Privacy
Short version: we collect what we need to answer you, to run your account, and to get a parcel to the right door. Nothing else, and we do not sell any of it.
Which one applies changes who is responsible for what.
When you send us an enquiry, or sign in to the customer portal, that information is ours. We decided to collect it, we decide how long to keep it, and questions about it come to us.
When a merchant's shop sends us an order, the shopper's name, address, phone number and email arrive with it. That information belongs to the merchant. We hold it because they have asked us to post a parcel, we use it for nothing else, and a shopper asking about it should ask the shop they bought from — who can ask us, and we will act on it.
The contact form asks for your name, your company, an email address, a phone number and whatever you want to tell us. We use it to reply and to follow up. It is kept while there is a realistic prospect of working together and for a reasonable period afterwards, because a conversation that goes quiet in March often restarts in September.
The form also records whether it was filled in by something behaving like a browser, and how long it took. That is spam handling, it is not about you, and an enquiry that trips it is set aside for a person to read rather than binned.
Your name, your email address, a one-way hash of your password — never the password itself — and when you last signed in. If you turn on two-factor authentication, the secret that generates your codes.
We record sign-in attempts, successful and not, with the email tried and the address it came from. That is what stops somebody guessing at your password, and it is the record we would look at if they tried.
Each order brings the recipient's name, delivery address, and where the shop collected them a phone number and email. We use them to pick, pack, label and post, and we pass the address and contact details to the courier carrying the parcel — that is what a delivery is. Where goods come back, we photograph them so you can see the condition they arrived in.
We keep order records for six years, because UK tax and accounting rules require it of the invoices they sit behind.
Card details are handled by Stripe and never reach our systems. We hold the invoice, what it was for, and whether it was paid.
Two kinds, and only one of them asks.
Signing in to the portal or the back office sets a session cookie, without which the site cannot tell one page request from the next, and a token that stops a form on another website being submitted as though it were you. Both are necessary for something you asked for, so neither asks permission. Neither follows you anywhere.
We use Google Analytics on the public pages of this site — not in the customer portal, not in the back office, not on invoices or labels — to see which pages people find useful and which are not worth keeping.
It stores nothing on your device unless you accept. Until then it reports the page, roughly where in the world the request came from and which site you arrived from, and it cannot tell one visit from another. Accepting adds the part that needs a cookie: telling one person's three visits from three people's one. Declining is remembered, and we will not ask again.
Declining also removes any analytics cookies already on your device — it takes them away rather than merely stopping new ones. To change your mind the other way, clear this site's data in your browser and we will ask once more.
You can ask what we hold about you, ask us to correct it, ask us to delete it, or object to how we are using it. Email info@waypoint3pl.com and we will answer within a month.
If the request is about a shopper's details that reached us through a merchant, send it to the shop the order was placed with. They hold the relationship, and we will do whatever they ask of us.
If we get something wrong and cannot put it right between us, you can complain to the Information Commissioner's Office at ico.org.uk.
On servers in the United Kingdom. We do not sell personal information, and we do not share it except with the people needed to do the job: the courier carrying a parcel, Stripe for a payment, and the shop whose order it is.
Google Analytics is operated by Google, who process data outside the UK under the transfer safeguards their terms provide. That is the only analytics on this site, and it stores nothing about you unless you have accepted.
Waypoint 3PL, Essex, United Kingdom
info@waypoint3pl.com
· +44 7464 267052
Last updated 20 August 2026.
Ask us plainly and we will answer plainly.