Privacy Notice

Last updated: 12 August 2026

Expedico Logistics respects the privacy of the people whose personal information we handle. This Privacy Notice explains how we collect, use, share, retain and protect personal information when you visit our website, contact us, apply for or operate a retailer account, use our services, receive a delivery from us, or otherwise interact with Expedico Logistics.

1. Who we are

Expedico Logistics is a trading name of Expedico Ltd, a company registered in England and Wales under company number 16711718.

For personal information where Expedico Ltd determines how and why that information is used, Expedico Ltd is the data controller.

In some circumstances, we may process personal information solely on behalf of a retailer, manufacturer or other business customer. Where this applies, that organisation may be the data controller and Expedico Ltd may act as its data processor.

For privacy enquiries, requests or complaints, please contact:

Expedico Logistics
Email: hello@expedico.co.uk

2. Who this Privacy Notice applies to

This Privacy Notice may apply to:

• retailer and manufacturer applicants;
• retailer account holders and their employees or representatives;
• suppliers and business partners;
• delivery recipients;
• people who contact or communicate with us; and
• visitors to our website.

3. Personal information we collect

Depending on how you interact with Expedico, we may collect:

Contact and identity information

Your name, company name, job title, business email address, telephone number and other contact information.

Retailer and business information

Information provided when applying for or operating a retailer account, including company details, collection addresses, opening hours, operational contacts, expected delivery volumes, product information and collection or access requirements.

Delivery information

Information required to complete and manage deliveries, which may include:

• recipient name;
• delivery address;
• telephone number and, where provided, email address;
• order or consignment reference;
• delivery instructions;
• property or access information;
• delivery status and timestamps; and
• proof-of-delivery information, including signatures or photographs where appropriate.

Please avoid providing sensitive or special-category personal information unless it is genuinely necessary for us to provide the service requested.

Account and transaction information

Information relating to your Expedico account, service agreement, orders, invoices, payments and payment status.

Where payment or Direct Debit information is collected through a specialist payment provider, that provider may collect banking information directly. Expedico may receive information such as mandate status, payment status and transaction references rather than full bank account details.

Communications

Records of communications with us, including emails, telephone calls, enquiries, complaints, account notes and other messages.

Website and technical information

Information generated when you use our website, such as IP address, browser and device information, security logs, cookie information and website usage information where applicable.

Marketing information

Your business contact details, marketing preferences and records of communications relating to Expedico services.

4. Where we obtain personal information

We may obtain personal information:

• directly from you;
• from the retailer, manufacturer or business arranging a delivery;
• from another authorised representative of your organisation;
• from service providers used in connection with our operations; and
• from publicly available business sources where appropriate, such as Companies House, company websites and publicly available business directories.

Where a retailer or manufacturer provides customer information to Expedico for the purpose of completing a delivery, the retailer or manufacturer is responsible for ensuring that it is entitled to provide that information to us.

5. How and why we use personal information

We may use personal information to:

• process and assess retailer account applications;
• arrange and conduct Account Activation Calls;
• establish and administer retailer accounts;
• enter into and manage service agreements;
• arrange collections and deliveries;
• communicate with retailers, manufacturers, delivery recipients and suppliers;
• provide tracking, delivery notifications and proof of delivery;
• process invoices and payments;
• manage customer service queries, complaints, claims and disputes;
• maintain appropriate operational and business records;
• protect our systems, website, staff, customers and business from fraud, misuse or security threats;
• improve our website, services and operational processes;
• comply with legal, regulatory, accounting and tax requirements; and
• communicate with relevant businesses about Expedico services where permitted by law.

6. Our lawful bases for using personal information

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following:

Contract

We may process information where this is necessary to take steps at your request before entering into a contract or to perform a contract with you.

Where our contract is with a company or other organisation rather than an individual, we will generally rely on our legitimate interests to process the contact information of that organisation's employees and representatives.

Legitimate interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by the rights and interests of the individual.

Our legitimate interests may include:

• operating and developing our logistics business;
• managing relationships with retailers, manufacturers, suppliers and other business partners;
• communicating with business contacts and delivery recipients;
• arranging and evidencing collections and deliveries;
• maintaining service quality and operational records;
• preventing fraud and protecting our systems and business;
• dealing with complaints, disputes and legal claims; and
• promoting Expedico's services to relevant businesses.

Legal obligation

We may process or retain information where necessary to comply with legal, regulatory, tax, accounting or other obligations that apply to us.

Consent

Where consent is required, we may rely on your consent for a particular use of personal information, including certain non-essential cookies or electronic marketing activities.

Where we rely on consent, you may withdraw it at any time.

7. Business-to-business marketing

We may use relevant business contact information to communicate with retailers, manufacturers and other organisations that may reasonably be interested in Expedico's services.

Where personal information is used for business-to-business marketing, we will do so in accordance with applicable data protection and electronic marketing laws.

