Privacy Policy

    Last updated: 22 December 2024

    UK GDPR | Data Protection Act 2018

    Your Privacy Matters

    Taylors Courier Service Ltd (Company Number: 16845493, registered in England & Wales) ("we", "our", "us", "the Company") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our courier services and platform.

    We are a registered UK Limited Company and process personal data under UK GDPR, the Data Protection Act 2018 and other applicable data-protection requirements.

    1. Information We Collect

    Personal Information

    • Name, email address, phone number
    • Delivery addresses (pickup and drop-off locations)
    • Payment information (processed securely via Stripe)
    • Account credentials (encrypted)

    Delivery Information

    • Package details and descriptions
    • Delivery instructions and preferences
    • Proof of delivery (signatures, photos)
    • Real-time location data (during active deliveries only)

    Driver Information

    • Verification documents (driving license, insurance, identity)
    • Vehicle registration and details
    • National Insurance number (for payroll)
    • Bank account details (for payments via Stripe Connect)
    • Performance metrics and earnings data

    Technical Data

    • IP address, browser type, device information
    • Cookies and similar tracking technologies
    • Usage data and analytics
    • Error logs and diagnostic data

    2. Legal Basis for Processing (GDPR)

    Contract Performance

    Processing necessary to fulfill our courier services contract with you.

    Legitimate Interest

    Fraud prevention, service improvement, and business analytics.

    Legal Obligation

    Compliance with tax, accounting, and regulatory requirements.

    Consent

    Marketing communications (you can withdraw consent anytime).

    3. How We Use Your Information

    • Process and fulfill delivery orders
    • Provide status updates and delivery updates
    • Process payments and prevent fraud
    • Verify driver identity and qualifications
    • Calculate driver earnings and process payouts
    • Improve our services and customer experience
    • Send booking confirmations and service notifications
    • Comply with legal and regulatory obligations
    • Resolve disputes and enforce our terms
    • Send marketing communications (with your consent)

    4. Data Sharing and Disclosure

    We share your data only when necessary:

    • Assigned Drivers: Contact details and delivery addresses to complete your order
    • Payment Processors: Stripe (PCI-DSS compliant) for secure payment processing
    • Cloud Services: Supabase (AWS infrastructure) for secure data storage
    • Communication Services: SMS and email providers for notifications
    • Analytics: Anonymous usage data for service improvement
    • Legal Authorities: When required by law or to protect rights and safety

    We have Data Processing Agreements (DPAs) with all subprocessors.

    5. Your Rights (GDPR & UK GDPR)

    Right to Access

    Request a copy of your personal data we hold.

    Right to Rectification

    Correct inaccurate or incomplete information.

    Right to Erasure ("Right to be Forgotten")

    Request deletion of your data (subject to legal obligations).

    Right to Data Portability

    Receive your data in a structured, machine-readable format.

    Right to Object

    Object to processing based on legitimate interests or direct marketing.

    Right to Restrict Processing

    Limit how we use your data in certain circumstances.

    To exercise your rights, contact us at: office@taylorscourierservice.com

    We will respond to your request within 30 days as required by GDPR.

    6. Data Security

    We use proportionate technical and organisational safeguards designed to protect personal data, including:

    • Encrypted connections for information sent through the website
    • Role-based access controls for staff and operational tools
    • Restricted access to customer, driver and booking records
    • Security logging, review and incident-response procedures
    • Payment processing handled by Stripe; Taylors does not store full card details

    7. Data Retention

    We keep personal data only for as long as it is reasonably needed for the purpose collected, including providing the service, maintaining booking and financial records, resolving disputes, meeting legal obligations and recording marketing preferences.

    Retention periods vary by record type and applicable legal requirements. Payment-card details are handled by Stripe rather than stored by Taylors.

    You can ask about the retention period that applies to a particular record by contacting us.

    8. International Data Transfers

    Some service providers may process data outside the UK. Where that happens, we rely on the safeguards and contractual arrangements required by applicable data-protection law and review the information supplied by those providers.

    9. Cookies and Tracking

    We use cookies and similar storage for:

    • Essential: Authentication, security, and core functionality
    • Analytics: Consent-gated PostHog analytics and masked session recordings used to improve customer journeys
    • Functional: Remember your preferences

    Inputs and identified customer, address and payment details are masked from session recordings. We do not use advertising cookies and do not capture request or response bodies for replay.

    You can manage non-essential cookies through our cookie banner or browser settings.

    10. Data Breach Notification

    In the unlikely event of a data breach affecting your personal data, we will:

    • Notify the ICO within 72 hours as required by GDPR
    • Inform affected individuals without undue delay
    • Provide clear information about the breach and mitigation steps
    • Take immediate action to contain and remedy the breach

    11. Children's Privacy

    Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

    12. Changes to This Policy

    We may update this Privacy Policy periodically. We will notify you of significant changes via email or prominent notice on our platform. Continued use after changes constitutes acceptance of the updated policy.

    Contact & Data Protection Officer

    Data Protection Officer: office@taylorscourierservice.com

    Phone: +44 7846 557 002

    Business Address: Serving major cities nationwide, United Kingdom

    Right to Lodge a Complaint

    You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

    ICO: casework@ico.org.uk | Tel: 0303 123 1113
    Website: www.ico.org.uk

    Taylors Courier Service is committed to the highest standards of data protection and privacy. We comply with UK GDPR, Data Protection Act 2018, and all applicable privacy regulations.