1. DATA CONTROLLER

For the purposes of the GDPR, Red Cross Delivery acts as the Data Controller, determining the purposes and means of processing personal data.

If you have any questions, you may contact:

Data Protection Officer (DPO)
Address: 44 Moorfields, London, EC2Y 9AL
Email:  info@redcrossdelivery.com

2. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

Identity and Contact Data

• Full name

• Email address

• Phone number

• Delivery and billing addresses

Shipment and Delivery Data

• Sender and recipient details

• Pickup and delivery locations

• Parcel descriptions (non-sensitive)

• Delivery instructions

• Proof of delivery (signature, photo, timestamp)

Payment Data

• Payment card or banking details (processed via secure third-party providers)

• Transaction and billing history

Technical and Usage Data

• IP address

• Browser type and device information

• Website/app interaction data

Location Data

• Real-time courier tracking

• GPS location (where enabled and necessary)

Communication Data

• Emails, chats, and call recordings

• Customer service interactions

3. HOW WE COLLECT DATA

We collect personal data through:

• Direct interactions (placing orders, creating accounts)

• Automated technologies (cookies, tracking tools)

• Third parties (business partners, payment providers)

4. PURPOSES AND LEGAL BASIS FOR PROCESSING

We process personal data under the following legal bases:

Contractual Necessity

• To provide shipping and delivery services

• To manage shipments and tracking

Legal Obligations

• Compliance with tax, customs, and regulatory requirements

Legitimate Interests

• Service improvement

• Fraud prevention

• Operational efficiency

Consent

• Marketing communications

• Optional location tracking

You may withdraw consent at any time.

5. HOW WE USE YOUR DATA

We use your personal data to:

• Process and deliver shipments

• Provide tracking and delivery updates

• Process payments and invoices

• Communicate with customers

• Improve logistics and route optimization

• Prevent fraud and ensure security

• Comply with legal obligations

6. DATA SHARING

We may share your data with:

Service Providers

• Payment processors

• IT and cloud service providers

• Delivery partners and subcontractors

Authorities

• Customs and regulatory bodies

• Law enforcement agencies (when required)

Business Transfers

• In case of mergers, acquisitions, or restructuring

All third parties are required to comply with GDPR and maintain confidentiality.

7. INTERNATIONAL DATA TRANSFERS

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions by the European Commission

8. DATA RETENTION

We retain personal data only as long as necessary:

• Delivery and transaction records: [5–10 years]

• Customer accounts: Until closure

• Marketing data: Until consent is withdrawn

Data is securely deleted or anonymized after retention periods.

9. DATA SECURITY

We implement appropriate technical and organizational measures, including:

• Encryption (SSL/TLS)

• Access controls

• Secure servers

• Monitoring and incident response systems

10. YOUR RIGHTS UNDER GDPR

You have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion (right to be forgotten)

• Restrict processing

• Object to processing

• Request data portability

• Withdraw consent

To exercise your rights, contact us at

• Info Mail: info@redcrossdelivery.com
• Enquiry Mail: enquiry@redcrossdelivery.com

11. AUTOMATED DECISION-MAKING

We may use automated systems for:

• Route optimization

• Fraud detection

These do not produce legal effects without human oversight.

12. DATA BREACHES

In case of a data breach, we will:

• Notify the relevant authority within 72 hours (if required)

• Inform affected individuals where there is a high risk

13. THIRD-PARTY LINKS

Our website may contain links to external websites. We are not responsible for their privacy practices.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Updates will be published with a revised “Last Updated” date.

15. ACCEPTANCE OF THIS POLICY

By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.