You may object to the use of your personal information for direct marketing at any time.

To stop receiving marketing communications from Expedico, use any unsubscribe or opt-out method provided in the communication or contact hello@expedico.co.uk.

8. Who we share personal information with

We may share personal information where reasonably necessary with organisations that help us provide and administer our services, including:

• retailers, manufacturers and other business customers;
• authorised delivery crews and delivery partners;
• transport management and retailer portal providers;
• website hosting, IT, cloud and security providers;
• email and communications providers;
• calendar and appointment-scheduling providers;
• payment and Direct Debit providers;
• accounting, legal, insurance and professional advisers; and
• government bodies, regulators, courts, law-enforcement authorities or other organisations where disclosure is legally required or reasonably necessary.

We only share personal information that is reasonably necessary for the relevant purpose.

Where an organisation processes personal information on our behalf, we require appropriate contractual and security protections. Some organisations may instead act as independent data controllers and will process information in accordance with their own legal obligations and privacy notices.

We do not sell personal information.

9. International transfers

Some of the technology and service providers used by Expedico may process or store personal information outside the United Kingdom, including within the European Economic Area or the United States.

Where personal information is transferred outside the UK, we take steps to ensure that the transfer is permitted under UK data protection law.

Depending on the destination and provider, this may include relying on UK adequacy regulations or using recognised safeguards for international transfers.

You can contact hello@expedico.co.uk if you would like further information about the safeguards applicable to a particular transfer.

10. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, regulatory and dispute-resolution requirements.

Our normal retention approach is:

• Retailer applications that do not become active accounts: generally retained for up to 12 months after the application is closed, unless there is a reason to retain the information for longer.
• Retailer account and contractual records: generally retained for the duration of the business relationship and for up to 6 years afterwards where necessary for accounting, legal, contractual or dispute-resolution purposes.
• Invoices, payment and accounting records: generally retained for at least 6 years where required for tax or accounting purposes.
• Delivery and proof-of-delivery records: retained for as long as reasonably necessary to administer the delivery, provide evidence of service and manage complaints, claims or disputes, which may in some cases be up to 6 years.
• Routine enquiries and communications: retained only for as long as they remain relevant to the enquiry, relationship or purpose for which they were received.
• Marketing information: retained while there is a legitimate reason to contact the relevant business, subject to any objection or opt-out. We may retain minimal suppression information after an opt-out so that we can respect that request in the future.
• Technical and security information: retained for periods appropriate to the security, operational or analytical purpose for which it was collected.

Information may be retained for longer where this is required by law or necessary in connection with an actual or anticipated legal claim, regulatory matter or investigation.

When personal information is no longer required, it will be securely deleted, anonymised or otherwise disposed of.

11. Your data protection rights

Depending on the circumstances and the lawful basis on which we process your information, you may have the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of personal information;
• request restriction of processing;
• object to certain processing;
• object at any time to processing for direct marketing;
• request transfer of certain information in a portable format; and
• withdraw consent where we rely on consent.

These rights are not absolute and may not apply in every circumstance.

To exercise a data protection right, contact: hello@expedico.co.uk

We may need to request reasonable information to confirm your identity before acting on a request.

12. Automated decision-making

Expedico does not currently use solely automated decision-making that produces legal or similarly significant effects on individuals.

Retailer account applications may be reviewed using information submitted through our systems, but final account approval is subject to human review.

13. Cookies and similar technologies

Our website may use cookies and similar technologies for essential website functions and, where applicable, analytics or other optional features.

Non-essential cookies or similar technologies will only be used where permitted by law and, where required, after an appropriate choice or consent has been obtained.

Further information about the cookies and similar technologies used on our website is available in our Cookie Notice.

14. Information security

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, destruction or unauthorised access.

Access to personal information is limited to people and service providers who reasonably require it for their role or the relevant service.

While we take appropriate measures to protect information, no internet-based or electronic system can be guaranteed to be completely secure.

15. Data protection complaints

If you are concerned about the way Expedico has collected or used your personal information, please contact us first so that we have an opportunity to investigate the matter.

You can make a data protection complaint by emailing:

hello@expedico.co.uk

Please include “Data Protection Complaint” in the subject line where possible.

We will acknowledge a data protection complaint within 30 days and will investigate and respond without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Information about making a complaint is available at www.ico.org.uk.

16. Changes to this Privacy Notice

We may update this Privacy Notice where necessary to reflect changes to our services, technology, business operations or legal obligations.

The current version will always be published on our website and the “Last updated” date at the top of this notice will show when it was most recently revised.

Where a change materially affects how we use personal information, we will take reasonable steps to bring that change to the attention of affected individuals where required.

17. Contact us

For questions, requests or complaints relating to privacy or personal information, contact:

Expedico Logistics
Expedico Ltd
Email: hello@expedico.co.uk