Legal
When you send us an order, the shopper's details come with it. They stay yours. This sets out what we may do with them, what we must do to protect them, and what happens when you stop working with us.
The words matter, because they decide who answers for what.
Your shop collected the shopper's details and decided why. You answer to them, and to the regulator, for that decision.
We hold those details because you asked us to pick, pack and post an order. We act on your instructions, and on nothing else.
This addendum forms part of the agreement between us. Where it conflicts with anything else we have agreed about personal data, this page wins.
| Subject matter | Fulfilling orders you send us: receiving stock, picking, packing, posting, handling returns and telling you what happened. |
|---|---|
| Duration | For as long as you are our customer, and afterwards only as long as the deletion section below allows. |
| Nature and purpose | Storing, using and sending on delivery details so a parcel reaches the right person, and so you and they can see where it is. |
| Type of personal data | Name, delivery address, email address, telephone number, order reference and contents, and the tracking information a courier gives back. |
| Categories of data subject | Your customers. The people whose parcels we post. |
| Special category data | None. Do not send us any. Our systems are not built for it and we do not want it. |
We process your customers' personal data only to do the job above, and only as you have told us to, through your contract, your portal settings, or an instruction you give us directly. If we are ever required by law to do something else with it, we will tell you before we do, unless the law forbids us from telling you.
Not to anybody, at any price, ever. We do not add your customers to a mailing list, we do not build profiles from them, and we do not use them to train anything.
Staff and warehouse operatives are bound to confidentiality as a term of their engagement, and that duty outlasts it. Access is limited to the people who need it to do the work.
The measures we actually take, not a list of aspirations.
Being precise about what that covers: the encrypted volume holds the databases: every name, address, phone number and email address we hold for you. The operating system and our own application code sit outside it, along with our API credentials, which are not personal data and can be replaced if a machine is ever compromised. We will tell you if any of this changes, in either direction.
Sub-processors, and the rules for adding one.
| Couriers | The carrier delivering the parcel: name, address, phone and email, so they can deliver it and tell the shopper when. |
|---|---|
| Our hosting provider | Runs the servers our systems sit on, within the UK or EU. |
| Your own platform | Where you use one of our connectors, the data travels between your shop and us. Your relationship with Shopify, Adobe Commerce or WordPress is yours, not ours. |
You agree to these. If we want to add or replace one, we will tell you first and give you a fair chance to object. If you object on reasonable data protection grounds, we will either find another way or you may end the affected service without penalty. Every sub-processor is bound to terms no weaker than these, and if one of them gets it wrong, that remains our responsibility to you.
Access, correction, deletion, objection: those requests are yours to answer, because it is your relationship. If one reaches us, we will point them to you rather than answer it, and tell you it happened. When you need us to find, correct or delete something to answer them, we will help, promptly, and at no charge for anything reasonable.
If we discover a personal data breach affecting your data, we will tell you without undue delay and in any event within 24 hours of becoming aware, so that you can meet your own 72-hour deadline with time to think. We will tell you what happened, whose data and what kind, what we have done, and what we advise. If we do not yet know something, we will say so rather than wait until we do.
Where you need to carry out a data protection impact assessment, or consult the ICO, we will give you the information about our processing that only we can give.
Your customers' data is stored and processed in the United Kingdom and the European Economic Area. If delivering a parcel means sending an address abroad, as an international shipment does because the courier needs it to get there, that transfer happens because you asked us to send the parcel there. Any other transfer outside the UK or EEA would only happen with your written instruction and appropriate safeguards in place.
Within 90 days of the end of our agreement, we will delete your customers' personal data or return it to you, whichever you ask for. If you ask for neither, we delete it. We keep only what the law requires us to keep, such as a courier record or an accounting record, for as long as it requires, and nothing beyond that, and what is kept stays protected by these terms for as long as we hold it.
We will give you the information you reasonably need to satisfy yourself that we are doing what this page says. Where that is not enough, you may audit us, or appoint someone independent to, no more than once a year unless a breach or a regulator gives you cause, on reasonable notice, during working hours, and without disturbing another customer's goods or data. Tell us what you need to see and we will try to answer it with documents before anybody books a visit.
If we change this page in a way that matters, we will tell customers rather than quietly reposting it. The date below is the one that counts.
In effect from 17 September 2026.
Some merchants need one on file. Ask and we will send it over.