
  • Information about your physical or mental health, medical condition, or disability status to ensure workplace safety and determine your fitness for work.
  • Details about your racial and ethnic origin, sexual orientation, religion or beliefs, and disability status to support equal opportunity monitoring and reporting.

In some cases, we may ask for your consent to process certain types of data. If consent is required, we will request it from you directly (either through a fair processing notice or otherwise) or from a third party acting on our behalf. We will clearly explain what we are asking your consent for.

Please note that agreeing to any such request is not a condition or requirement of your relationship with us. You are free to decline any request for consent without it affecting your relationship with Evri.

How We Use Your Information

We use your information in various ways, depending on the type of data we collect. Below, you'll find details on how we use your data, why we use it, and the legal grounds for doing so.

How We Use Your Name, Identity, and Contact Details

What We Do Why We Do It Lawful Basis for Processing
What We Do Register you in our courier systems Why We Do It To add you to our job systems and allow you to receive job alerts Lawful Basis for Processing You have provided your consent, or processing is necessary for Evri’s legitimate interests
What We Do Contact you about opportunities or your application Why We Do It To keep you updated with available roles and/or your application status Lawful Basis for Processing You have provided your consent, or processing is necessary for Evri’s legitimate interests
What We Do Register you as a courier Why We Do It To add you to our systems Lawful Basis for Processing Processing is necessary for the performance of a contract
What We Do Contact you via post, email, or text message to send service messages or correspondence Why We Do It To manage and maintain our relationship with you Lawful Basis for Processing Processing is necessary for the performance of a contract
What We Do To arrange and/or confirm appropriate insurance Why We Do It To ensure adequate insurance coverage for courier duties Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Ask you to leave a review or take a survey Why We Do It To better understand your experience with Evri, to continually improve services Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Assess pension contributions and automate enrolment  Why We Do It To enable the ongoing assessment for automation into the pension scheme as well as calculating our contribution payable to the pension provider  Lawful Basis for Processing Processing is necessary for Evri to comply with its legal obligations
What We Do Processing is necessary for Evri to comply with its legal obligations Why We Do It To enable better customer services by informing customers who will be delivering their parcel Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do We provide necessary information to clients and law enforcement so they can take appropriate action if a crime, like parcel theft, is suspected Why We Do It This helps ensure that any potential crime is investigated, and the right steps are taken to resolve the situation Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests

How We Use Your Financial Data

What We Do Why We Do It Lawful Basis for Processing
What We Do Issue payments Why We Do It To pay you for your work Lawful Basis for Processing Processing is necessary for the performance of a contract
What We Do Fraud prevention and detection Why We Do It Processing is necessary for the performance of a contract Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Provide you with courier benefits Why We Do It To enable you to access courier benefits and make the on-demand pay platform available Lawful Basis for Processing You have provided your consent, or processing is necessary for the performance of a contract

How We Use Your Contact History With Us

What We Do Why We Do It Lawful Basis for Processing
What We Do Provide support to our couriers Why We Do It To ensure you receive appropriate assistance with any service enquiries you make Lawful Basis for Processing You have provided your consent, or processing is necessary for the performance of a contract
What We Do Train our staff Why We Do It To ensure we can provide you with the best possible service when you contact us Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests

How We Use Performance Data

What We Do Why We Do It Lawful Basis for Processing
What We Do We use information about your performance as a courier Why We Do It To continually improve our service to clients and customers Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests

How We Use Technical Data

What We Do Why We Do It Lawful Basis for Processing
What We Do Use data analytics to improve our website, products/services, marketing, customer relationships, and experiences Why We Do It To define customer types for our products and services, to keep our website updated and relevant, and to inform our marketing strategy Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting data) Why We Do It For running our business, providing administration and IT services, network security, and preventing fraud Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Collect information related to the type of mobile device being used when installing the courier application Why We Do It To manage the ongoing provision of the courier application Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests

