1. Who controls your data
The controller is Kontrola Digital Ltd, trading as Couriyo, registered in England and Wales under company number 15658892. Our registered office is Suite Ra01, 195-197 Wood Street, London, England, E17 3NU.
For privacy questions or to use your rights, email privacy@kontroladigital.com.
2. Personal data we use
Depending on how you use the service, we may use:
- Senders and business contacts: name, email address, phone number, business details, account activity and booking history.
- Recipients and the sender's customers: name, phone number, delivery address, delivery instructions and delivery status.
- Drivers: Autocab driver ID, name, callsign and phone number supplied by Magnum Taxis.
- Delivery proof: proof photographs, signatures, PIN records, notes the driver records about where the parcel was left or who received it, and the time and type of proof captured.
- Tracking: tracking page views and the delivery status needed to show the page.
- Payments: payment and transaction details handled by Stripe. Couriyo never sees or stores card numbers.
- Technical data: a strictly necessary session cookie and information needed to keep the service secure and working.
3. Why we use it
- Contract: to create accounts, provide quotes, book and dispatch deliveries, share tracking, capture proof, provide support and process payments or invoices.
- Legitimate interests: to keep the platform secure, prevent misuse, administer the service, handle claims and service enquiries, and understand tracking-page use needed to operate deliveries. We balance these interests against your privacy rights.
- Legal obligation: to keep accounting and invoice records, meet tax and regulatory duties, and respond to lawful requests.
We do not use analytics or advertising cookies, and we do not use delivery data to train models or sell personal data.
4. Health and other special category data
A sender, such as a pharmacy, may include a prescription or information that reveals a person's health in the contents or delivery instructions. Couriyo processes that information as a processor for the sender, only on the sender's documented instructions and only to arrange and evidence the delivery.
The sender is responsible for identifying the correct Article 6 basis and Article 9 condition. Depending on the service, this may include processing by a pharmacy or health professional under Article 9(2)(h), where its conditions are met, or the person's explicit consent under Article 9(2)(a). Couriyo does not use this information for advertising, profiling or any unrelated purpose.
Safeguards include data minimisation, access limited to the people and services needed to dispatch the parcel, encryption in transit and at rest through our hosting providers, a fixed deletion schedule, and confidentiality obligations for staff and suppliers.
5. Business customers' data
When a business gives us its own customer or recipient data, that business remains the controller and Couriyo acts as its processor. The business must have a lawful basis, provide fair privacy information and send only the information needed for the delivery. Our processing terms are in section 13 of the terms of service.
6. Who receives it
- Magnum Taxis and Autocab, to dispatch and manage the delivery.
- Cloudflare, for hosting, the database and email delivery.
- Stripe, for card payments and payment processing.
These providers act as our sub-processors where they handle data for the service. We only share the information needed for the relevant service or legal purpose. We do not sell personal data.
7. International transfers
Cloudflare and Stripe may process data in the United States. Where data leaves the UK, we use appropriate safeguards, such as the UK Extension to the EU-US Data Privacy Framework where the provider participates, or standard contractual clauses and the UK addendum where appropriate.
8. How long we keep it
- Booking and invoice records, including sender-provided contents and delivery instructions: 6 years.
- Proof photographs and signatures: 12 months. After that, the proof record keeps only its type and capture time.
- Proof notes: 12 months.
- Sign-in links: usable for 15 minutes; used or expired links are deleted within 24 hours.
- Sessions: 30 days.
- Autocab event records: 90 days.
- Public tracking details: 30 days after the job reaches a terminal state. After that, the tracking page shows only the terminal delivery status; personal details are no longer shown.
We may keep limited information for longer where we need it to establish, exercise or defend legal claims, or where the law requires it.
9. Cookies
We use one strictly necessary session cookie to keep a signed-in session working. It is not used for analytics or advertising. The Inter typeface is served from Couriyo's own website; we do not load Google Fonts. You can block cookies in your browser, but account features may not work correctly.
10. Your rights
Under UK data protection law, you may ask for access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it.
If a business sent us your data, please contact that business first for requests about its customer data; we will help the business respond. Otherwise, to use your rights, email privacy@kontroladigital.com. We may need to verify your identity. We normally respond within one month, although the law allows an extension for complex requests.
11. Complaints
Please contact us first so we can try to resolve your concern. You can also complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
12. Changes to this notice
We may update this notice when our service or legal obligations change. The current version will always be published on this page.