Privacy Policy.

YourWays is a UK-based cargo transport and courier platform connecting customers with verified professional drivers for delivery, removal, and logistics services across the United Kingdom.

For the purposes of data protection law, YourWays is the data controller — meaning we are responsible for deciding how and why we collect, store, and use your personal information.

You can contact us regarding privacy matters at:

We collect various categories of personal data in order to provide our services effectively and safely. This includes:

We collect your personal data through the following methods:

• Direct interactions — when you register an account, request a quote, place a booking, contact our support team, or submit a review.
• OTP verification — when you log in or sign up using your mobile phone number, we collect confirmation of that number.
• Automated technologies — cookies and analytics tools collect technical data as you interact with our website and app.
• Third-party services — payment processors such as Stripe may share transaction data with us; Google Maps provides location data when you search for addresses.
• Driver-uploaded evidence — photographs and delivery notes submitted by our driver partners at the point of pickup and dropoff.

We use your personal data only when the law permits. Our legal bases for processing are:

• Performance of a contract — to fulfil your booking, assign a driver, process payment, and complete delivery.
• Legitimate interests — to improve our platform, prevent fraud, maintain security, and communicate service updates.
• Legal obligation — to comply with UK laws, tax regulations, and regulatory requirements.
• Consent — for optional marketing communications, which you may withdraw at any time.

Specifically, we use your data to:

• Create and manage your account
• Process and coordinate your delivery bookings
• Calculate and present quotations based on your locations and items
• Assign and communicate with drivers on your behalf
• Provide real-time delivery tracking
• Process payments securely via Stripe
• Send booking confirmations, status updates, and delivery notifications via SMS and email
• Respond to enquiries and provide customer support
• Send promotional notifications when drivers are active in your area (Smart Promotions feature)
• Detect and prevent fraudulent activity
• Improve our platform through anonymised analytics

We do not sell your personal data to third parties. We share your data only where necessary and permitted by law with the following categories of recipients:

• Driver partners — your name, phone number, pickup and dropoff addresses are shared with your assigned driver to enable the delivery to be completed.
• Payment processors — Stripe processes your payment data under their own privacy policy and PCI-DSS compliance standards.
• Mapping services — Google Maps processes location data to display routes, autocomplete addresses, and show driver tracking.
• Authentication services — Firebase processes your phone number for OTP authentication.
• Analytics providers — anonymised usage data may be shared with analytics services to help us improve our platform.
• Regulatory authorities — where required by law or regulatory obligation, we may share data with HMRC, the ICO, or law enforcement agencies.
• Business transfers — in the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the new entity. You will be notified in advance.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Account data is retained for the lifetime of your account plus 2 years after account closure.
• Booking and transaction records are retained for 7 years to comply with UK tax and financial regulations.
• Delivery photographs and signatures are retained for 12 months from the date of delivery.
• Marketing preferences and consent records are retained for 3 years from your last interaction.
• Support correspondence is retained for 3 years.

When your data is no longer required, we will securely delete or anonymise it in accordance with applicable law.

Under UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at privacy@yourways.co.uk. We will respond within 30 days.

• Right of access — you may request a copy of the personal data we hold about you (a Subject Access Request).
• Right to rectification — you may ask us to correct inaccurate or incomplete data about you.
• Right to erasure — you may request that we delete your personal data where there is no longer a legitimate reason to retain it.
• Right to restrict processing — you may ask us to suspend processing your data in certain circumstances.
• Right to data portability — you may request your data in a structured, machine-readable format.
• Right to object — you may object to our processing of your data where we rely on legitimate interests as the legal basis.
• Right to withdraw consent — where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Our website uses cookies — small text files stored on your device — to improve your experience and help us understand how you use our platform.

• Essential cookies — required for the website to function, including authentication sessions and security tokens. Cannot be disabled.
• Analytics cookies — help us understand which pages are visited and how users interact with our site. All data is anonymised.
• Marketing cookies — used to show relevant promotions. Only active if you have given consent.

You can manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of our website.

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• Encrypted data transmission using HTTPS/TLS across all our services
• Secure database storage with access controls and audit logs
• OTP-based authentication to prevent unauthorised account access
• Payment data handled exclusively by PCI-DSS compliant processors (Stripe)
• Regular security reviews and staff data protection training

While we take every precaution, no transmission of data over the internet is completely secure. If you suspect a security breach affecting your account, please contact us immediately at privacy@yourways.co.uk.

Our website may contain links to third-party websites, including our social media profiles (Facebook, Instagram, Twitter, LinkedIn), the Google Play Store, and the Apple App Store. These websites operate under their own privacy policies, for which we accept no responsibility.

We encourage you to review the privacy policies of any third-party sites you visit via links from our platform.

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take prompt action to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users by email or in-app notification
• Display a prominent notice on our website for a reasonable period

Your continued use of YourWays following the posting of changes constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or would like to report a concern, please contact us: