Privacy Policy

Last updated: 17 October 2026 This policy explains, in plain English, what personal data Cargo One collects, why, who we share it with, and your rights. It applies to customers, drivers and admin users of cargoone.co.uk and the Cargo One customer and driver apps. 1. WHO WE ARE Cargo One (cargoone.co.uk) is the data controller for the personal data described here. Contact us about anything in this policy at support@cargoone.co.uk. 2. WHAT WE COLLECT - Account details: name, email address, phone number, password (stored only as a secure hash), profile photo if you add one, and passkey/Face ID sign-in records (we never receive your fingerprint or face data). - Job and booking details: collection and delivery addresses, item descriptions, sizes, weights and photos, dates, prices, and booking status history. - Driver documents: driving licence, insurance certificates, vehicle registration (V5C), proof of address, profile photo and vehicle details, used to verify drivers. - Driver location: when a driver is online (Live Mode) or on an active job, the driver app shares the driver's location while the app is open in the foreground. We use it to offer nearby jobs and to show the customer live tracking and arrival times. We do not track drivers in the background or when they are offline. - Customer location: only if you allow it, to show your position on the map. We do not store it. - Proof of delivery: photos, signature and notes uploaded by the driver. - Messages between customer and driver, and ratings and reviews. - Payment information: payments are processed by Stripe. We receive payment confirmations, amounts and refund status, but we never see or store your full card number. - Device push tokens, so we can send booking and job notifications. - Technical data: basic server logs (for example IP address, device and browser type, and error details) used for security and troubleshooting. 3. WHY WE USE IT AND OUR LAWFUL BASES (UK GDPR) - To create your account, take bookings, match customers with drivers, show tracking, handle payments and refunds, and provide support. Lawful basis: performance of our contract with you. - To verify drivers, keep the platform safe and prevent fraud and misuse. Lawful basis: our legitimate interests in running a safe marketplace, and legal obligations where they apply. - To keep financial and tax records. Lawful basis: legal obligation. - To send service messages (booking updates, receipts, password resets) by email and push notification. Lawful basis: performance of our contract. - Location sharing in the apps uses your device permission, which you can turn off at any time in your phone's settings. 4. WHO WE SHARE IT WITH - The other party on a booking: drivers see the customer's name, contact number and addresses for their job once it is confirmed; customers see their driver's name, photo, vehicle, rating, contact number and live location during the job. - Stripe (payments and refunds). - Google Maps Platform (address search, geocoding and distance/journey time). - Mapbox (maps in the apps). - Our email provider, for transactional emails such as receipts and password resets. - Expo and Apple push notification services, to deliver app notifications. - Our hosting and infrastructure providers, who store and run the service on our behalf. - The police or other authorities where the law requires it. We do not sell your personal data, and we do not share it with advertisers. 5. HOW LONG WE KEEP IT - Account data is kept while your account is active. - Booking, payment and invoice records are kept for as long as required for tax and accounting, typically 6 years. - Driver documents are deleted when the driver account is deleted (or earlier when replaced). - Server logs are kept for a short period for security and troubleshooting. 6. DELETING YOUR ACCOUNT You can delete your account in the app (Settings → Delete account) or on the website (Settings → Delete account), as long as you do not have an active booking. When you delete your account we remove your documents and notifications and anonymise your personal details (your name, email address, phone number and profile photo are removed, and your name is replaced with "Deleted user" on past bookings, messages and reviews). Booking and payment records are kept in anonymised form where the law requires us to keep financial records. You will no longer be able to sign in. 7. COOKIES We only use essential cookies and browser storage to keep you signed in and secure. We do not use analytics or advertising cookies, and the apps do not use advertising trackers. Our hosting provider (Cloudflare) records anonymous, cookie-free visit statistics (for example page views) to keep the site secure and running; this does not identify you. See our Cookie Policy at cargoone.co.uk/cookies. 8. YOUR RIGHTS Under UK GDPR you have the right to access your data, correct it, have it erased, restrict or object to how we use it, and receive a copy in a portable format. To use any of these rights, email support@cargoone.co.uk. We will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk). 9. CHILDREN Cargo One is not intended for anyone under 18, and we do not knowingly collect data from children. 10. INTERNATIONAL TRANSFERS Some of our providers (for example Stripe, Google, Mapbox and our hosting providers) may process data outside the UK. Where that happens we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or UK adequacy regulations. 11. CHANGES TO THIS POLICY We may update this policy. If we make important changes we will tell you in the app or by email. The "Last updated" date shows the current version. 12. CONTACT Cargo One — cargoone.co.uk — support@cargoone.co.uk