RAPID PARCEL UKRAPID PARCEL UK
Privacy notice
This notice explains what personal information RAPID PARCEL UK uses when you book, track, or contact us, and the rights you have under UK data protection law.
1. Who is responsible
[LEGAL_ENTITY_NAME] (company number [COMPANY_NUMBER]) is the controller for personal information collected through the RAPID PARCEL UK website, app, and parcel services. Registered office: [REGISTERED_OFFICE_ADDRESS].
Privacy questions and requests: [PRIVACY_EMAIL]. Our ICO registration number is [ICO_REGISTRATION_NUMBER].
This service is for adults booking or receiving parcels. We do not intend to collect information about children.
2. Information we use
We use the information you give us and the information created when a parcel moves through the network.
- Account: name, email, phone number, and a password that we store only as a hash.
- Parcel: sender and recipient names, addresses, postcodes, contact details, parcel description, weight, and size.
- Payment: the amount, a payment reference, and status. Stripe processes the card. We do not store the full card number.
- Phone verification: a one-time code handled by Firebase so we can confirm the phone number on a new customer account.
- Tracking: the tracking number and the postcode you enter as a second check before tracking details are shown.
- Location: a driver’s position while the app is open on an active delivery. Customers see a coarsened latest position only while the parcel is out for delivery, not a continuous trace.
- Proof of delivery: a photo, signature, or note taken for the delivery record. That evidence is for operations and claims.
- Notifications: your choices for email or push updates about a parcel.
- Business accounts: legal name, company number, VAT number, billing email, and registered address when you complete business checks.
- Website login: an essential cookie named refreshToken. See the Cookie policy.
3. Why we use it
We use this information to quote, collect, carry, and deliver parcels; to take payment; to show tracking; to deal with claims; and to keep accounts secure. The lawful bases we rely on under the UK GDPR are:
- Contract: to provide the booking you asked for, including tracking and delivery contacts.
- Legal obligation: to keep records we must keep for tax, accounting, and claims.
- Legitimate interests: to protect the network against fraud and misuse, to plan routes, and to improve reliability, balanced against your rights.
- Consent: where we ask for an optional marketing message or a non-essential cookie. We do not use advertising cookies today.
5. How long we keep it
Account details are kept for [ACCOUNT_RETENTION] after you ask us to close the account, unless a booking or legal claim still needs them.
Shipment and tracking records are kept for [SHIPMENT_RETENTION]. Coarsened and operational location records are kept for [LOCATION_RETENTION]. Proof-of-delivery images and signatures are kept for [EVIDENCE_RETENTION].
A short-lived driver position used for live operations expires quickly. The customer tracking view shows the latest known position for that delivery, not a stored history of the driver’s whole shift.
6. Your rights
You can ask for a copy of your personal information, a correction, erasure, restriction, or a portable copy, and you can object to processing based on legitimate interests. You can withdraw consent where we rely on consent.
Email [PRIVACY_EMAIL] to make a request, including a request to delete your account. Say whether you are the sender or the recipient, and include the email or tracking number so we can find the record. We may need to keep information that the law requires us to keep, or that we need for an open claim.
You can complain to the Information Commissioner’s Office at ico.org.uk. We would like to put things right first if you email us.