Open 7am – midnight, 7 days a week Nationwide
Track a delivery Drive with us Help Contact
Bookings
Book now
Services Industries Prices Coverage Business accounts Track a delivery Drive with us Contact Book a delivery

Privacy policy

Draft for review

This page is a working draft for a UK same day courier. Every figure in it — notice periods, payment terms, retention, cancellation charges — is a proposed default, not a position anyone has settled. It must be reviewed and signed off by the operator's solicitor before the site goes live. Set BRAND_LEGAL_REVIEWED_ON once that has happened and this notice goes away on its own.

This notice explains what personal data we collect, why, and what you can do about it. It is written to meet UK GDPR and the Data Protection Act 2018.

Who is the controller

LUNAR CORPORATION LTD, 124-128 City Road, London, England, EC1V 2NJ, is the controller for the data described here. Our ICO registration number is [ICO number]. Contact us at hello@zipcouriers.uk.

What we collect, and why

  • Booking details — your name, email, phone, company, and the collection and delivery addresses and contacts. We need these to perform the contract: a courier cannot deliver to an address we do not hold.
  • Recipient details. When you book, you give us somebody else's name, address and often their phone number. We use them only to make the delivery and to send tracking messages.
  • Location data during a job — once the courier app is live, the courier's position while the delivery is running, and a GPS pin at the point of delivery, which forms part of the proof of delivery. [Not yet collected — the courier app is not built.]
  • Proof of delivery — once the courier app is live, a signature and a photograph at the door. The photograph is of the consignment and its location, not of people. [Not yet collected.]
  • Quote requests — the postcodes and vehicle you priced, which we keep to understand demand and improve coverage. This is our legitimate interest in running the service.
  • Enquiries and applications — what you send us through the contact, account and courier application forms.

Telling your recipient

When you give us somebody else's details, you are responsible for having a lawful basis to share them with us. We will tell the recipient who we are when we contact them about the delivery.

How long we keep it

Booking records and proof of delivery: 6 years from the end of the tax year the job falls in, because a contract claim can be brought for six years under the Limitation Act 1980 and HMRC can ask for the records over the same period. Quote logs: 12 months, long enough to see a year of demand. Enquiries: 12 months after the last contact. Unsuccessful courier applications: 6 months, which is long enough to answer a question about the decision and no longer.

[For legal review: these are the periods we propose, not ones you have set. Confirm or change each.]

Who we share it with

The courier carrying your job, so they can find the address and the person. Our hosting, email and payment providers as processors under contract. Insurers and loss adjusters where there is a claim. Law enforcement where we are legally required to. We do not sell personal data and we do not share it for anyone else's marketing.

Where your data is held

[For legal review: name the countries. Hosting, email relay and the payment provider must each be listed, and any processing outside the UK needs a transfer mechanism — adequacy, or the IDTA / UK Addendum — identified here. This section cannot be left blank if any processor is overseas.]

Keeping it secure

[For legal review: describe the measures actually in place — encryption in transit, access control on the dispatch panel, and who inside the business can see booking data.]

Our couriers' own data

[For legal review: tracking a courier's location through a working day is monitoring of people at work. It needs its own lawful basis, its own notice to couriers, and almost certainly a Data Protection Impact Assessment under Article 35 before the courier app launches. None of that exists yet.]

Automated decisions

We do not make decisions about you by automated means alone, and we do not profile you. Pricing is calculated from the vehicle, the service level and the distance between two postcodes, and nothing about it is based on who you are.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it where we no longer need it, object to processing based on legitimate interests, and ask for your data in a portable form. Email us and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.

Last reviewed: not yet reviewed.