Updated: 21st August 2018
For the purpose of data protection legislation, the data controller is DPDgroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY.
If you have any queries, complaints or requests please contact our DPO at the address listed above.
- What information do we collect from you?
- How do we use this information?
- How long do we keep hold of your information?
- Who might we share your information with?
- How is your data stored and kept secure?
- What are your rights?
- How can you access information we hold about you?
- Changes to this Policy
- Contact Us
What information do we collect from you?
We will collect and process the following data about you:
- Information you give us. This is information about you that you give us by providing information through our site, interactive services (such as Predict, Follow My Parcel or Your DPD app) or by corresponding with us by phone, email or otherwise. The information you give us may include your name, address, contact details, safe place (location), location details within the YourDPD App (if approved by the data subject (YOU)) and payment details and is used in conjunction with data we collect from our customers to provide the service to you.
- Information we collect from your use of our site. With regard to each of your visits to our site we will automatically collect the following information:
- technical information, such as the Internet protocol (IP) address used to connect your device to the Internet, whereabouts you connected to our service, your internet service provider (ISP), and what type of device you are using to access our service;
- Information about your use of our services such as details of your visit to our site, pages you view and the resources that you access.
- Information we collect when you call us. If you call us we will automatically collect the following information:
- the phone number used to call us
- a recording of all inbound and outbound calls.
- Information we collect when enabling location services when you use the YourDPD App. location services are required to facilitate a 'go back' if the driver has failed to deliver and has time at the end of the route to revisit a property to attempt a same day delivery. A consumer can say no to this at any time and can opt out of locations services through the devices operating system. We do not actively track the location of data subjects (you) through the app. Location is based on the simulated device ID provided by a third party processor, Localz, so that we are never aware of the data subjects real device ID. Location is also used when selecting a list of local pick up shops from the nearest locations to you.
How do we use this information?We use this information in the following ways:
- Information you give to us. We use this information:
- in order to take steps necessary to assess whether we can enter into a contract with you and in order to perform our contract with you.This includes carrying out our obligations to you and providing you with our products and services;
- for the purpose of improving our service to you, to ensure that content from our site is presented in the most effective manner for you and for your device;
- to deal with any legal queries relating to your use of our service;
- to provide you with service communications so that you receive a full and functional service and so we can perform our obligations to you. These may be sent by email, SMS, Push Notification [or post or, if the circumstances require it, we may contact you by phone]. These will include notifications about changes to our service;
- to provide you with marketing communications including information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
- based on a legitimate interest, to provide marketing communications to:
- new customers with information about services we may offer;
- existing customers with information about products or services different to those previously purchased or enquired about; or
- customers with information about third party products or services which the recipient has explicitly consented to.
- Necessary for the performance of the contract with you for the operation of the YourDPD App; and
- Necessary for our legitimate interests to ensure that our customers receive rewards and offers that are tailored to them and are in line with their expectations.
- Information we collect from your use of the site. We will use this information for the following purposes:
- to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to improve our site to ensure that content is presented in the most effective manner for you and for your device;
- as part of our efforts to keep our site safe and secure;
- to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.
- Information we receive from other sources. See the 'Who might we share your information with?' section below for details of how we use information in conjunction with our associated third parties.
How long do we keep hold of your information?
- We will keep information for the period of time that is necessary to fulfil the original purpose for which we collected the information, up to a maximum of 7 years after the end of our relationship with you unless applicable law requires retention for a longer period of time.
- Telephone records. We will keep these for a maximum of 3 years from the time the recording was made.
- Your DPD App Profile Data. We will retain this data to preserve your shipping profile as a consumer to aid further deliveries. Your data will be held indefinitely but can be removed through the Your DPD App by opting to delete your profile at any time from the 'Settings' menu or by contacting DPD customer services.
Who might we share your information with?
For the purposes set out in the 'How do we use this information?' section above, we may share your personal information with selected third parties, some of whom we appoint to provide services, including:
- business partners, subsidiaries, suppliers and sub-contractors for the performance of any contract we enter into with you;
- analytics and search engine providers that assist us in the improvement and optimisation of our site;
- customer survey providers in order to receive feedback and improve our services.
- cyber security services as part of our efforts to keep our site safe and secure.
- Any member of our group, including parent companies and any subsidiaries of us and such parent companies, for the purposes for which the data was collected.
- to send notifications or account update information (including when new offers for existing or new services have been made available by us) to you by email, SMS text or app push notifications.
