Legal

Privacy Policy

Drafted from the operational detail you've provided. Two gaps remain: your ICO registration number, and a confirmed data retention period — both marked below. Please have this checked against current ICO guidance before publishing.

Expedico Logistics Ltd is registered with the Information Commissioner's Office (ICO registration number [XXXXXXX]) and is committed to handling personal data responsibly and in line with UK data protection law.

Who This Policy Covers

This policy applies to the personal data of retail partners who enquire about or hold an account with Expedico, and to the personal data of customers whose deliveries we carry out on behalf of our retail partners.

What We Collect

From retailers, we collect business and contact details submitted through our website or provided directly, including name, company name, email address, phone number, product category and delivery volumes.

From retailers' customers, we collect the information needed to complete a delivery, including name, delivery address, and phone number for courtesy calls and SMS notifications.

How We Use It

We use this information to:

Respond to account enquiries and provide quotes
Schedule, carry out and track deliveries
Contact customers ahead of delivery to confirm access and timing
Provide proof of delivery and performance reporting to retailers through their account portal
Investigate and resolve damage claims

Sharing

We do not sell personal data, and customer information is shared only where necessary to complete an agreed delivery. During periods of high demand, deliveries may be carried out by approved subcontractors acting on our behalf. Expedico requires these subcontractors to meet data protection and confidentiality standards equivalent to our own, and they are not permitted to use customer or retailer data for any other purpose.

[List any third-party software providers used to process data, e.g. your web form provider, CRM, or route-planning software, if applicable.]

Retention

We keep personal data for as long as needed to provide our services and to meet our legal, tax and accounting obligations. [Confirm a specific retention period here, e.g. "for the duration of the account relationship, plus [X] years afterwards," once agreed internally.]

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

Your Rights

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, and to object to or restrict certain uses of it. Contact hello@expedico.co.uk to exercise these rights. You also have the right to complain to the ICO if you believe your data has been mishandled.