How We Use Criminal Conviction Data

What We Do Why We Do It Lawful Basis for Processing
What We Do Request criminal conviction data in the event of an incident involving theft or fraud against our business or to protect our customers Why We Do It To support any investigation relating to incidents or tips from the public to protect you, our customers or Evri Lawful Basis for Processing Processing is necessary for the performance of a contract

How We Use Driving Event (Vehicle Telematics) Data

What We Do Why We Do It Lawful Basis for Processing
What We Do Use telematics information collected from you to monitor driving statistics Why We Do It To inform strategic decisions on our sustainability agenda Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests
What We Do Share anonymised data with the provider of our courier insurance product Why We Do It To allow the insurance provider to monitor their risk associated with the provision of their policy Lawful Basis for Processing Processing is necessary for Evri’s legitimate interests

Anonymisation and Aggregation of Data

We may anonymise and aggregate personal data so that it no longer identifies you. This aggregated data is used for various purposes, including testing IT systems, conducting research, performing data analysis, improving our website and app, and developing new products and services.

Cognito IQ Mobile/CiQ Mobile App Installation & Usage

The Cognito IQ Mobile/CiQ Mobile App operates in a secure, sandboxed area on your device, ensuring it can only access specific functionalities that are essential for its operation, as controlled by the permissions granted by you. These permissions include:

  • GPS: To enable location tracking for correct parcel delivery, but only when you are logged in.
  • Camera: To take photos for safe place delivery and to scan barcodes on parcels.
  • Audio: Required by the Cordova application framework, though the app does not utilize this functionality.
  • Phone: To retrieve signal strength and network status information. The app will not make or monitor phone calls.
  • System: To enable navigation software to download and store maps and temporarily store photos while being processed (never transferred to the device).

Additionally, the mobile application does not access any files it has not created.

Sharing Your Information

We do not sell any of your personal data to third parties, including your name, address, email, or phone number. We are committed to earning and maintaining your trust, which is essential for our operations.

However, we may share your data with the following categories of companies, strictly as necessary to provide our services:

  • Logistical service providers: Including companies managing handheld terminals, warehouses, and fleet management/insurance providers.
  • Professional service providers: Including website hosts and companies that support our benefits or pension services.
  • HM Revenue & Customs: And other regulatory authorities or law enforcement agencies in the United Kingdom who require reporting of certain activities.
  • Clients: In the event they need to bring civil claims against couriers for incidents such as parcel theft.
  • Independent assurance providers: Including auditors and external legal representatives.
  • Benefits providers: To enable you to access courier benefits and make the on-demand pay platform available (eg Onsi).

We require all third parties to respect the security of your personal data and process it in compliance with applicable laws. We do not permit third-party service providers to use your personal data for their own purposes, and they may only process your data according to our instructions.

How Long We Keep Your Data

We will retain your personal data for as long as you are actively providing services as a courier for us, or for as long as it is necessary to provide the services to you.

If you cease providing services to us, we will retain your data for the duration necessary to meet our legal obligations, including for tax and accounting purposes. By law, we must keep basic information about our couriers (including Contact, Identity, Financial, and Transaction Data) for six years after you stop providing services, for tax and reporting requirements.

In certain situations, we may retain some of your information beyond this period, such as to resolve disputes, prevent fraud, or enforce our terms and conditions. Additionally, we may retain your data if it is necessary to comply with other legal or regulatory requirements.

If reasonably necessary, we may also retain your information to support legal claims or to ensure we can continue to provide assistance, such as for issues relating to deliveries or insurance.

Once your data is no longer required for these purposes, it will be securely deleted or anonymised.

All users

Cookies

For information on how we use cookies at Evri, please see our Cookie Policy at https://www.evri.com/cookie-policy

Cross-Border Transfers

Where permitted by law, we may transfer your personal data to countries within the European Economic Area (EEA). The safeguards in place for data transfers within the UK are deemed sufficient by the European Commission, so we don’t need additional controls.