Additionally, we will disclose your personal information to the relevant third party:
- In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
- If we are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
How is your data stored and kept secure?
At DPDgroup, we take your safety and security very seriously and we are committed to protecting your personal and financial information. All information kept by us is stored on our secure servers. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our service, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. By agreeing to this policy and using our website, app or other interactive services you acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
We may transfer your data outside the European Economic Area ("EEA"). We will only do so if adequate protection measures are in place in compliance with data protection legislation. We use the following protection measures:
- transferring to European Commission approved countries;
- using European Commission approved model contractual clauses;
- requiring companies we transfer data to in the US to be signed up to the Privacy Shield certification.
Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
What are your rights?
Where processing of your personal data is based on consent, you can withdraw that consent at any time.
You have the following rights. You can exercise these rights at any time by contacting us by email at firstname.lastname@example.org or writing to us at DPDgroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY.
You have the right:
- to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes;
- to ask us not to process your personal data where it is processed on the basis of legitimate interests provided that there are no compelling reasons for that processing;
- to ask us not to process your personal data for scientific or historical research purposes, where relevant, unless the processing is necessary in the public interest.
- to request from us access to personal information held about you;
- to ask for the information we hold about you to be rectified if it is inaccurate or incomplete;
- to ask for data to be erased provided that the personal data is no longer necessary for the purposes for which it was collected, you withdraw consent (if the legal basis for processing is consent), you exercise your right to object, set out below, and there are no overriding legitimate ground for processing, the data is unlawfully processed, the data needs to be erased to comply with a legal obligation or the data is children's data and was collected in relation to an offer of information society services;
- to ask for the processing of that information to be restricted if the accuracy of that data is contested, the processing is unlawful, the personal data is no longer necessary for the purposes for which it was collected or you exercise your right to object (pending verification of whether there are legitimate grounds for processing);
- to ask for data portability if the processing is carried out by automated means and the legal basis for processing is consent or contract.
Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting us using the contact details above. In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner's Office (ICO) in the UK, at any time. The ICO's contact details are available here: https://ico.org.uk/concerns/.
We use the following cookies for the following purposes:
- Strictly necessary cookies. These are cookies that are required for the operation of our site. They include, for example, cookies that enable you to log into secure areas of our site.
- Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our site when they are using it. This helps us to improve the way our site works, for example, by ensuring that users are finding what they are looking for easily.
- Functionality cookies. These are used to recognise you when you return to our site. This enables us to personalise our content for you and remember your preferences.
- Targeting cookies. These cookies record your visit to our site, the pages you have visited and the links you have followed to allow us to improve the page layout and navigation preferences.
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
In order to optimise our service we apply Google Analytics and our own statistical analyses.
- Google Analytics is a web analysis service provided by Google, which is used for purposes of market research and ensuring that the service meets user requirements. Google Analytics uses "cookies", which are placed on your computer to make it possible to analyse how you make use of the service. The information generated by the cookies about your use of the service (including your pseudonymised IP address) is as a rule transmitted to and stored by Google on servers in the United States . Google uses this information in order to evaluate your use of the service and to create reports on activities for the operator of the service. Google may also transmit this information to third parties if this is prescribed by law, or if third parties process the data on behalf of Google. On no account will Google connect your IP address with other Google data. At https://tools.google.com/dlpage/gaoptout?hl=en-GB you can, with effect for the future, opt out of the recording and saving of your data at any time. In addition we use Google Analytics remarketing and reports on demographic features and interests in order to display to website visitors relevant advertisements on the partner websites of the Google display and search network. The saving of cookies makes it possible to analyse user behaviour and activate interest-based advertising.
DPD uses third-party software to improve service, monitor website performance and ensure a reliable service.
- Fabric.IO / Crashlytics (www.crashlytics.com) - Allows our developers and technical teams to measure and monitor the performance of applications and infrastructure
- New Relic (https://newrelic.com/about)- Allows our developers and technical teams to measure and monitor the performance of applications and infrastructure
- Localz (https://localz.com/last-mile-delivery/) to provide the push notification and location services. The location services in use within the YourDPD app are provided to us using an API from Localz that notifies us if an App user is close to the original delivery point. This informs our drivers whether or not they should return to the delivery point to attempt to re-deliver any parcels that were not successfully delivered earlier in the day.
You may also write to us at;
DPDgroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY