Our Privacy Policy
The pages on this website (“the Website”) are published by Drop Logistics Delivery Network

Maintaining the security of your data and your right to privacy is a priority to DLS. We will handle your personal data legally and fairly at all times and we will be transparent about what data we collect about you and how we use it.

This policy provides you with details about:

• What personal data we collect
• How we use your personal data
• How we ensure your privacy is maintained
• Your legal rights about your personal data

The personal data collected

DLS may collect the following information about you:

• Your name, age/date of birth, and gender
• Your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers), and email address
• Orders made by you
• Your online browsing activities on our websites
• Your interests, preferences, feedback, and survey responses
• Your location
• Your correspondence and communications with us and
• Other publicly available personal data

Our website is not intended for children, and we do not knowingly collect data relating to children.

This list is not exhaustive, and, in specific instances, we may need to collect additional data for the purposes set out in this Policy. Some of the above personal data is collected directly, for example when you set up a request on our website, or send an email to our customer services team. Other personal data is collected indirectly, for example, your browsing or shipping activity. We may also collect personal data from third parties who have your consent to pass your details to us or from publicly available sources.

How we use your data

DLS (and trusted partners acting on our behalf) uses your personal data:

• To provide goods and services to you
• To make a tailored website available to you
• To verify your identity
• For crime and fraud prevention, detection, and related purposes
• For market research purposes – to better understand your needs
• To enable us to manage customer service interactions with you

Sharing data with third parties

In order to make certain services available to you, we may need to share your personal data with some of our service partners. These include IT, delivery, and marketing service providers, accountants. We only allow our service providers to handle your personal data when we have confirmed that they apply appropriate data protection and security controls. We also impose contractual obligations on service providers relating to data protection and security, which means they can only use your data to provide services to DLS and to you, and for no other purposes.

Aside from our service providers, DLS will not disclose your personal data to any third party, except as set out below. We will never sell or rent our customer data to other organizations for marketing purposes.

How long do we keep your data?

We will not retain your data for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of data, however, the longest we will normally hold any personal data is 2 years.

How we protect your data

DLS is committed to keeping your personal data safe and secure.

• Encryption of data
• Regular cybersecurity assessments of all service providers who may handle your personal data
• Regular scenario planning and crisis management exercises to ensure we are ready to respond to cybersecurity attacks and data security incidents
• Regular penetration testing of systems
• Security controls which protect our entire IT infrastructure from external attack and unauthorized access
• Internal policies setting out our data security approach and training for employees

Legal basis for using your data

DLS collects and uses customers’ personal data because it is necessary for:

• The pursuit of our legitimate interests
• The purposes of complying with our duties and exercising our rights under a contract for the provision of services or
• Complying with our legal obligations

In general, we only rely on consent as a legal basis for processing in relation to sending direct marketing communications to customers via email or text message. Customers have the right to withdraw consent at any time. Where consent is the only legal basis for processing, we will cease to process data after consent is withdrawn.

Your rights

You have the following rights:

• The right to ask what personal data that we hold about you at any time
• The right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you free of charge and
• The right to opt out of any marketing communications that we may send you

If you wish to exercise any of the above rights, please contact us using the contact details on our website.