1. Who we are and scope
WeDeliver Logistics Limited operates the WeDeliver website, mobile application and marketplace. For personal data for which WeDeliver determines the purposes and means of processing, WeDeliver acts as controller. Retailers, payment providers and delivery partners may also act as separate controllers for processing they carry out for their own purposes.
This policy covers personal data processed through customer accounts, orders, deliveries, customer support, marketing communications and use of the website or app. The Platform is intended for people aged 18 and over.
2. Personal data we collect
Depending on how you use the Platform, we may collect:
- your name, email address, telephone number, login credentials and account preferences
- delivery and billing addresses, postcode and delivery instructions
- order history, products ordered, retailer, substitutions, refunds, favourites and related communications
- payment status, transaction identifiers, payment tokens, billing information and limited card information supplied by the payment processor
- IP address, browser, operating system, device type, app version, device identifiers, login and security logs, timestamps and crash information
- location information where you choose to provide or enable it
- customer-service emails, support requests, complaints, chats and photographs you send to us
- marketing preferences, unsubscribe requests and information about interactions with communications where available
Stripe and PayPal process card and payment credentials. WeDeliver does not ordinarily receive or store complete card numbers.
3. How we collect personal data
We collect information directly from you when you create an account, place or manage an order, contact us or use the Platform. We may also receive information from retailers, delivery partners, Stripe, PayPal and other service providers, and may collect technical information automatically from your device.
4. How and why we use personal data
We use personal data where necessary to:
- create, authenticate and manage your account
- process and facilitate orders and payments
- provide the retailer with information needed to pick and fulfil your order
- arrange delivery and provide delivery partners with the information they need
- handle substitutions, refunds, complaints and customer support
- prevent fraud, misuse, unauthorised access and security incidents
- operate, maintain and improve the Platform
- comply with legal, tax, accounting, regulatory and law-enforcement obligations
- establish, exercise or defend legal claims
- send marketing communications where we have a lawful basis to do so
Our legal bases may include performance of a contract, taking steps at your request before entering into a contract, compliance with legal obligations, our legitimate interests and consent where consent is required.
5. Marketing communications
We may send promotional emails, SMS messages or push notifications only where the applicable legal requirements are met. This may be based on valid consent or, where the legal conditions are satisfied, a specific existing-customer marketing exception.
You can object to or unsubscribe from marketing at any time using the unsubscribe method in the message or by contacting help@wedeliver.uk.com. You can also change push-notification permissions in your device settings. Opting out of marketing does not stop service messages that are necessary for your account, orders or deliveries.
6. Who we share personal data with
We may share personal data where necessary with:
- participating retailers, so they can accept, prepare and fulfil orders and handle product-related issues
- delivery and logistics partners, which may receive your name, address, telephone number, delivery instructions and order or parcel reference
- Stripe, PayPal, banks and payment networks
- hosting, cloud, database, cybersecurity, communications, customer-support and other technology providers
- professional advisers such as lawyers, accountants, auditors and insurers
- courts, regulators, tax authorities, law-enforcement bodies and other competent authorities where required
- a buyer, investor or other relevant party in connection with a genuine financing, restructuring, merger or sale process, subject to appropriate safeguards
7. International data transfers
WeDeliver Logistics Limited is based in the United Kingdom, so personal data relating to customers in Germany or elsewhere in the EEA may be processed in or transferred to the United Kingdom. Where a transfer is not covered by an applicable adequacy decision, we will use an appropriate transfer mechanism where required, such as approved Standard Contractual Clauses and any additional safeguards that are necessary.
8. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, regulatory, fraud-prevention and dispute-resolution requirements.
Retention periods depend on the type of information, the duration of your account, statutory record-keeping requirements, applicable limitation periods and whether a complaint, dispute, security issue or investigation is ongoing. When information is no longer required, it will be deleted, anonymised or otherwise securely disposed of.
9. Your data-protection rights
Subject to applicable law and relevant exceptions, you may have the right to:
- access personal data we hold about you
- correct inaccurate or incomplete information
- request deletion of personal data
- request restriction of processing
- receive certain personal data in a portable format
- object to processing based on legitimate interests
- object to direct marketing at any time
- withdraw consent where processing is based on consent
- lodge a complaint with a competent data-protection supervisory authority
To exercise a right, contact help@wedeliver.uk.com. We may need to verify your identity before acting on a request.
10. Cookies and similar technologies
The Platform may use cookies, local storage, software development kits and similar technologies that are needed for functions such as authentication, shopping baskets, security, fraud prevention, essential preferences and checkout.
We do not currently use Meta Pixel, Google Analytics, Google Ads Pixel or TikTok Pixel. If we introduce non-essential analytics, advertising or tracking technologies for which consent is required, we will ask for the required consent before using them and update this policy.
11. Location and device permissions
Where the Platform offers location-based features, we may process device location only where you enable the relevant permission or otherwise provide the information. You can disable location and notification permissions in your device settings, although some features may then be unavailable.
12. Children
The Platform is intended for people aged 18 and over. A person under 18 must not create an account or place an order. If we become aware that information has been collected from a person under 18 contrary to this requirement, we will take appropriate steps in accordance with applicable law.
13. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, destruction, alteration, disclosure or access. No internet-based service can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential and should contact us promptly if you believe your account has been compromised.
14. Complaints and contact
If you have a privacy question, want to exercise a data-protection right or have a complaint about how we handle personal data, contact help@wedeliver.uk.com. You may also have the right to complain to the competent data-protection supervisory authority in Germany or another EEA country.
Contact details
WeDeliver Logistics Limited
Company number: 14189308
Registered office: 30 Churchill Place, London, England, E14 5RE
Email: help@wedeliver.uk.com