In certain cases, we may also transfer your personal data to countries outside the EEA, which may not offer the same level of data protection as the UK. These transfers will be necessary to perform our contract with you or for the other purposes outlined in this notice.

To ensure your data is protected when transferred outside the EEA, Evri has implemented safeguards such as standard contractual clauses or supplementary measures to secure the transfer of your data to those countries.

Artificial intelligence (AI) and Your Personal Data

We are committed to protecting your privacy and ensuring the responsible use of AI technologies. Please note the following regarding our use of AI:

  1. Special Category Data: We do not authorise the use of special category data within generative AI systems. This includes sensitive information such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, and data concerning a person's sex life or sexual orientation.
  2. Personal Data: Personal data may be utilised within generative AI systems. However, it is processed within a protective AI environment designed to safeguard your information. Importantly, this data is not used to train the AI model, ensuring that your personal information remains secure and confidential. We recommend, where possible, that personal data is not used. If processing personal data is necessary, it will be limited to the purpose it is aiming to achieve.

Data Security

We take the security of your personal data seriously and have implemented appropriate measures to prevent it from being accidentally lost, accessed without authorization, or misused. We limit access to your personal data to only those employees, agents, contractors, and third parties who need it for business purposes. They will only process your data based on our instructions and are obligated to keep it confidential.

In the event of a suspected data breach, we have procedures in place to address it. If required by law, we will notify you and the relevant authorities of any breach.

Your Legal Rights

You have several rights regarding your personal data. These include:Request Access: You have the right to access the personal information we hold about you, enabling you to receive a copy and check that we are processing it lawfully.

  • Request Correction: You can request that we correct any inaccurate personal data we hold about you. You can also update most of this information through your account.
  • Request Deletion: You have the right to request that we delete or stop processing your data in certain circumstances, especially if we no longer have a valid reason to process it. We may not always be able to fulfil your request for deletion if we need to retain the data for legal reasons, but we will inform you if this applies.
  • Request Transfer: You can request that we transfer your data to you or another service provider in a structured, commonly used, and machine-readable format. This applies to data we process based on your consent or when fulfilling a contract with you.
  • Object to Processing: If we are processing your data based on legitimate interests (or those of a third party), you can object if you feel it impacts your rights and freedoms. In some cases, we may demonstrate that our legitimate interests outweigh your rights.
  • Request Restriction of Processing: You can ask us to suspend the processing of your personal data in certain situations, such as:
    - If you want us to verify the accuracy of the data.
    - If you believe the data is being processed unlawfully but don’t want it deleted.
    - If you need the data for legal claims even if we no longer need it.
    - If you’ve objected to our use of the data and we need to verify whether we have overriding grounds to continue using it.
  • Withdraw Consent: If we are processing your personal data based on your consent, you can withdraw it at any time. This will not affect the lawfulness of any processing before you withdrew your consent. Please note that if you withdraw your consent, we may not be able to provide certain products or services to you, and we will inform you if that’s the case.
  • Direct Marketing: If you receive direct marketing from us, you can withdraw your consent via the ‘Unsubscribe’ link in the email or through your account settings.

You will not typically have to pay a fee to access your personal data or to exercise any of the rights listed above. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to comply with your request.

To process your request, we may need to verify your identity to ensure that personal data is not disclosed to anyone who shouldn’t have access to it. We may also contact you for additional information to help speed up our response.

Contacting Us

If you have questions about this privacy notice, wish to exercise your legal rights, or make a complaint about how we are processing your personal data, you can contact us by:

Data Protection Team
Evri
Capitol House
1 Capitol Close
Morley
Leeds
LS27 0WH

We aim to respond to all legitimate requests within one month. If your request is complex or if you've made multiple requests, it might take us longer, but we will notify you and keep you updated.

Complaints

If you're unhappy with how we collect or use your personal data, you can file a complaint with us by emailing data.protection@evri.com or sending it by regular mail to the address above.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection authority. You can find more information on their website at www.ico.org.uk. Our ICO registration number is Z4921268.

This notice was last updated in June 2025.