Privacy Policy

About this policy

This privacy policy explains how Eagon Transport Ltd ("Eagon Transport", "we", "us", "our") collects, uses, stores, and shares personal information when you use our website, mobile applications, booking platform, and related services (collectively, the "Services").

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully. If you have any questions, contact us using the details at the bottom of this page.

Who we are

The data controller is Eagon Transport Ltd, a company registered in England and Wales. Our registered office is available on request. You can reach our data protection contact at privacy@eagontransport.co.uk.

We are registered with the Information Commissioner's Office (ICO) as a data controller. Our ICO registration number is available on the ICO public register.

Information we collect

Information you give us

• Name, email address, and phone number when you create an account or make a booking
• Collection and delivery addresses (including business names)
• Details about the goods you are sending (description, weight, dimensions, declared value)
• Payment card details — we use Stripe for secure card processing; your raw card number is never stored on our servers
• Correspondence you send us (emails, live chat, support tickets)
• Information provided when you apply to drive for us

Information we collect automatically

• IP address, browser type and version, operating system, and referring URLs
• Pages visited, time spent, and clickstream data
• Device identifiers on mobile applications
• GPS location data when you use our live tracking features (with your consent)
• Cookies and similar tracking technologies (see the Cookies section below)

Information from third parties

• Postcode and address validation data from Royal Mail and postcodes.io
• Distance and route information from Google Maps Platform
• Payment status and fraud signals from Stripe
• Identity verification data where we are required by law to verify your identity

How we use your information

We use your personal data for the following purposes:

• To create and manage your account and verify your identity
• To process, fulfil, and invoice bookings
• To provide real-time tracking and send status notifications by SMS and email
• To generate and store proof of delivery documents
• To detect and prevent fraud, money laundering, and other illegal activity
• To respond to your enquiries and provide customer support
• To send you service-related communications (booking confirmations, receipts)
• To send you marketing communications where you have consented or where we have a legitimate interest
• To improve our website, services, and pricing models through analytics
• To comply with our legal and regulatory obligations

Legal bases

Under UK GDPR, we must have a lawful basis to process your personal data. We rely on the following:

Contract performance

Processing necessary to fulfil a booking contract with you: collecting your details, completing the delivery, generating invoices, and providing proof of delivery.

Legitimate interests

Fraud prevention, website analytics, improving our services, and direct marketing to existing customers about similar services. We have assessed that these interests are not overridden by your privacy rights.

Legal obligation

Retaining financial records for HMRC, responding to lawful requests from regulators and law enforcement, and complying with consumer protection law.

Consent

Marketing emails to new contacts, placing non-essential cookies, and processing special category data where required. You may withdraw consent at any time.

Sharing your information

We do not sell your personal data. We share it only in the following circumstances:

• Drivers and subcontractors who fulfil your delivery — they receive only the information needed to complete the job (pickup and delivery addresses, contact name and phone number)
• Stripe — for payment processing and fraud prevention
• Resend — for transactional and marketing email delivery
• Twilio — for SMS notifications
• Google — for maps, routing, and analytics
• Pusher — for real-time tracking updates
• Cloudflare R2 — for storing proof of delivery documents
• Our cloud hosting provider (Vercel/Neon) — for infrastructure
• Professional advisers (solicitors, accountants, auditors) under confidentiality obligations
• Regulators and law enforcement where we are legally required to disclose
• A buyer or successor entity if we sell or transfer all or part of our business

All third-party processors are subject to data processing agreements and are required to handle your data securely and in accordance with UK GDPR.

Data retention

We retain personal data only for as long as necessary:

• Booking records, invoices, and proof of delivery: 7 years (HMRC financial record-keeping requirement)
• Account data: until you delete your account, plus 30 days for recovery
• Live tracking data: 90 days from delivery
• Marketing preferences and suppression lists: until you unsubscribe or request deletion
• CCTV footage from vehicles: 28 days unless required for a claim
• Application and recruitment data: 6 months if unsuccessful

After the applicable retention period, we securely delete or anonymise your data.

Your rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — ask us to delete your data where there is no legitimate reason to retain it
• Right to restriction — ask us to suspend processing of your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Rights in relation to automated decision-making — we do not make solely automated decisions that significantly affect you

To exercise any of these rights, email privacy@eagontransport.co.uk or write to our registered office. We will respond within one calendar month. You will not be charged for making a request, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Cookies

Our website uses cookies and similar technologies. Please see our Cookie Policy for full details of the cookies we use, their purpose, and how to manage them.

Most of our website analytics is first-party: we measure visits and the quote/booking journey using anonymous, randomly-generated identifiers stored in our own secure database, not derived from any personal data. We do not send your name, email, phone number, full postcode or exact booking details to any third-party analytics or advertising provider — postcodes are reduced to their outward district (for example "M1") and prices to coarse value bands before any analytics is recorded.

Non-essential cookies are split into two consent categories you control independently: analytics (our first-party measurement and, if enabled, Google Analytics) and marketing (advertising and remarketing pixels such as Meta or Google Ads, which are off unless you opt in). Analytics is used only to improve our website and services; it is never used to make pricing or security decisions about you, and it cannot identify you. You can change either choice at any time from our Cookie Policy page.

International transfers

Some of our third-party processors (including Google and Stripe) may transfer your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including the use of the UK International Data Transfer Agreement (IDTA) or adequacy decisions where applicable.

Changes to this policy

We may update this policy from time to time. Material changes will be notified to registered users by email at least 14 days before they take effect. The "Last updated" date at the top of this page will always reflect the most recent version. Continued use of our services after the effective date constitutes acceptance of the updated policy.

Contact us

For any privacy-related questions, requests, or complaints, contact us at:

• Email: privacy@eagontransport.co.uk
• Phone: 07835 272954
• Post: Data Protection, Eagon Transport Ltd, [Registered Address]

Alternatively, use our contact form.